Divulge-Stealer-main[.]zip

resource	yara_rule
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.Licensing.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.1.5.3.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuButton.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCheckBox.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCircleProgress.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuColorTransition.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDataGridView.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDatePicker.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDropdown.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuFormDock.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGauge.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGradientPanel.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGroupBox.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuImageButton.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuLabel.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPages.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPanel.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPictureBox.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuProgressBar.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRadioButton.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRating.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuScrollBar.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSeparator.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShadowPanel.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShapes.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSlider.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSnackbar.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuTextBox.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuToggleSwitch.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuToolTip.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuTransition.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuUserControl.dll	agile_net
static1/unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.Deprecated.dll	agile_net

resource
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.1.5.3.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuButton.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCheckBox.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCircleProgress.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuColorTransition.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDataGridView.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDatePicker.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDropdown.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuFormDock.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGauge.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGradientPanel.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGroupBox.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuImageButton.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuLabel.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPages.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPanel.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPictureBox.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuProgressBar.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRadioButton.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRating.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuScrollBar.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSeparator.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShadowPanel.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShapes.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSlider.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSnackbar.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuTextBox.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuToggleSwitch.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuToolTip.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuTransition.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuUserControl.dll
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.Deprecated.dll

resource
unpack002/Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.Licensing.dll
unpack002/Divulge-Stealer/Divulge.builder/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
unpack002/Divulge-Stealer/Divulge.builder/obj/Release/Divulge.builder.exe
unpack002/Divulge-Stealer/Divulge.builder/obj/Release/TempPE/Properties.Resources.Designer.cs.dll
unpack002/Divulge-Stealer/Divulge.payload/obj/Release/Divulge.payload.exe
unpack002/Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/net40/Mono.Cecil.Mdb.dll
unpack002/Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/net40/Mono.Cecil.Pdb.dll
unpack002/Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/net40/Mono.Cecil.Rocks.dll
unpack002/Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/net40/Mono.Cecil.dll
unpack002/Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/netstandard2.0/Mono.Cecil.Mdb.dll
unpack002/Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/netstandard2.0/Mono.Cecil.Pdb.dll
unpack002/Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/netstandard2.0/Mono.Cecil.Rocks.dll
unpack002/Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/netstandard2.0/Mono.Cecil.dll
unpack002/Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/net20/Vestris.ResourceLib.dll
unpack002/Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/net35/Vestris.ResourceLib.dll
unpack002/Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/net40/Vestris.ResourceLib.dll
unpack002/Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/net45/Vestris.ResourceLib.dll
unpack002/Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/netstandard2.0/Vestris.ResourceLib.dll
unpack002/Divulge-Stealer/packages/jose-jwt.5.0.0/lib/net40/jose-jwt.dll
unpack002/Divulge-Stealer/packages/jose-jwt.5.0.0/lib/net461/jose-jwt.dll
unpack002/Divulge-Stealer/packages/jose-jwt.5.0.0/lib/net472/jose-jwt.dll
unpack002/Divulge-Stealer/packages/jose-jwt.5.0.0/lib/netstandard1.4/jose-jwt.dll
unpack002/Divulge-Stealer/packages/jose-jwt.5.0.0/lib/netstandard2.1/jose-jwt.dll

Divulge-Stealer-main.zip

SHA256 f3d1600d4ff5650a7039ce81ddc9a686299b99d4363e06c1da004876c7e8a158
MD5 9916a9f7834bb786ab1c8e4f3c846e25
SHA1 5ff3a92340274a491fbea77774a4219d79c276b1
SHA512 9436c112e8100e595228cebb833ac95cd5b3cda2ab3925fdfeae6964d39082bf4493068aef5e7d5be08a12f7f90748280e0be2c04ad8e349c0fa147a84dd24b2
SSDEEP 393216:EY2fgQr23K9sy8Z0sfT6jESICyjzwQY2DBON4a8YQlUDym:EfddmHTlSIhqoWn8YN
TLSH
T1132733058555CC8221E53F4F4DA46772436C382B91ADEF1B676313CCFAEA93258FA4E8
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer-main/Divulge-Stealer.zip

SHA256 7633b7b85e5ab2d29ef003a3f94c8c3907c7d4884f41eaa1d3dc2196abd9a6bf
MD5 7ea61a73aa0d29f111a45ee7a60a25e8
SHA1 0e988ebfbd471a658be83b439aa16ba93eece7c8
SHA512 94424378cbc4b8491af3eb54b69be40a34e8291ff2cffa35b8555124d1b8021e6dc8f9bce9af697ff57d405ab8d210003f766ca715535f7b5a92a80285448c2a
SSDEEP 393216:jGMIxGsz8JsI2/vVmItX667cXEaSTputmagT7MkDaBPEQSzcZgl:j5IfOurx5cXEl+magT3QPEQe
TLSH
T135273316A5988701F2E1BB3E9920459BC23C7652A545FCE735D233CFF8036E60ABA17D
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge Stealer.sln

SHA256 c39601e21b4e0ec819134dcf1573521a1f311f6519febc32cf36da60939d7d2d
MD5 84fb51b7eed9f80c263a46bae992c4a9
SHA1 1ae1198570516ba9dbb98f3aca8184d70fdd3900
SHA512 fabc9450369b54ea590aa40633f5e73ac45041551eac5f49d45f4bffbbb74ac4fdd8ecbaf144d8b49dc2aa9c9a331f42f0edfde3f2d91737599724a0be55fedc
TLSH
T178314ABD215D6DE5E98523EBD2B21DDB6E37918092D91D3C025E20982A2FD04907BC9F
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/.vs/Py.builder.csproj.dtbcache.json

SHA256 857dc88e855d29e0ef9440d7a79f237e06fe64edca86e7f29242faa63972eb8c
MD5 9e8500e91d3fb7536fd34874d317c548
SHA1 a434f19887fa95bc98fa3708f40de081ef8cba5c
SHA512 4e4e6a4ecc5bf12f3e859146c43baddd618275260426c9e6e56b7f5992bd469419c0b9ac00b06942f5cf55dee889b0b3ad4cb79b69d26cdca7e613b9fd1cfa5e
SSDEEP 96:D1ZpC6OMyWMSQ2b3fzxauEJ78F6FVfysROgGPs7HZLC7eypTIsXfwUBGXuQvkgGv:YYJjiZ2kxZrJaB3
TLSH
T150725C39501DC9ACB3611646E5534F8FF642A01E64ED9E2CC608CD4E67D3EE4A2362FB
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/App.config

SHA256 a96741dfd4eba614c551b97e3ad473c6199569e61a4271eb3d9f69d7a3ee9556
MD5 0e6ecd78d7976a57edff197248f5bcae
SHA1 b18b30224de5443cc78fb8f700abf9f8f5f13550
SHA512 c42251db2817c3720a0946fc70319f64d8eddc2d9d253a782cc0f5f8074dd479a9b3baad60ba84a44e07e67c34f0fc0834a864648f2785f2b43ed22afbef3e65
TLSH
T1B6F0592184C47EA68F721AA33B769464DBB843732C8C005CB4AE6E974F2195D5207232
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/Components/Build/Builder.cs

SHA256 6d89bd6778ebd7d487f9dc2a14cbf551165bca1d25acc5f14473dcf018e86b7b
MD5 f01e54aaf24e68e78718d98067051564
SHA1 f91797b8b90dbb241d7585c230291b119f9067ed
SHA512 51e1598e61d4bb70d0347b10630d336ecfa25f0c6bb5949505a4f21171192e32477454d380bab3ab0218abfed63784d1e377bbc5fd737ef0f9e33c0d9099d891
SSDEEP 192:iDsWJH6g62rJSiy6U1yiYv6dfso+IrkiNsh68fXX51ACTqQ4BL:iAgH6ESeU6vFo+cshhfn5It
TLSH
T18112ED1BB677CD8908A74037EBFB60449B216197926AFC7A7C4DA040CF9479103F5AF6
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/Components/Build/Renamer.cs

SHA256 bf2dbfdd5e16697693e1408727e951d2487d1d8cb74a5986769684d11ac6f143
MD5 8e2380a949f9719992bcd68416a0672a
SHA1 44567d68ec619a06c00deafade6337cb4da43a4d
SHA512 43aa1144a4a6e92236fbd29e6ebef7a833ce6bdfd93a88242e748ced4d410e7dc86cf1dca0baeafd5d155dd9441039cea18812e625dbe29b658a6923bdc9f16c
SSDEEP 96:Jj4Y26FPmZ9w39gH3zm/I35LZZEw7Iha2Cyb:iFWY9w3SC/ELZZQha2Cyb
TLSH
T120E1DB183CD3D0458983D938CB9B5D056B69A50B565FCCD2B9AC231DCF81A38B9B2FD8
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/Components/Forms/AssemblyEditorForm.Designer.cs

SHA256 f52dcac26a65b2003ceef0f3cbd3c3fc76853f5ab52ea6a98af5a3fb573543e7
MD5 79c9f0a613f8c84f4e8445982fc9d10b
SHA1 91b8078f5398dfad885cc9bdca8096bcf2ef88d3
SHA512 b9cf21eeb9705998b446c763f19d81b71a81ea097dedccd825354b429bd117ea655a45fd65e861d5581ebf2315d87884a2483f84038d8b0b42e12339f4621528
SSDEEP 384:6wD4c6SazzJv6Lg0NIvzhQ0iliZqCtz2Hcu8el4zMxA6uodTTdl4REyi0S4Pgo9l:VD4BACFAogS0Q10E9io
TLSH
T10273BC3CA35F895CCA7601899F699981DE25B21F6CD3CD3D78AF42C1DF32124462CA7A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/Components/Forms/AssemblyEditorForm.cs

SHA256 91c0ab5ca1fec988647a6ac7ff54dfede26b7928f47af89eb56f14ca2afe2f81
MD5 4931d87a1b64cc06ca4bacb597f11f1f
SHA1 80eb2dd9735420fbdab755ab7f5e819e8e1fc67e
SHA512 fa56aef8f702fdb4a591d5897bb71075256a9ce8241d2a74104ab738b3ff2e93932ffe90c3a5800244f025fb8ab5f5d5e41e323124de4e89c2d01c14b5eedf4a
TLSH
T18B41AF6C22AF8229C042513BDF51A6572F69532F227BEC203DDE4541DF1257057B8BA8
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/Components/Forms/AssemblyEditorForm.resx

SHA256 c89e0eedaf2ab4e5bd1389a28f1cd0ac45fca28153c957fdbc09fd0a69815275
MD5 0d6ee3d4fa32ff908d752d0c41428881
SHA1 8b4d7aef0226fce11317e4dccef35a0adf7bbe64
SHA512 bb159a63cbd7ac15c931529d9a08a81854c7681ba5880bbf306c62598df3054e64c17470a97e941c8abb3d2ea7b1f241d5156ac14ef5d27b3496b2902f6a5406
SSDEEP 384:KjrbLPxsLvASvKgwyahFQawzYgwtok2PdI/ok2PLok2PdNok2P3Bok2Pbok3QnG9:KjXdskSv6IBPdIMPoPduP3SPFQnGbQup
TLSH
T1F452612471C1DD6507B74D78B2622A84FFB8921B2374AC5474DE761B8F3B8C17AA33A1
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/Components/Forms/MainForm.Designer.cs

SHA256 fc12eed15c238847f7d6c554eecec8bd79fad448a42449d20c6121d8d148c771
MD5 e486520957e3d73fe6731e233ad8a1e6
SHA1 319b1a0e919c7a5b63b9fb2f960d0f9b18f397e7
SHA512 b47358f2291c28b12ac7b0d7045177ef1ac498d27ee9a0cd6a6b04a3484406b7f52ae5711ea975465c4e657c614fb0261a231965acc29ea3c7fc39dbe3b515d0
SSDEEP 768:FD4nHeUGaz1Nb9xheGWN7S+wv7iU3JxC8uPNxJVEUBR1LxFT:+1tz1Nb9xheGWN7S+wv7pvuXzDT
TLSH
T11DB3BA79631E9508EE7650480F259FC2EE36750F6983C93D38AF49A18F35538872ED3A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/Components/Forms/MainForm.cs

SHA256 7c39dc17a03121b88e6ab33d246ecbb735f3f9207ef7a6e05a819fcb31e974c5
MD5 69e71942d041092f3f23bcf2e7e81b44
SHA1 244e321ebd957d73ab1a886633e3cc56bef1a254
SHA512 11b93e14533c284790edff4fb32a8fbd4cfea662e3c0aba30a8561f1f08518642df6605e5f8d3727bc0e9111a43f83d138f66784374d1090ad5e47e39e4fb39d
SSDEEP 192:9KrytGbeWaT1NSXeTIiM3fm/GsULz7XteoYwKQ/tJTts+7LqxW:9KrYGtk14O4m/8Xteon7tJTtbCg
TLSH
T1BB32422D52079A6948B39634EF435A9EFF56041B037269607ECD42A81F3046857F8FFB
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/Components/Forms/MainForm.resx

SHA256 df12185086a968392dc8657927cb3e9de3db978141ad6c1ff13e47e45a76d65b
MD5 2d090538c0845bf28c04f64a322540ac
SHA1 a8dca1ece94778d097ef0b99e4d04cd08732f0b9
SHA512 e4937ac1af2d74792a3f42c8a9a880b3b152fcb3c74101d2394494647945280c064e4c31399872f75eb497501597449baf5fecb0ea5362c5c02276ebd5933f42
SSDEEP 384:KjrbLPxsLvASvKgwyahFZIaw0g6Ygw1okJXClW6N6pokJXC0okJXCx6qzokJXC+F:KjXdskSv6jRwXClboFXCMXC8iXCTfXCh
TLSH
T17292762572C2AC2917F70C6DB3221AC4FEF4521722656C5478DE360B9F3B9C4ABA3365
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/Components/Utilities/Common.cs

SHA256 6183ca735885b603053c657ca41e40fee1863b7839b4ce36842721cc7c0cffa3
MD5 d70adda417daa065d988e61b0818592d
SHA1 68f94123e2edf3737452ec88049f97dfc026782b
SHA512 456019de3c93150918028506d833c3b4ebc5b42da2e878ccfd95e558355e0976134094a4d8ae1a9ff02bbbce258d6d78b4b6bf329352fb64bb5d17f1b2877996
TLSH
T1B5F046283A57C60C4593240B8E9E9124A376732363AA8D61FCCC1611CF6241066F8E48
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/Divulge.builder.csproj

SHA256 4c9869745a76c7196f210b7335ce868c8c5a76e3cdc2c94ba2e207cf2b34e2c3
MD5 d3c68390c293e389bc66303c89cca56e
SHA1 b78a7214b55dea3ec855bfe4509f5231dc0fc07e
SHA512 2335a8d9aaeee5c9c6d32ae040258f8b64701c148a1aa7ecdc98e251daca7a35807e6e340ce8ca912246e2ee6eae6fa935acfb2736d8b049c9809412a9c90745
SSDEEP 192:7Wf4AZXZixWmsVLqG7VWXEmWgPRf0FsPI:7WfZXZibG7VWUmWgPRf1g
TLSH
T1AF726821F1DCAFA9137112104D93AB8FDD1E72AB18C88465796C628FCF72C9A435366B
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/Program.cs

SHA256 45f0a36f7379d007d6715c91cdb1dd6afaeefa093080c86ccb0b1bbed4eada78
MD5 768d978e7cc92df6f9c50520261e0925
SHA1 90e097c955401241ecb3b2cfc6a40ea8c7d03f4a
SHA512 feb46e1b4e99a763097100585f64f5b551ba38b716b91ce66b1b77f3988283d5a034914ba296f613aac52d2913819f4758b05f533541db7f0f1b0ef2dc2bad03
TLSH
T1AEF0E2BA329AD7980DB341F71B1AA0C8D373263B4AB7A500B86D0691CF360140339E15
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/Properties/AssemblyInfo.cs

SHA256 60e78d46554e3f296f31de10f324f03fd07b08b12ae99a72dac83dc0bea8f500
MD5 d6750af9695762282eb41871b31cf7a7
SHA1 e865ec8f9453fc637419ab859c111189ae36699f
SHA512 1d3eb2cea9fdc4d823fd79bec0014cc74dfb764706cab470517b93a0054572ba618ba3bf8bb0c0cda5fde3f82f8d4799b5bacae773b8399c7c0b497843ec4c83
TLSH
T1F4315D296341E37E8F550593AE6B76C5C3BD632893E60C0535BCB853E201A7843B96BB
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/Properties/Resources.Designer.cs

SHA256 0009fdc443d370c3591f85ee61b55acc1831332274b599cd911dfe461f772b14
MD5 1ee69ad849b142aee290e5674f5dc3b0
SHA1 ec340bcb070a34309f2d03794d756129b7d353f4
SHA512 58672a0127d1ed961d957d6a6965d13dfeff84915e559597b0f7eea7bd97609d5cdd06e8b16caed62af8630757816251f5029281a4939b3dd3882029872508c9
TLSH
T1EB71CBBB5F96C1324834D6DB9704F851CB721153C63DD428F8AE43684FB6290437EEAA
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/Properties/Resources.resx

SHA256 998534fc8cae09a06e6eafc41c864f060904bc2f95f85e2c9691ed2de8912ceb
MD5 c503b2f5c5121b402729796f61a6d380
SHA1 0705072ddf1d1cec6fc31c305728578960e14e4c
SHA512 9a56fd9d328fb4cd4e79a4a6537a9d9adba4fa2d5452f0a25f6a5fa673f40ed0186c7fd8076a05770f7acaa9123712c698bde48ccb1d4fc880e75438b409b46a
SSDEEP 192:KjrbLPD9sLvIzSvKgIqUyahF8FokwClQEokwCl:KjrbLPxsLvASvKgwyahF8FokwClrokwY
TLSH
T1C7D14455B1C1DD260BB34C2DE6167984F7A8823B0234AC54B4DC621F9F73886A7B33B6
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/Properties/Settings.Designer.cs

SHA256 cf721f25f726276582027542d7f7f20403923953840b08d68a285825730f26b5
MD5 5a1279d89c85d3f005d9bd9cc1695876
SHA1 21fafac715a2b3544f4cdb1f40a36513dbf37d02
SHA512 fecfcdd5375464028988cc356ccafb536bd272f5e103845ca6eb81149e3621e9df80de02f86832aa8c93703ee5c472c84694df528bdccaf068ca0010a53f7880
TLSH
T1101199F52E91C7360562E6AAD605C162CF32122BCB2E9839318D4205EF2654483ADFA9
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/Properties/Settings.settings

SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
MD5 8c0f00d7d9b0046695a0255f1b11b061
SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
TLSH
T1A4D0A78994C8880693313970F468E13C91106757046A95647164784F15071D612D35E7
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/Properties/licenses.licx

SHA256 ce3a11a6cd00e9794f422c6b80941eda3ffdd2bd4fbad1f6c92a876cff9776f2
MD5 a5d12d5864b99c4b5af360190d3160d2
SHA1 9aec26ced90bc1a62e6327103e15473f4df294cc
SHA512 3d0d2b3ed6cfc83b7ce9ad87886658f2c52afb85cd40b2fa72b408b5b169dc0cd2b8ef8b57e620718e16319ef54e0a3427c397e2397135b8cfc5184aa984ed9f
TLSH
T128412D52311AB9AC4F1103580C87268ADE6E76AF0FDCCB6E5D1213A9DF29407C72639A
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/Python_icon-icons.com_68975.ico

SHA256 2fc57d79202f05cb997a134cf49c3575bb6e138705ea18da9158270cbfcaee89
MD5 b10d4eb4a3eb9bfcf7cb73a06bbdf091
SHA1 f1e2e19b753663a1f72011289ac74fcdd6cbaf4a
SHA512 92e81ee9772a6ccf9c24b59e4eb822613ce2143c1bdc9194ed0c0833cdf94fff0f240a90f93fde6f2c41ff0afd425e95ece69ee06ff813b1df8d13b06a992f88
SSDEEP 48:ZGXHD4EAG2EBbhoJTwt4EUQKMUx8H+5sVy8hA30Neq7XU/9tkwYUUyU:4XMEHl4nxO+5se3lqATkwYUUh
TLSH
T1F9A29A257182E59ACA1453744AC2EEF007357E6099504F3BB6F44FAF3DDA3F2A825391
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/Resources/fluent-emoji-flat_red-circle.png

SHA256 25e5b0e6c45d20e8fc71260be5d3db72d82c1b4bf2b3f84d950c0828f5effed1
MD5 eedf72aff744719d0daff8586d28cda9
SHA1 cdf71726eaf0463c65c64ba403de84c00e62bdd3
SHA512 c7c0abef1472b878540116d302748a29687734e63e996b80242079441d825331fb8dd301d57946dc7f47cccf71fb5d62836c09fb8faf2a06f881bafcde7b0990
SSDEEP 768:Q1UIf9cO3saZF+AlMQomi8uEdMouYT3Ns3l:QmQ9qIYnbUuY7Ns3l
TLSH
T1F5C2C00868270DD5341FFDA272D71B282943C1055960EBA17A8E05F1BB5F2EA4E7B2CF
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/Resources/fluent-emoji-flat_yellow-circle.png

SHA256 c5209944437880d45114e6d9a1edf9de9ec9204b986cb3035eb8e9871f4975fe
MD5 fc51112a112b5b0d433c6f834e5e5a32
SHA1 93821f0bb17ab3988e3d99bc0177785a76f2da64
SHA512 e669596eaccaa68acb7bd573e193e371d7d6ae744742e8ea48db6db134a53c1119bd70c297a7adb916bd39c1c9f8bca775f57758ea310b32a58802402d627486
SSDEEP 192:MUzp3TrapboAYVWGp6kbuiwvSIwJYZffnKWK:MUzJaqXVzpJb0agfq
TLSH
T1D9126D40EC0335C0E10FD27D25F586AA5B73852394D68ED5B9DDC4AA8F107974D463E3
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/Scripts/sigthief.py

SHA256 3da90e1f2f599849c01dd5e873c0fe902579666556069140e8e89b7476f6fc6a
MD5 3ab332036d3d137c16e7a6307243ba2e
SHA1 16e945f448e877aff61e488d2f5f6fd1ea111ef2
SHA512 fb596987e3606533b2961550a94e8252da4db36093effaa554d8f1e7e4047fb915204143b16c0a0922295d1badd047fdf0b629f3cd61b56b93b55c83e635b483
SSDEEP 192:Juj5U9+6E0yWYSF/DwI6CRgRIah/gSEU15AkAJi:JvyMvRHU1D
TLSH
T1D922520C10BC20B0D2E7975C9736614BD6663A2BBC599E14353CB21B5F4837DB2E3D6A
MD5 SHA1 SHA512 SSDEEP TLSH

linux

Divulge-Stealer/Divulge.builder/Settings.cs

SHA256 7d96aa83caa42aaffc8ea48b935eba89aaec44989b5496e43fb670fd9718841f
MD5 a7fbb1fbba0dc4f9ecfa3bb70685e25c
SHA1 f980c448278dcd75b5a2916336ccf919669c40e2
SHA512 c7118f287ba6fa978c40b71d5922bc30d466877a73b78187acf791cb1bfbc6d01f2c8189c9cae3cb55757c3072bb36fa8ed441364496d1fd581fa92cab126161
TLSH
T1573132273222C90449B14836CDE94125977089F387F6DC68FE6D4721EF86C5AA3BCB99
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.Licensing.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a9be91cae167702885a5ca74273db779e3e391e2e604cc03779ed403c53ebe43
MD5 2b2740e0c34a46de31cf9da8a75d77cf
SHA1 242324f1112e6387cda41686291b6e9a415eeb8c
SHA512 605eb300b159e6ed2ee872b6ee378eed7dde6541000221fcd94d52057be91cb3c7dd65c7203f05e0718303b157b6fb941498b5e653501f97f0417d459da6bc40
SSDEEP 24576:ebkurkdR5uuMeiPUf2lHmdpjrcbYdwcqMw5LTvBrq/WGs1xGUfGUCco:a1roD9MeiUDDjrW4bqD5LDBrqWG0GUfX
TLSH
T16155F150B3FA6F16E1BEB7F56971120807F0BD979835C30C9EDA01EE1B62B848494B67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1332990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.1.5.3.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 012d717b4ac00c3686a772757f49c1908e223624e3974314cdb9fc9291073305
MD5 41c216d27c71a227774e680e95e99f31
SHA1 0a2a93d4ecbf4bbec2faf110066c6b4472b0dbf5
SHA512 e355ba11e41b668e4459f709e87c3e212c8986ea894791d9155791ea9d7315372fb51531eb69204ed2ee38e242de7629e4a2f090c05bf9deeea9ea965ffaf651
SSDEEP 6144:3e5XJsDZGUbIf5kqw23B1Q8g2iYcHIc6uWXMIFidNw:qMZGUbIf5T37Q8ncHNAMhNw
TLSH
T1C5742DD15AA5ADE1C7D747BAE7103143D77888A07ADAE70BDB8401FC49A2F9BC84D087
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

ac:3d:f6:13:0b:ef:3d:ad:ee:e4:fd:8c:3c:18:68:cf:d7:ef:4c:26

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

347602

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.1.5.3.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuButton.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2a62c78f1f0db2e3258135b50f7885e6734c31c74a8f2f5782f285aa268c2f71
MD5 21f999e5ac72a16077511d41590822de
SHA1 d8bb1a8a291f73cdf2b5658b2b65736c87db19dd
SHA512 e04fe31870f266d772829053a6bb210a9513ff5c8c0f9a3a267ddbe1875125496caa602baf44a4e241ef84d933bd55b79af43d5871ed10c81711adecee78b8e3
SSDEEP 3072:tgiMibnDED3/7f2ih0xdGzFpzUHgmCFKHUUZP0tTwmnkyY:xDDED3/7f2ih0xdGzFpzUHgmCFKHvF0e
TLSH
T15EB3083F61A45E71C34AF73EB008514247B2EE90FD76C736BD9842D92A837A74C1A297
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

d0:8d:57:1b:52:d7:be:48:23:e9:37:e5:ab:6d:95:2f:4f:bf:24:b8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

106914

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuButton.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCheckBox.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 390252aeb6fd76a954a03853c3d883e0360dc8b3f2cf8cfed5ba94e4e5a24da4
MD5 ef11f59a9381df17d7ab94434f79f260
SHA1 ec11e46a636fe3927fd5fa7c30be65b958853ef0
SHA512 612b1b0f9204c605ff5e9b91816e674cdaea71fa69f81a5a7f475bf1cc8d5e12687deb1b0118b07b3d7e4764adede0576f8fc799f8155a65a70e5dafff50f73d
SSDEEP 1536:JiQsfF22IDMxiQ9MOWnce1Cua4JfhwuKeWbZ6YlX52o3tWQFeOvTT:JifF22IoxChnv1CuhW1xCwdeOvX
TLSH
T132A31B7F62E59F60D38E633F65B061005770F450BD3AD77EAEC848884D9375A0BCA29A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

5d:0e:af:b4:4a:c2:89:1e:d7:f0:f6:f2:ad:83:d2:99:ab:9e:73:16

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

101658

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuCheckBox.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCircleProgress.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d5ed95667aa44a80278b80a90413c0de9d85eeb3ca1fa24a40ae71c3ad88d837
MD5 bc930a050ca23ea75dbd9deade4189bb
SHA1 e6878d381ac1c37c331fd01a25b2ec508e1c1a21
SHA512 20e2bb3661d2817082c2aa01381b5aee8582fea5fc54be486de5b1e48f302a15779ebe5670221774a5a4d031248b342f3c86084de4f023c197cd210857fb3ff3
SSDEEP 768:A8ioretsy7GQLZvAQFe1zbnprSBaqII0OsWjc1B5Nl4WfWQAz6uJi8B4dgUp2hQf:JixnZYQFe722Wj8l4oL+6uJ/BZ4ZTz
TLSH
T1E7733A5670B5CAB1CB1E2B3E238061400BB2FAD2395EEF177E6C879946833FE5195187
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

98:d6:45:08:d7:ed:c5:1e:c8:d7:eb:fc:59:38:6d:24:a9:db:8c:a4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

75594

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuCircleProgress.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuColorTransition.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 500adece1fba76dfb2fa628de9886a2661ed1a4e58a7717a5fee607206bb1d81
MD5 539d803013c0b1592d0e17a740d72687
SHA1 b0ce15e0f096d027b1d1482afa9d93bafd160f7a
SHA512 77d8ab7a949db41a79371cf2ebd5d67bd4a38dd040de0073c878f50b2a6409fae2dc5db7cbf375fbc1bc571838b0a6d4848bdecc1420d91633b878585c94b9dd
SSDEEP 768:2SfWaEnnh2U2DaRIx0qVuQ/90iAzNIewCqyU659bTTvtM/3JhQTifZs:cs0qVb/95+6ewCqyZ9bfvk0TWZs
TLSH
T10A033AD266901E63C39706F934A093165BB4F5E379B1E35BEC1C80815AD33FA5CE92CA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

46:80:21:ec:4e:94:fe:96:ef:43:ca:88:4d:61:d9:63:45:2d:e8:1b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

35482

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuColorTransition.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDataGridView.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9e61bd6dbcc8d5866bf3a139ea12f453ef4ca8bab28c08329cbc5f0bf13950df
MD5 53765ad5b31fd87986a569bbb79f402c
SHA1 75c7ec63458c79ded533d1d4175de4117036adae
SHA512 ea129aab13b09e817be6210bc423bcf4e024c83a5a0340941e7658d4dd0ef6f3b40077527f7d168849ad947650a00d360fa6a5f64c4a8f14dfe72cd4d34469d3
SSDEEP 1536:YNBBIrOTrgVCuiPwacJigM8H+duT0R0xSJQ9FTiIb8EtTG:YNBoGgsPiJfedkvu/IFtC
TLSH
T132832C8672D95F71CA760ABE90F002112BF1E1832A45E31ADEEDF5CA0562FE1D146BC7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

35:92:c1:70:e3:a1:d7:ec:5f:dd:61:1c:cd:a2:98:62:b9:98:cb:11

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

81846

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuDataGridView.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDatePicker.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3c1ac3e39665e49327b64887131a53c63379de884b3a6f9a0ab96a36e882ceb7
MD5 a05882bac172c61b5b1bd3f4a56b4320
SHA1 9a725973aa498472c253382ff8d766a5d3a41697
SHA512 a503f5cd0211b123618ecaff83a7930a6b547a1afaad1b93cc5e60bc859e255585a8a94832747422de139f2fe6451b2fcf46b31bac20e12ce60f97983e1af493
SSDEEP 768:KMzEetGON+bjRFOchYvP0pbwk4LAzn21AXrpKXyvcgq8/i7l5THL8ZFxIZYzUebj:HsONqjRFO2ZxXpHraUNaT0
TLSH
T101333BE232AC9E73C39B8B392050E301B678FB527EA2C7566D5C428C16E3BDE11D549D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

4c:35:4b:dd:1d:b9:62:59:6b:bd:85:8b:81:4e:6b:bd:5a:f3:b0:a5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

48030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuDatePicker.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDropdown.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f746eef49caaf23939999a89c86787e6d1f4e4c16f667bcfebcaeacb5276e0c8
MD5 5bc3c478e3c44caf765c6e998dc621f0
SHA1 8cd06d3ec991ae3d5c0d935ea03fd7c06d504d53
SHA512 3990c0a716e2e0619cd969d75666cacf695b6d40a118ead8a810997a594b558250e4a661e303f383f58bc52cac90e84a2049a50a1295f762b2bdbdb8661c33f0
SSDEEP 768:WxidV98e5TsEQgzWC/Vzv/8vWvLMFZhjd5hQTi7q:Y3ehsEQAWQHgW4Zhx0TN
TLSH
T13B331B72B3E01BB7C75BCF3E34504046AA38B622693FD3567C9C126CD6A3BDD0690296
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

3d:b9:3d:6c:2d:0d:54:f3:4a:96:3a:b2:fe:6e:5a:48:2b:54:e3:a5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

48162

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuDropdown.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuFormDock.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f8052b4641fea785ef643bc06d0e5383555c0845bbe695099bc41ab09a180ef6
MD5 fff8d46f94011c5bfa4bc1d1fbde3eaa
SHA1 c5e978eb89e9646423c3b2a1d7d2651cdbee90f0
SHA512 61af0253c05bd33d43d34799eb74d97ae9e3e700281273895026d690f39e3de97034ee51511284a4b6a4150d31977f7ac6fbf4047aa19825564a15eae8be079a
SSDEEP 3072:wVypYUOJdOb8UD8m1PxGFXflE2BHjvZKDq6CN:wVypYUSXdbBjvZKDq1N
TLSH
T10EA34B3EB1E96EA1C34A377A509183113F7BDB507E72D70B989C40D9AC82BD60C562DB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

5f:bf:07:8e:06:07:1c:71:b9:6e:77:18:a5:f2:51:f8:41:4b:8b:9a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

101026

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuFormDock.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGauge.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0edc3396eb94c33fca4889c5a379e29aed354469957ee55893f565d8f824cacc
MD5 161768e00f22118c66a84d22e658b008
SHA1 7645e52d1aeac19169c8cd1b411200ee808295b8
SHA512 cfcbc3e642f6f9cf904b993a6112e2304055cd88e9bbe2d818842d4e93a5f71ff6a09f8d36c6a64de8701435cabbddbff765307f8c110dcb5bb14d805aeb3422
SSDEEP 768:POPW1cKm3/WnwISrek0JCPRjNEp5lW1T31fNEDqz6Zi6EgmaFLGiLjyQXAhQTiQb:PUZewEQRSXlEaDA6w3g7wi3yWLTbb
TLSH
T1F6733A3171E92DA1CE4E0F35A140A2022F34A7C3393BDB65ADBD83A647937EB46D5193
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

c3:56:08:20:e5:8c:51:b6:f1:33:59:33:2c:83:f0:98:13:98:26:27

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

72474

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuGauge.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGradientPanel.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6811dc0f98d2ce9816475207badd010564b7be460f48b8480664f9184824ce5f
MD5 58be3fb2879bf2614b7854b0e184521a
SHA1 fbdce08394b1d11a961c0684d5c0013507dff9e5
SHA512 a5635f09a943e0dd969b648ab7d929ba16d734ebc13f96ebde95d1a5cd91e14ba1b2e105c7414816f3d535bbe2be4ad861a16e25d84c2d12dd025898f3743b0d
SSDEEP 1536:FpoDvSiiUiiJiiJiiYiKbfbD7v055J6O5v2wunCT6:aSiiUiiJiiJiiYiKbz+bB0Ce
TLSH
T112532A62F7D40DE1CF8F053A645092025B38F6F3B85ADB4B7D9C41A68B837E611C935A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

66:b6:a2:56:71:31:f8:7c:8a:c0:d0:af:a9:65:82:f4:c3:9e:a8:9b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

58118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuGradientPanel.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGroupBox.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 637b5cac86e245c53af91e41e6479de42df1b5fa5a524f931e034f5b5ee1f259
MD5 e86aafa7c25a2f1654cf95657cacc39c
SHA1 c9ab7d835b24b294309abed83efff4cdf102906b
SHA512 8b043a2434681773c6e3d8e73fde70fbb666f57a30f5e3514634ccf5c714979fa89769fc54e3e01fba91c5ac916db44054fdd2a65b4a6c35869b695b8696d96a
SSDEEP 768:jODM3ey49Uo613D9ddld3LTeBNsRfMzIz6FzHGptXZEchQTits:jODM3eySWd3/jRam6FzHG2HT6s
TLSH
T16A231C54BFE83F71CF8F4339A5804201EB38A5DA7C52D79BAD4C828917827E6429536F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

af:b2:9c:be:0b:fc:07:f7:79:17:da:57:08:1f:c1:b8:63:4e:44:c8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

43806

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuGroupBox.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuImageButton.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 32b8eb2fae4a14e8319448cd173b73a8e63234b3816d6407ef95be204cec226d
MD5 7d68b8af58c87ee29eca74fe8ef2f093
SHA1 16e8d2004d2c3a71a8dcb6983b72537079ccfd3b
SHA512 6c3f90e7596e0a73cc5da77b92b2d4ed248e49aba2c0c299be4400b8841782415820a44bcca1635a224edc90444559ed14de7dc23fbb7133c0bd86fe93ecd236
SSDEEP 3072:28cu9fbsLqRKynlLWwUGR3BKRqbpqtqzh4E6jt/:zfbsFulLASYqddzcZ/
TLSH
T1C8F35C3EF2B5FDB1C38AF23A3824D1004B35DC94FD66E34FB544C26B4A81B5A095A967
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

85:75:47:e5:a0:ce:56:a4:30:b7:8e:d1:89:d7:a3:25:47:33:bf:06

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

155458

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuImageButton.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuLabel.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a505193910f7b8fd6123c00bb437bff3d2a4f28c970e24207d395554765e6ad4
MD5 73ca0338c9c3b7901d3621b346c76a7a
SHA1 79d26ee6e1bf0beb2ee0593562592de8ff01935b
SHA512 53e0b84dffbec8e465955bc91f1207ba56a55543ba3c00c66997b3ee3d4cb904e027915a12f7a9dc79ffef4cde633c9b7543436c4ab97785ca2169bc3d4aeede
SSDEEP 6144:IMiEH8iZBKX+7haZYjw1MLZRD0fxrmfD4DJL5f:IMNhZjwKLDCVf5f
TLSH
T161943A58A1FD38E4E27B07BAB15219C2C7ACD8D37DF5C75E888B64EC3662F49C414262
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

e9:6b:55:94:38:84:19:15:53:35:dc:ee:f7:ed:b3:ce:1a:11:dd:05

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

426898

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuLabel.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPages.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 633c77cbd4074c428a593e9c9769926ecfd484b40305062c6c268edb1fac44ff
MD5 170b18df5b12f1eb01c2de4a03e1a043
SHA1 2fa3dde71cd17bc2a9fbe8dc05f5e50c94f6cb16
SHA512 8af0aac446d8efbd0b6cfa58093e21b1201e03057df42d922215237adeebee7d5fc9096d526761424092c2131ae3e0ba9696cf2b51b3aff4f91f0e1902b1b053
SSDEEP 1536:QbEFvWVvz9NOLQ1p7eCweuT2CWvlcHF/BmEwMDc2xgAPWTUh:bvmZkLQ/wLT2LcHZBiMVxgAPWwh
TLSH
T18C932B3AB3656D61CF46733AA131A0015F35F6983C6DD37A8AB488D919D33E70D0E2B6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

50:d5:a1:b5:f6:e1:37:52:90:a7:00:93:7a:01:f4:97:46:bb:93:28

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

94862

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuPages.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPanel.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4404f91ebc3aa2b018dc98039edacd02c4578f7c581e27ab902fb7c8a8eb76fe
MD5 ba5a73023ac466e78f54fa87460dda16
SHA1 15b7b81172ef13e72e6b55d93f512d3c660f8238
SHA512 8eb1ff4d2c420fc2d832f8d7d8c05d0e63145bf132c5b0622d8cbc515a89dd735f985e2a0c723fe8d6b95b37cd7c56c70c2e1cae3d183d600e8b83d2d522ad7c
SSDEEP 768:j87knLt2VL6NhPxCb6yH4EgrtR8pLBsyv29UFsxztf8gVnzFy+KDj/njd3m7Vejb:47knJ2l6Nh5Cb6yH4EgrtR8pLBsyv29u
TLSH
T164134DD1B3E85EA1C39A163A3AA05DC14BF0FEC63851D317AD7C81492E907FB44DA297
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

39:b5:a2:14:1a:92:82:9c:49:bd:88:24:15:7a:21:7a:5c:6b:37:b4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

39718

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuPanel.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPictureBox.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2cee0aff33f80d8db13831c04687dce28a5f4d8356461553a3f51f077bd9f875
MD5 9c0c94890f9c941bfa9736adc7b8b535
SHA1 4f8e79cda2c407c7dd0421554bbe24d6a180dae9
SHA512 349ce7c0b2c068fa1365773052fc8771b37ac2b23b6ea4d8f546471f2e79ea96f945d23b3a96019cf1e72d63ea424c182a064c0d5b5eafbbd8b3e185e9889722
SSDEEP 768:vqd07rjIiq27vDr920odL5PzQ8fbstfrWHlpmA37nmH4hQTij:/q27vPI0odLpQS4froUugzTs
TLSH
T150F27B6677E1DFB0CF654A3930A2BA05AF70F5839890C777A81C50492BC3BF912D9359
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

85:ed:09:57:90:44:cf:63:de:5b:86:b7:f9:71:05:47:60:1d:8d:4f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

33546

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuPictureBox.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuProgressBar.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7344febb0946f7555127a8dce09b4df3c430a3805bfd5964c477c36f98303be7
MD5 e08551ac64936f619d33d53de1baaf60
SHA1 254ce04897946348e25c45d9e22638bf64fec6ce
SHA512 17e220a1f3b9eb1017f34a9327cde9b8276d5db0eb10c1ad08c68ac2b1c60873c1f5f8dabb8af382ec4d1b83a767c5435837835ef0c2d341555fe21b8948cf4c
SSDEEP 768:zm6fVYmVH9VRninLAmjl/AurKv77XXwLsp4Ds5Y2XUTunDD+0bO1KNjh1ekrnDuh:E5QAx7NFpS2Ttm+BXQV0zXVVzXuQTT
TLSH
T194733C65F3E55FB1CB8F5339607071005F35A69AB95AC3DAAC8C41A80BE2BF700992D7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

6d:2c:0b:e0:d0:de:6b:62:9f:fa:b5:88:92:d2:4d:cc:af:51:cb:26

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

74410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuProgressBar.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRadioButton.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c0fd5f368332a8a5794325c89d5e66e2ed74db69a0f592c75d6fd6c3518f73d7
MD5 2ba0461d0e46a3cdb553230be6d9e9d6
SHA1 316a26cbc90735a276bc914bc492dd0da2cb7cad
SHA512 d489eaa8299805923a08e33813f82d61c0d4267cff3fd8eed889f2ca6dd34239a1cc188f7a72b10a0ae04a7eea9a9517f659d8767987229262676bdeeaf84a32
SSDEEP 1536:vZsbjXEa+pNKSq5c9ugzX7BF0Xh9UVqIrK7Of08WqOSySGvieagbORNIjOwOFnJ0:vZ0jl+jKSq5c9ugzX7BF0Xh9UVqIrK7d
TLSH
T1BE635B35F5B45EF0CBAA0A352090A102AB38FE83FD56C75A6D9E42C947F33E644C61D6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

d2:61:90:fe:b1:4e:76:26:ad:f3:0b:ab:9c:93:5c:7d:a6:49:07:ac

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

66858

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuRadioButton.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRating.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b0a971f43a25842db9b3c72c10bb6abfed0daae90566df7f23253e3bbcbc4ba9
MD5 7224c8510e42a78c9bb147e9c30a4df4
SHA1 0a3022798b8006c5d51cbc7c8cfb4528a2d75c3b
SHA512 c9119462eeb9c62a0ebaee9a05e017a1cf80f1de37bbea9242460fcb24154c7b3a94dc8a7e19d7e9198c349055c22912eff8417d9a2e1713f48b6b97cc26873d
SSDEEP 768:UVf5PVg0Ts0+azK7+Eqm0Mvv8JgzNp6x/xCRyifQXSfbKNJ9hQTiAT:AVJTs0+azu10MvJNp6IfQX8KbYTnT
TLSH
T1FF333AB1B6F77E72C71B863AA98041021B75E643BA7EE713EE6D42494183BDD30D10E6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

4f:03:b8:1e:73:3e:22:24:93:45:eb:6d:fd:37:63:b6:da:e7:ed:46

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

47014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuRating.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuScrollBar.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cb989842e3c3d9baf79550f6e826ae20226b24178ab4ad279c76a3b4983294f2
MD5 5d8b299875c4e5f6ef079bd13a15351a
SHA1 8f4f33d477ca7d3cea872bc4ebfdaae401c3b6fd
SHA512 7159a79f748e7e947e9d56c17133e2ffabafc5672cd4c0c89fc854fd520df525530795d30b4170eb427a807479414eabc8364700c697c958c305d005c1d34396
SSDEEP 3072:dqtazpVUOZj1+8vP24DzyY4L+i5flfvCYPaRUKpmFRycau3:wcQghPZDmY4L+i5f1vCYPaRU2mFRz53
TLSH
T127041AA9E0DA5A71C74B4A3BF9C432342338FC907A15D31E99C436E907C2B767A8D15B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

04:e4:b5:77:42:9c:f0:6b:7f:67:23:ad:d1:61:29:d2:99:fa:a0:5f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

179734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuScrollBar.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSeparator.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9c2c4d272ce8fa98a6100fa668190e5084f69ee9e75e0075e267fdf1811c5738
MD5 5a389e93f449d77bb0b685fa40f14a95
SHA1 94a5848f149a8b4fd8bbf401d43bcdaae1765829
SHA512 73efd93390eb188272b922b0a95d28fc7b4a0eb0006dcd62210cd2a2b8265ce804cde5415133f6da6aeeffb179eed2e1e2d0368676173df8fe563e805bf8b00a
SSDEEP 768:N6/wh8zZ1LDNH8FOXAJyr09GvYBqjs1+Hw5ibkt2fIxaTclu3gpSLUdWUU7CGtOe:2DN57CGUFWKGWkq79Tal
TLSH
T1C703189076E49FB1CBEB5A7534A0A3018F30F233F9B2D767559D80065A823E50DAF54E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

36:97:1d:42:10:04:d8:b9:bf:a7:71:72:bb:15:49:e8:e9:56:fa:ab

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

34810

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuSeparator.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShadowPanel.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1858b16074d7f9b73f462e3adcc77309800594fa96f2e0904c810eda4eaf5e86
MD5 ebaf1a6efa8c7a04d174be7e0df602a7
SHA1 ce08c80e52b6cf3f62ba82408d8f32ae6bcef0d8
SHA512 4ffd5dcb59a4a03273c4e88047c7d398f098302b9485d07cf5549ca0d72467102aafa69298e248250df154a8b09f7560e634cca9cb1af2838baf3965aa645b31
SSDEEP 768:Zq2Z1jRTnTpK4EBwmUy6fRXLvXcU8knpZlvliQVk3+aIS1GzsQxDzpYElRgyszhL:ZNnlK4EBwmUy6fRXLvXD8knPq+lS1cs5
TLSH
T1E0235CD775E05EB2C7CF0A35A19061024F3BF3735A52C763694D029266823E53CF66DA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

91:6d:6a:ef:09:36:9a:2f:c3:92:f0:3e:ec:3a:aa:d6:af:09:b2:5f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

43502

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuShadowPanel.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShapes.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 77191715d649c33ab2b4e1a976349252abcf6628012515e881f2e65d0d4a9709
MD5 766bac8424dff377682453d70a9a8ac4
SHA1 1cea8cb48d0e33c010bce20244520b79491f6e6c
SHA512 06b00c021342748bf147736ccbc93ab286d985fc0bd26dc3e9ff4290eaa3997b5105a1b4d365fcfe24099333d1d608b06a19456c28c7e4049c29cdf099b317e2
SSDEEP 768:lsXwjYdAepHnxwo64Giy/UhHPzWByJ9+4jhQTi+P:/sAQHxwoGbUBWByJheTB
TLSH
T155132AA1B2B85FA1C79E0B3A35B092014F31F8873961D71B1A4C01A51B967D31EEEEE5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

a0:f7:d5:0f:6f:c2:25:d4:af:1b:fb:bb:18:48:d6:2a:6a:d3:9e:16

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

39066

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuShapes.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSlider.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 22e686373bb1556ec3e044061c727c7b11cb1e6ad3b15862ed7e815e35567df9
MD5 9914005dedbf5f81be2741ce71cbe63f
SHA1 493a5a01dabf629192fe90f15194587e5814dba2
SHA512 be5037ab18c8b45f0661035151f0fc05f387bd69b9b62fb3ba3380204a094f45e78ebb181616e2eeff7347622122bca82a64ecfe4d48aeb6899c4038f1d11fa3
SSDEEP 6144:ktwUO/j558MwE2ogicLoqP+QBwa/oZnyazz5s:YwUO/j558MwAccqP+c/oZym5s
TLSH
T125141A01E0EA5E72C34B473BF5902182FB789A103E5DDB1AED8A11E84FD376EB54506B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

67:fe:af:0d:6f:0d:9f:87:18:f1:3f:cb:64:89:cb:aa:12:4d:08:6e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

197570

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuSlider.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSnackbar.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 97173a3d47073de685b55faf2d895130e7ca115b7fb23c7b845d176b1659d7a9
MD5 5381c510a37e3f31f5d90aa321b4bfd1
SHA1 ae8936a05d58236b3b538712505a353c080d894b
SHA512 2790e342e6a95cfc3f770fae95530c6eac25ae44cd42609176b5f7aab112622bbde13d91ab56e09dcaaa98575ad8ea1c02a4388863c4bc4063a522fd2fba2cf6
SSDEEP 6144:6aQw5nUoVWa8EWtwrRM7ffGpUyAWfhmCb4xo:P5nUoVnrRMDGpnVCo
TLSH
T1B7444C2873E82EA7CBFB0779B4485000EBF4D8457666D70D9D8406FC1A8B3B6E52525F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

ac:d0:88:e1:64:83:70:53:42:76:e9:3a:49:3d:f6:93:4a:77:0d:0f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

274194

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuSnackbar.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuTextBox.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4569393e1aad7498c6a7c8a84f79d0cd7a1d0656e912d0ddb607b61163673976
MD5 fd2042c49df3e74e096b8cee8cc9fe43
SHA1 4ccdb0e13c24fb71f502d50e34f00c39bcacf307
SHA512 c93ad9cb411c311b0feeefdf2089c0c13098c7d2bab56345f4e9a7fc515965a3893c613d494adbbb066801eeb3dc32237a8322f7a5f876284a06b447efdad641
SSDEEP 1536:QjrdQ4aOXffG2ESScROigmC+Voavy5uZJ47b+54T7:QjrddaOPuGxROigBCiQJmy54P
TLSH
T152B32A3E31A55EA6E35EF73A61620200C33098C87F72D73BE758559C1DB2BA60C5A09F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

c0:63:fd:26:57:02:32:82:e0:bf:d3:3d:dd:8a:17:3c:3f:30:70:24

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

112194

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuTextBox.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuToggleSwitch.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c715af145983f42c0ce74c058bdce5a9a51616b38fd935b05e6be328c014f85a
MD5 717c285f4eaf6b5072b507b2a15f5fa5
SHA1 d363fbc7ba468f03681b7af3296b498521050e31
SHA512 3e615661e23d2f0902b67111f550798587eb15f48bbba166b569b59547d3b93ca5ed7becb11e4b8e1538daebd1e6912823bddb15e6932fe746d6c7b4abc178a2
SSDEEP 768:WE2vdPqXKq8+jeeMxu2nuyX1z5ZCgfD9EYhQTiCS:52lPqZ8+jP8DXp54YDyTTu
TLSH
T1A8236CA5BDA8EF72C756473526F071011F70F5462612DFBB2EAE80880E81FD105EA1BE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

e6:b9:d6:86:d7:ce:ee:71:9e:85:d6:57:2a:9a:5d:c3:d6:f7:6d:1c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

43186

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuToggleSwitch.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuToolTip.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 899eada5705312259c5845b31d62709c377a3083d4578f58d1ec7547809c780c
MD5 9cd1c29f2d893fda2c48676b92fa35ab
SHA1 325e7f541f0d2af9def583590a0c1f135206841b
SHA512 3553c4bf3419c7b91cc41f89eb5765f52aa67bd410f640e9edccdbc9f3fb86bd1a2be774dba1c8f74279cd681b8151c824dc946ac2e7afcdc8724ea81a38e2b5
SSDEEP 6144:4zuDdMBBdHEhTFCi50KMSvzPdX6ufy1C1j/soY4OkXd1jD6ct1MTXl:4zu5MBBdYkivMSvbdKD1C1jVnjFtOTXl
TLSH
T133B41A1561F59A70C7CE873A9411C422AFB5E8617C6FD70FA84A50EC3192FA743CAAC7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

61:b7:b3:0f:3a:5f:0f:05:20:54:42:45:6b:83:a9:d8:eb:98:f4:a2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

530322

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuToolTip.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuTransition.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c6e038ab3cc0b56551e3613506a5b4028b796a6424ef3c66ef310c901c12f8d7
MD5 db7e06b950f15c1a799d2a049122aa5d
SHA1 445ebb73a64bf910bea401192784446d298bf106
SHA512 b8f9c9b9e487565f0920dba28a6fec75ff9dcf20ec16988d63f2df7ff2a935e117b98f74f780c6f6806a58d217687cbf4bfcd5de19de2a121998f7291900d119
SSDEEP 1536:WgpjL77cNTSNuma2olzkB8KiqQ1C6sqVzeScHodtu2SMTb:Wgl7oWS2yzkBeqvKiScHStKMX
TLSH
T17D93073FE5ABFFB2C79EB23979115A001731A88B3C72E75BA56400D9C6827560D8C1B7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

c5:85:b0:3d:ce:4f:54:f3:98:13:e2:a7:62:3c:ad:e0:85:03:42:48

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

91714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuTransition.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuUserControl.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 41e5f33d14adbfe149d129b42deb826e9dde1c0ed89d91f472a9888219c60692
MD5 7119e268ba9553cf35b3ad0cd4ac9443
SHA1 97e4dd5546b524b92bd92285ac5a841e45890791
SHA512 a6f5d8e78b211aa2c32f3736af48e8994fe88d3790d7f76638df78751ab617096865981b3abbed151f673a8db9c0d234a7678b9430ce42888ff1b0bed0f284cd
SSDEEP 768:AEerVJm7yq158UZnVtfp3mufZlTAdkgKVgEyeGKHEVbqFgFlZXVEJAWsotSZqzbD:yxrMZnVtfFQKA2jn/udsWMA3iYT4
TLSH
T12883195CB1B56EE1F3864279725076010B38EBC2BA67D35EBE9C03A91AC17DA018D673
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

49:c0:1c:f1:00:6b:cc:5a:af:05:30:f8:9f:46:ff:d4:9e:1e:90:5b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

79738

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuUserControl.pdb

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.Deprecated.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 54c16cfc20bd184f0001bc7fec49cfd89734445535736fc762484ceac6f527c1
MD5 2355a855dcc59b110ea5530510bd7dcb
SHA1 edd5ab7d84363b985cabd9e6354ebb336bcfad34
SHA512 d0836091ad1aefc5e8cded83f2efd6a3044a402daed9ffb15cdcead8a6e4792eaa1d6cfbb875005e10b62457319ead014d7176b64a6db0d83a778e525c5f6075
SSDEEP 1536:vNFe7lwYaAgsQaSLWT1OpjIectBCMb6sfMGmeIiTra8id2V/0jhK9mHKhjCQgTU:vNI5ZSQ03LG5Iii86wCoNgY
TLSH
T12BE31B22FDE67D75C3CB4A7FE1D11202673AA9917A9AC30A894401BD0FD2B5B314D2DB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Obfuscated with Agile.Net obfuscator

Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

agilenet
Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

1f:1a:d3:cf:4e:65:95:88:7e:6f:85:2d:21:87:4c:98:7d:15:a4:b0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Chains

Apr 23, 2021

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Serial Number

5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 31, 2021 - Mar 31, 2022

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 19, 2010 - Jan 18, 2038

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 3, 2014 - Dec 2, 2029

Minor OS version

0

Major OS version

4

Entry point

152690

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.Deprecated.pdb

Divulge-Stealer/Divulge.builder/obj/Debug/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs

SHA256 621199557e90fb1661e401cc9a973163c850b4b7e65bbc8d100f67f6699eef70
MD5 896ab120ac6b6af2895fdb71c452b9d3
SHA1 eb545ccd7a1bafcdf31ad0f32c09ac505744aa39
SHA512 834f53444444cee5c348da44674a2b8e6ce51f21a7565a23629001a5c535533c78a4dff8663176d982bab24f0dd272868cfc5c2fadeccc9b97a14f6946766dee
TLSH
T1F6D0233C72455B39453111C7DC1190D917F9A340BE65C87878BD940FF5AED154134767
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/obj/Debug/DesignTimeResolveAssemblyReferences.cache

SHA256 2a42490dfdcfbb200e7806207b36f2565c058e2c4d1dce8114728677075f9589
MD5 343590cf7d42d594dcff1d060a5531a3
SHA1 731fe4eb4a3c2f274752629d98abc381436f13e2
SHA512 3a0ff9371c24ed251ffd35fdd4adf425609e7cb2c38c651f07698404d3188cf114420c0c7a1f51d70b6fbc467c384a4023e451a3d5b944dccc7e0bb045966f3f
TLSH
T14141BC346B05856CE173B4B1FD27276A138DCA2EB4E023177088130EADB69D91F66B77
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache

SHA256 2c888541a7afe8c018d6c4c528b37a5178ad7281d064e6b7b7f9b5bfc2bcaa2d
MD5 e859ddeb8f25e3c2acdaca7b3dd86082
SHA1 6c63ceee8eac5d5e23ed415255c8adaedb4a485c
SHA512 ca5e4d26ca934655a64360da9f3e3dc65f92aaef861f236cc46eb8ccf770934f1b5728511e3754e4df966a68a7a4364ef8f0046b3fdcbb7ad089ec3d746d3a04
SSDEEP 96:v/Q6RZH9BGQPtICNMS1ap7AM3rdapbFwus+:v/Q6RZ1cJGx
TLSH
T103F14B7631108E683322284BFF536A4ED55A7E2D7CC4C6601798138B56D2FDC92A33CE
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Debug/Py.builder.csproj.FileListAbsolute.txt

SHA256 f558d6daafe9063cec3d66bfd2002c5d80dec51ad96bae9c06d78966f5233fa4
MD5 fc26234af801b31373f75c88e8e40c27
SHA1 771e193668b0cf46f44274436aabd22a2985b41f
SHA512 7980a31427dfb44284f976a1d93a0da79ba3e7426c4fee3727e6a267e9b26cfa960911616112bf72d8bb8ec4e9954ebe47b8994a3051524e2dc4c4307d9bdb3d
SSDEEP 48:ouRuWYSkTv5Woz52P45W03J85fdPwBtM59ZGv4jTCRENSE0i5PRImBkEiv7ZJAtF:ognZ7vwzQ
TLSH
T166D1197E259489246620040BFA9B4ACCE9D6BD1C1CE1D70C458817CF25DBA89E7E27EF
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5fe1a19e356158e411d7dc694f14b062fb4f4bdf2b9a11b36fad11a39c9b2a06
MD5 a412e65a72378cb89d925200142c37e8
SHA1 acbc1d743448a4e57b380db1d9393cf3772dc71a
SHA512 e080b5937c04f830717afd6a40aa41d6705e5e8cfeff4fe0a765992414b912dbcde756781cdc1a1817bb78d02ef40f42516f16f3837c396f948fa4d086ac5ad9
TLSH
T13F819637D7B4C279DE6E0331597755500BB2D6888723A77E6984300AAD672614B71F34
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11242

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/Divulge.builder/obj/Debug/Umbral.builder.Components.Forms.AssemblyEditorForm.resources

SHA256 a54d77958633f2aeed1379ed6140051aba89fb341d081fe5272e63c8af4a77d5
MD5 b22f4af064c08176a1b95b7ae7761d08
SHA1 3233906ef8b1943b21b68133a363b396dae046c0
SHA512 c1296f15007a5a15db241e69a72ffab7ae1cc1d3b4baeaec5695ff0a9b8fc927233e289f9d90dcd0b926255cb46df40766307ff584f5082148e0ab8c92e65bfc
SSDEEP 192:r+okwtiSFwAclwAcfuuuuuuHgwAcTwAcTwAcTwAcTwAcTwAcTwAcB:r+okwtiSFwA4wAhwAQwAQwAQwAQwAQw+
TLSH
T18CE1115332C77548812F0C72F2FF47B6EB362681BB96C26E741326084D95DA6E352713
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Debug/Umbral.builder.Components.Forms.MainForm.resources

SHA256 bec97db8b0fbea77a4f3e0022ecb47c366f7f72c184fd0b4c47c5c7bd209a247
MD5 01c3334af39768c021436985bc68682d
SHA1 bdd2c2d11126984a17cca7111b299bda5e48bf4a
SHA512 20e809d1f447ff02c9d95255551fc0569d37037b0e2ec3a4c57aba313e1503d931642d14ef9dc7a059383836a1fb94febb6c568785da85c30890ac00dfbf57d2
SSDEEP 384:rIokwnqNUuPwAAcwAbwAlCwAlIwAKSwAKSwAKSwAKSwAKSwAKSwAKSwAKSwAKSwn:HoDqF
TLSH
T14762755233D08E48D47B0C7222FA47E4BF3B2A913E52D3BEA472152C8E095D7776172A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Debug/Umbral.builder.Properties.Resources.resources

SHA256 f8a94edc84661afceabea1909b6ebc4639f002ff56cf86436b2639d6f99004bc
MD5 c3056d814bcece5960eb70ad862651b5
SHA1 38b91c782bce6ce4f1549b59e297d5dcbbd6b05a
SHA512 fd634bec02588c1ae8cc234eb4d548a2c314be81985df5ce2429d166cef43520ac1b7ba620f40a36b0e84f66d5825edc901a42243a1e58e208f786c542a7d22a
SSDEEP 192:rnokwZ2wAc0VraQipWhzK76SjN9EhN3zswAcwBzGc4P1ijE1+Leyuaar:rnokwowAlrDBK73jQh2wAjJ4P1iYgLev
TLSH
T109029F502E0B7A5CEBE91B381235A4C15231BAD452FD965CAFC9050D8E37F2A73D4E4A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Debug/Umbral.builder.csproj.AssemblyReference.cache

SHA256 48130521e3e99eb986d19ce418a6156a568ebba43d969aa39a522ceac44c86fc
MD5 68f55024c709f497654111912e714774
SHA1 9af4e1de4486901a401075b021256bf59219ea26
SHA512 e1492821bb03060c51660183c8a8d2378053accb3d8c469e298b898d92bc7437410e888aab7009a283e16f9fba4ef239a7a50e044a941d873602196e23efc5f6
SSDEEP 768:hFFY4Q2c6e9qLYJle0+BCCid9dzUZSm762SWdatSobc9CBASTO7iT0W:jzid9zJ
TLSH
T1352311B87F12841CC11364795C2B23A9DBA8B61D1DF09B0735842217BF721C9DFBAB99
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Debug/Umbral.builder.pdb

SHA256 80ea07cc43b3033d3fe25ac0d542a643a0424c7b70f2bffab69d03467ea73fa8
MD5 1d81ed198a12feae215e093886de8501
SHA1 877547d144533831ac911a8a4b4892551b732fc5
SHA512 9a8ea150621bee5dc3ffe35f1646202ab93106f104404b0fd466a224b941d4dc80129c88865e09e59aef500fe4f3dc09a0db37e284b01f155c179ecc827fbaa8
SSDEEP 768:YuWziWzqVO6YJ6s2zozIONbESdAIcQCwXjYfayzdwy1W7FpKThG8fVKO7zymzzPS:KzIONoUAvUTAWH5uTzLzzrtiqnPyHdZ
TLSH
T1AAC35E27ABC0CD32C47455F956AB8F795238ED445F8287CB2398726E6DF23052E913AC
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Debug/umbral.builder.exe.licenses

SHA256 b64002a1e5e3ba2af6e49ba4647e2d86a7e5695dde323abecf42deb2d4688d43
MD5 056ef1cfa09eb41b5835da4248a547af
SHA1 6aa9efce50f2e3bc2c467b0a404ce119406ee874
SHA512 c763786455fe523df8deb76463d2cf3ce57a49cd528ba371224587cb630a891ab75659106da3df672de538b2230d7c843bfe4bea580de16e1317813f5a792b7c
TLSH
T1C2611752359ABA9C4B1512184C837A65DFAE73BF0ECC8B296C0613E5DF6244BCF1239D
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/obj/Release/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs

SHA256 621199557e90fb1661e401cc9a973163c850b4b7e65bbc8d100f67f6699eef70
MD5 896ab120ac6b6af2895fdb71c452b9d3
SHA1 eb545ccd7a1bafcdf31ad0f32c09ac505744aa39
SHA512 834f53444444cee5c348da44674a2b8e6ce51f21a7565a23629001a5c535533c78a4dff8663176d982bab24f0dd272868cfc5c2fadeccc9b97a14f6946766dee
TLSH
T1F6D0233C72455B39453111C7DC1190D917F9A340BE65C87878BD940FF5AED154134767
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/obj/Release/DesignTimeResolveAssemblyReferences.cache

SHA256 c49df74357dc7ef33e755356debb5e20cce110e08e43d459e513a5156d1e45ee
MD5 1dbc8cb0556987d3c45ddd5a175ef354
SHA1 971bfad06785ae48656131beae8f6b38f7e45fe3
SHA512 67b60e414965e3a586ebb21b9a6ee58dcbba63713637224ced56b806c9fbe4863b83ef302ac3d9591b591f560af509e4f8b1efbc561e8f81ada9f2f802ec9804
TLSH
T16641AB242B15856CD173A4B1FD372769138DCA2EB4E027177088130EACB6EE91F26B37
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/obj/Release/DesignTimeResolveAssemblyReferencesInput.cache

SHA256 b0a20c4f74d0074190ac4a750b7a9e69c4acb662fe699c6423d85b839ad94399
MD5 274f4baf02582daae984c39f63094faf
SHA1 84af3ffcefd60f3f24e526e7048d93485c22de58
SHA512 cdf6d502a6be23060fcab2f408246f6c45f52aea33dc75bc4ddeb60d7cc4d0b7ce711b3528dc2052d471dd1044254abf4aaf2eaade4928a9a3fde7109080bb88
SSDEEP 96:v/4eZdEP9NuQ9R93GwPCPQPLP7PbG2iPtICNMS1a/sPtxGg6WM3rdnbFsCs+:v/4eZImULAcJeGg6T
TLSH
T137226E3731148B6862132A4BFD6B594DC61A2E2D7CC0D95406C8275BA5C3FED83A73BE
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Release/Divulge.builder.Components.Forms.AssemblyEditorForm.resources

SHA256 032386997ee2efd3db296d85fc58545409427f42161856525132a7d0c7e2adc5
MD5 49073b415b3b559b793d64846cb1d008
SHA1 8078c5db30d28a0b4c65da6c3adc4e9e88b11f33
SHA512 644574fb817dcd5ec6b1444a83a183c4dc22f57f4da4fcf9ad7f7bd24b3f78b50c82a205198119f88910127d293471f777cc04d57db8ed1e826649c352e5bf04
SSDEEP 192:r+okwtqa/ewAclwAc30uuuuuuHgwAci2wAci2wAci2wAci2wAci2wAci2wAciW:r+okwtqa/ewA4wAcwAd2wAd2wAd2wAdp
TLSH
T1C4D1435337E15844D07B0EB172FE4AE8673632C17E5FD13CA563262C0F5AE66A362B12
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Release/Divulge.builder.Components.Forms.MainForm.resources

SHA256 4ceb3eaf544a1a98de0511b8c4fb9924f0d1b0426495a7da2a6eb8200ea5001c
MD5 ad8f627a175d559e16ab21d99a83426f
SHA1 ea528d0881e9833262672651c631bdeb1620d458
SHA512 9a2abdbbb6d5405bbfd99433d4ce664bd9c14cba34fbd727e841a652d2edab6a8525030d3b58c1e5c9813ce813e705d8b7675dc368842961929e91c3fae1deb9
SSDEEP 192:rQokwGBxVwAckwAcHWwAcowAcydgwAcdSwAcdSwAcdSwAcdSwAcdSwAcdSwAcdSa:rQokwGB7wAHwAEWwA1wAGwAKSwAKSwA4
TLSH
T1B632779233D18958817F0CB126EB46E0BF3B26913F95D2BFB822112C5D585E767A133B
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Release/Divulge.builder.Properties.Resources.resources

SHA256 4bdb756dc40498f88838fb15782039384a016dca917b37589c03b34fef0332c9
MD5 7d407be9f819efd9e7414b5496eaecc6
SHA1 baaf641331139391193ec6b1f05bd7c67f9fb788
SHA512 9ce25421cf2ffdd5309efdd3a36741eee8cbf9cd142e5ecf4df2d2ba0c57562a68dc277a8820a31410c2e7f3a4dddaaf8f0f1454e7abfcae3c5217c7a03483a9
SSDEEP 384:rnokwJwAVtbfPNJyFlH5BgPo/N5dZAECC4FDtfotD/FFXVwSPkNmJJNRdM438opb:ibfclH5BgPA5JCC4FZQtD/XVrimR8YAk
TLSH
T1E0D2E1808E04D9C12DE2457EBAB5E0D9DD9203BBDB49EFC4962002573BB4719CB175E8
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Release/Divulge.builder.csproj.AssemblyReference.cache

SHA256 ad847f3af7686b3f094d56805df4486e3ac9e392a2021f43dcfc13eca89b732c
MD5 86826a776ef37993567037fc967f60fe
SHA1 928fc2ba790e7db0923dc9a3cd1098e83d811a0d
SHA512 933d27fc4672d8c79ad4ac4e85e49a2892d793ecb33e8367e5d09896892b85373bd9295bf107d68eb0b7c39d68c3038f9079e8549c95c2a0e16e163f583f5d9a
SSDEEP 768:X3sd+1aD92C3Q5/k2PLRSNiT9dzKye/YE79y8BTayW7VUj+MVDDct9uFEHAgiV6o:yDiT9kRY7pMgS
TLSH
T15C5375697F12851CC11365788C2B1369D7A9D60D6DF09F033184231BBE726CACFABB69
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Release/Divulge.builder.csproj.CoreCompileInputs.cache

SHA256 5f31642196b3014d59ece185612c26b47dba01326036ab7ae624182ca09a6fda
MD5 303742943cb90aeab03e272d59e79bc8
SHA1 cfca36ed31d65b1564d6fe3b0a6fed6f3e3eff31
SHA512 a8376d7bf61be1852a18678f5d24268d32e9d45e47fe7ded8292bfda9510ba5d31ce16125c33792752750463a5dc64d3776bb4efc3fed67c7820b0fb7d4eea0d
TLSH
T1CEA0026B2C9624531B9F6468A32583F518A444725CA2B7894C4C535265256614493903
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/obj/Release/Divulge.builder.csproj.FileListAbsolute.txt

SHA256 464298df3f4f0c7c0555bd6749f69f260af97d2c00f3bf9f950ede7a5786246d
MD5 e1afb7bd1460d174f19c9ac1fe5fb485
SHA1 ac98ec530da10d8a746c7322a7aa86a9785ec48e
SHA512 7130c1f7d3f6f31259d7e69a5184907a88345e6e5d7dbadc41306c7ecdc6909653cbb91a3f9445f34caeaaccdbdf1f2f8584da1fe0b238cbe6702b4d80c4a8db
SSDEEP 96:oDrZxTjO30Zup6L4tZnn1a9DCP2PB40gg39WvPLPkOj5c1:oPZxTj/Zup6KZnHCK0oLHj5+
TLSH
T1CFA2377731604E165210190FE92B4A4EDB629D181DC1DA1906C823DB39CBFEDA7A37EF
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Release/Divulge.builder.csproj.GenerateResource.cache

SHA256 c2a057d13a285790ac6504147417727f72f6095c8e675547156bdd412afc7688
MD5 c32425c1ebfd5e1cd489dc88f6a592e1
SHA1 df9c8b72fa09a7470cb607a4835ad014cc580e2f
SHA512 951c05ad1589918c08bccf7f29fa72f577a8acef235388f887a6ac4910f749e7865a130aa97859150bfd92213549599ce07f66f029a0415a63d39d3ea0f5cbb3
TLSH
T14CE02BE3963D8C7083F00323123AB4037A981078C5F49255B4C72BEC1A582B31590759
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/obj/Release/Divulge.builder.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 59335bcb98bd63f116ac196b1a526b31fdcc36101b0e4f96e2a3f7f9adfe203d
MD5 511c417fcca2ac7d3b38e14faa396f18
SHA1 88b03df47f3b5ca54686de6a91c5ac8379a57826
SHA512 e499396b0e28eb0d6ef6f2c849583bb675aaa86b7ba2e2cf7ba5eb91b8849bc0906aa90bbe48845dfc27ae0ddc7dbdbd17761123f69db307d0a43770861363a1
SSDEEP 3072:B7WkkMbY+u116o3rVFBq84FQn07OebG5oPq9d1Mo:BWkkMbY+A6o3rNno6Omj
TLSH
T162F3074032789967C1BE16F815A2C8B447B16E2B2901D7DA3DD93CCF3BE1B414792BA7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

140998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Badus\OneDrive\Desktop\Divulge-Stealer-main\Divulge.builder\obj\Release\Divulge.builder.pdb

Divulge-Stealer/Divulge.builder/obj/Release/Divulge.builder.pdb

SHA256 285b65d44b20448a56d4e086602d3622a7733a802bfe80303d8c894602decc77
MD5 bb1a45282875356a3640fb7846b05131
SHA1 513a2e1da011a506af73d9b4b953951eb48c686c
SHA512 b6764e913651ee0bc91369fdbb1091b315831ac3f9e9b783de476f008c414069ef19196828d8e5a00bcab9e4a3f13a09437be603b5e8421aa9b941b62df80fd1
SSDEEP 768:tPp6bp6vEKAC3ry2Zq3L363PYEC0s+IMSvo3sucYx97tqDx5sZ5ScLnPvRaOIM27:zq763PYEjs+I1vKcYtqDy5SHQMCgo7s
TLSH
T19FC35C27B7D0C932C47046F556AB8F3D4238ED455B829BDB2398722E7EF2B050E5626C
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Release/Py.builder.csproj.AssemblyReference.cache

SHA256 ea7e8c05d8bee418b32399ae24352acbb680d052f9e562f42caf4461343b3553
MD5 b3266a7fe04c44be7c799c14fd697225
SHA1 bc7c12e2cb305e92ce121178f7916200bb8d2f59
SHA512 1b6b34ce982400cf6d994245e4551ec32b78665879071b83ce8cd03edc72a244283e58f98565067fe9f24667d0ef7dcb2a9592b29d0f67505e4e0b619981d404
SSDEEP 768:oh2bLGPEg4FPzamUxIkFRiV9dZoDopKHiI5Sp0BZ59CzOZmS:4iV9+AS
TLSH
T16B2373687F12882CD11360795C27236ADB99E61D5DF04B033548131BBFB21CADFA7B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Release/Py.builder.csproj.CoreCompileInputs.cache

SHA256 d5ddc1ff5aad9127fe6123924219ca9fbcc5be488a122edf8e03a19a8f279584
MD5 d3ba2b7fc89778d9353aba4e67ff1467
SHA1 c01a901af1298a30bfacc2106fecd932d587ce01
SHA512 75cc5ef9f2303130dd227820384a75ee565544ccdc1710048ba4cb22bfbfa857a47f372d6aba1a6ccfac0fb785ce9f66a5d849c2bb21d192bf2efe00d4f156e6
TLSH
T15BA00259E39820FE09D60612994196367B906F0AED5A00A724A32678097A242A54866A
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/obj/Release/Py.builder.csproj.FileListAbsolute.txt

SHA256 feb0fcdcd6eef0a6bf448f6e1dfdcad375865fa364b631c627617031821e4e77
MD5 bd170014218ffe6d166c4540c87a999e
SHA1 16360018391ff6a3ee9e396b0197bb14fba918e8
SHA512 5b833a34b973999c87f6805f0e165170c93c1cbab1ce4a2e8b2119ac0c6e6a09188791d285b6d740bb7d55621b222e32d90b965d5255f8ecaa18d26058194b45
SSDEEP 48:ouMuVrYk9B5Iy5585i5sGJTO5tflOTLM5bZGxalZ4RKH8E2c5dRGm7mEYlxNZ7KF:oDrZxQzda
TLSH
T1CED1C87671604F1922500C0FED274A8EEA56ED181ED5C619168803CB3ADBFC9A6E37DF
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.builder/obj/Release/Py.builder.csproj.GenerateResource.cache

SHA256 1e06f0b438f256baaff881343e90220650af97de8562e1e5cad627563bc75e22
MD5 fb2319135d77d530095c0a684db1b74e
SHA1 f0e7218695b2d3493ee82973ee5799593c80ba9f
SHA512 4ada0f0a5f30ae5b60e6662e3bd099cb0224c91fa3c1ec3583c6845c0cade901646f7f249319c9a86ae13284867fea9215c2eb286478e18f00a4062270b07b47
TLSH
T110E02BE3923E8C7083F00313523AB5037E5C1078C9F49215B4876BDC1B682B3159075A
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/obj/Release/TempPE/Properties.Resources.Designer.cs.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3f393cc9a686cc4f587e9ff0874988c0328a8a2149c5091dd1a7b2c8161e0b8f
MD5 802342a51e129b15ceaad94877296a14
SHA1 d1cd4794945819b7830040e2b30e2fea495447ba
SHA512 ba1f45b3000c5d2de164be0e0adfa14a1966f31bd7a19e1f2975e831769da03d738d7b3e7f12e3790e739a868edd27d8889795faf2250f209f87524749346ae9
TLSH
T1508194339BF4C679CE6E173259B340500BB19A884763EBBE6984704AED673250B65F38
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11218

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/Divulge.builder/obj/Release/divulge.builder.exe.licenses

SHA256 81e3d9bf0c07974dadcdd61da91a3a6116548963ea3c52e077520b535020b1c4
MD5 ad378729e30cf547d749ff26771181e1
SHA1 2f9454d2717d731f26cdd60fb26d74aee5d158d7
SHA512 c9a751c766c040591b1ccfa417387e558d86ec4eb884a80d33266508f0f9ffd4cb98fd902de70b5306915d4781d6dda26d4532e8c3229958067b9517dd0e0621
TLSH
T109611752359ABAAC4B1512184C837665DF9E73BF0ECC8B296C0613E5DF6244BCF1239D
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.builder/packages.config

SHA256 e839ffbb2064937f24f4336f9f936c9733e30145a230e2775228c80778b80477
MD5 aec57195ea34bf24ee9bcd6322b14c4f
SHA1 f34950ff7bd5b7ce4f91d2ef941fd10251ea4d06
SHA512 6477ecabd9d5393f901effc782f66469c04035ad5361d716d036d1cf8cfaba9757d4308905ba51c845c63fa89f5ccc5e256165d2e8a98cf697143ecc6c1aa136
TLSH
T17A31802842EEA7FB83623E81FAF981451BBC7297F6154ACDFCE212458363495C11B747
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/.vs/Divulge.payload.csproj.dtbcache.json

SHA256 8a2c3a962fac5f1d319d1bb91b36f695774a367d1bb9affb629ac00ca3189131
MD5 df6ebc17d0d4a1d27a83479c7e532285
SHA1 b38dac1adb976ad2c494cdfa8c3e228f0767749b
SHA512 8a50cd27f8ae512a798a157bc9f0b68a92d42c1ed8ac0819445fcad8019adfa9a7267985ff2e139530e29cbb9dc2dedfe59f87a6b67a50d4dae6a5fef29ec446
SSDEEP 96:Qog3RTukG6y+7LOGIBKW9b5sh7b1777QSQSESpwN2b3sMhIuG1GWFG3G7GnGR9Ge:b+dxeZMgJPPBB3
TLSH
T1B1C18D29400CCDBDB3E42B42F7639E4761CA512A68E90E0DD11BCD5D96F2DE860396FB
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/.vs/Py.payload.csproj.dtbcache.json

SHA256 933a041657953aa4d2aa82ffdb78e2dddef2a7f5724c5033d99cca8cc7bf85d4
MD5 2cfab8cd3c9cd3ddb125fea25f3974f2
SHA1 1294f3aaef216ebef6351be08f14a5c01c36bc42
SHA512 fbda6c1bca813178a9e5ecac4f38c7681edcab1714aba26e66d0ce3e43c087809a8285b4d2fba361901fae593471be0607263b5b0e8d35a54a385541f90ffe20
SSDEEP 96:WghtRTukG6y+7LOGIuKW5n9X5chYYn777QSQSESpwN2b3xhIuG1GWFG3G7GnGR9b:r0dxeEgJPBBB3
TLSH
T1E3C17C394008CDBDB3E42B42F7639E4761CA552A68E90E0DD21BCD5D96F2DE820356FB
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/App.config

SHA256 37cfaf0ae91ef85409a7b658ef483805a6c9de1b72961e0df44f41aa703eaf94
MD5 765eeb46e050d4544ba02bfb9bef44b1
SHA1 8f78a35bdb0c66c34f603d7496aaae0326ab741e
SHA512 0491cb9e1dc483f01fa1d7042828374cb03014417b59c738275f933bc67085a512b82bcbe4fe00f56bff86e5987632966e4ef8242ad62a77ee65da59fd1cf58e
TLSH
T1BDF09E2184C47EA68F711AB33B779464DBB843732C8C004CB4AF6E974F2099D5207233
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/Components/Algorithms/AES.cs

SHA256 43db24d95f91fab622e8c35a44fcfc8d21ba7fb9a3221410eb01536f08a5cac1
MD5 1a3ab8f3928f7a8ac42bc6cb837310b9
SHA1 84c86a37578f9e4cdd865c719e147cce0247681e
SHA512 7976fdf28bfdb79dfe1a3b09455c55426e05597ca138f96e49cc0ca8cd8e992608b93697e34d1c1baaa2d67cadb1090c883aeac01a63385956709c246f672778
SSDEEP 96:JjMXwOlnq3l1AE9elclUg8lVKlymSTB9BG4MHaQa8Ib:Cq3PAqS8UgcVmymEGJaQa1b
TLSH
T183B1FD01595AAA9C0AC310595EF2E95CEF1B402B5A35BF7BBA4F00116FC4A34CA2CBC6
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Algorithms/CryptB.cs

SHA256 dcd6eecdbc601d342aa016e81c9b3c6e312aa224aa5d7d78d12d8b010beb20dd
MD5 79c90c5eada8fd190bf5164f29a93381
SHA1 062449e6dae553e24aab4fa2811c5204a31fc741
SHA512 8745170a01eafae1b0ac27249e931d32a8485e89b158fde5cc11246737f831f4d811fdd669a149b56e7a2946fd532db4ce4c883402a1cf77921bdd13f2ea46aa
SSDEEP 96:JjGRZQelhlDS1NrYVWlFd4n4N5YAfDpM4HtSC5:05bDbim+DXHtSC5
TLSH
T1B1F1206426128C7656835024BFD9A5CBB20790233BEEF9553E8F0EB04F87219E170F5E
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/AntiVM/det.cs

SHA256 bf35ba60d4eb63b63ac539e67e1aa701e204f0a61a1aff41b732663b34df36b6
MD5 a245c5e758cb8338211b1243afe7eb91
SHA1 db073eb2a1635c3af69f2881a3e5e5a1f1245146
SHA512 665a11815e8162723d1445fe5c1ba57b903e891b4e26e8862a476cbf9e15fad5131ebed7b3821635a21d2ee6201277885820b28d86b1ea0129cb19259bd1c47c
SSDEEP 96:Jj4YN268a/t0X9x7Y8+cZU1m8VC6s0TNFi21oWZ/6PYSxCwyL:iLi0r7Yh0UW6LNFRtyPYSxCwyL
TLSH
T181C19769F8A61D1389E104BA9B6B60116F9C66070BE95E2C77DDC3089F0DC260978F0E
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Browsers/Br.cs

SHA256 ae6fdba23098032cd7260f25ccd21dd81f40d52a46f16494ed24e42588e86ca2
MD5 4968d4daab6ee4b754e847076b708a64
SHA1 e7604da4cd86622918c366847dfa9e72b854109c
SHA512 d4ae9373e2864ef63c1b5aa0e1f795829e53b451c3302037b188fb5571742a0f2156716d2cef60c497d6852fe305bcd14cfb27bfe06f9e61eea73683c7601524
SSDEEP 192:iD3rxd+XJsTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7ld+FYKDmVw+T4K
TLSH
T11EF19404BDB7692A07A307769BEAC4433325D71B43974E94BF9E16009F54518CAF836A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Browsers/Chrome.cs

SHA256 c58eeb7dd6c0ce781f1577c0b5a99072c5e674b91fb9bd76f44d24370dfd6bdc
MD5 43e3f74518e80c76efe13213194662b3
SHA1 4ae72eed91ba5f96281a207353c572ebd474f105
SHA512 b831f7392fcc314b8dcec81977cfb28199175f6805e8612a7a7100a380f7a4c62adec4a118a26c5b74d3c91b2df92d13f6bbbad47fc42202c1723d5f17d439a8
SSDEEP 192:iD3Lxk+XJsTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7Fk+FYKDmVw+T4K
TLSH
T19AF1A404BCB3692A07E347769BFAC4433725D71B43934E94BF9E16009F54518CAF83AA
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Browsers/Chromium.cs

SHA256 ba170ef8b55e48110d64fd5d55beff67245003c490eebb03ea7eac5ac2c78c1d
MD5 ace101abc1650052405956f7f7c9dc5d
SHA1 932c4596413ad24ae46ee79401c839ffb3b0edb6
SHA512 a9c4451011eed356bbf99d60ca94d779c710f55fad5be3b0252e533174c3f8fb933c32752ae59014855d26bf2a2ce638da8bc9b2c576633efa26eae5e2d0ab36
SSDEEP 192:iD3PxP+XJsTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7pP+FYKDmVw+T4K
TLSH
T1ACF19404B9B3692A07A347769BFAC4433725D71B43934E94BF9E16009F54518CAF83A9
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Browsers/Comodo.cs

SHA256 d029b95137582f0bc79f221c3c891c80d06ec8df2409a7c722b0fcf61fe0a4ab
MD5 7823d87ca43a8861d29e7803b2f46a9e
SHA1 d94985e3820acf05de0f09c4f404c547cb4e528f
SHA512 45b1aceb2ad79762c446f7ce3b7dd5a533aadf628facc2ada2cf86e44f7494084b7f1d269d3b332371c6618741a6fd417ce3f69bbc35c1daa3538f10899a5dad
SSDEEP 192:iD3bxP+XJsTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i71P+FYKDmVw+T4K
TLSH
T142F1A404BDB36A2A07E307769BFAC8433325D71B43934E94BF9E16009F54518CAF836A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Browsers/Edge.cs

SHA256 e86edbcfb1a3ab083a3a26ab1d1e92822e00a78f2add83b1ff9a87c2f7c74965
MD5 ddd5f1bdff38f7bc15e231879b9e0e98
SHA1 edf4b2aaa00824c38d8d0ffc32771e5e2775c446
SHA512 e3d779d550c2c6c26bf452811636e35e6bd76d8cb2f719d13ae5356fcdd82d22f3958f291f253d7fa7f3d9d521a770712e3a0cced17d8873b00c532115d3aeb5
SSDEEP 192:iD3TxU+XJsTNIYKtt6EnqlUC0oRj6K0phsaHoRprvSwawb:i7dU+FYKDmVS+puI
TLSH
T101F1A414B8B36A2A07A347769BFAC4433325D70B43D34E94BF9D16009F54518CAF83AA
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Browsers/EpicPrivacy.cs

SHA256 9b19a828dcb703c76dc995cabc18fc04b4ccad1826a999828e64148b214b450c
MD5 ec1efd1cf711fdebaf80ff6894d5d531
SHA1 3e7e0402494ce7940480958aaa3f0add69104dd8
SHA512 d1fd56097523d11bbadf9ab7917c72adc3703b1784e7e21e5ec8934a0743dc960ae5ceddc93057ade7e87d767d5c775a0660b5c10c9a049d8acebefbebc06560
SSDEEP 192:iD3pxVK+XJsTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i73VK+FYKDmVw+T4K
TLSH
T18BF1A418BDB7692A07E303769BFAC4423325D71B43974E94BF9E16009F54518CAF836A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Browsers/Format.cs

SHA256 717704fc405deae119d1a30930df6eaa433791309531f94c33dd5e43e990b682
MD5 44624366f48a9c5b6b69130b075fa648
SHA1 7c4a424c6d36f2e4efdb1ebd82740647318553f0
SHA512 2ddd8b4a61d432f0b687abba8cf5f7cbb5e1a4bbed2ff5edf2080581fa9c296242fc3ae57baf52ca9333897ecbf947bc90bdfc6d0e7b180bea4a6a6b04289da5
TLSH
T143118F7B115B590419414294DFD818162980946353EBF8A1FDEC6730AFE7D1AEB3839E
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/Components/Browsers/Iridium.cs

SHA256 682e590048a55d982fe04668b828214db5ae94d4e233eee0f1ac18381543b337
MD5 6a6ab5ddde6680081a91e4e6e3915430
SHA1 e4043a664d8c00ae12ebe68c19047dbd93df8df4
SHA512 f5e0aee391fdc4f03ee0e010e4b21dcbb662b5b2d2ea0a497d4dce55cf76ae54dc0eefd12dcf6baa51322c4f1456d2820d7428e4556d93e618fd2ef9dbc2eaa8
SSDEEP 192:iD3Zxz6+XJsTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7HO+FYKDmVw+T4K
TLSH
T132F18404BDB7692A07A307769BFAC4423325D71B43974E94BF9D16009F54518CAF83AA
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Browsers/Opera.cs

SHA256 7dbb82a97a1ee06741fffb14056218199c9369f14b19fd3ba99021fe9dbe0e54
MD5 bd3c3f6c08fe52c17940b701495bb4c6
SHA1 5bbb39807f356e96fbf2ba07b33d842c180513f9
SHA512 4c4dc3c15ea0bcc7755c36a0327a7694d2bb67606cde122f4630924419554bc7a109c9707bcd22645628c613864a2781912ae6f76a53bf016ec2a01d15daa29e
SSDEEP 192:iD3pXT+XJsTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7pj+FYKDmVw+T4K
TLSH
T14EF19404B9B36A2A07A347769BFAC8433325D71B43934E94BF9E16009F54518CAFC76A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Browsers/OperaGx.cs

SHA256 aa5604d3cbbe2abed194ce0735a898db756caa6b0d222fb4743c72effcb8564b
MD5 bae7d216cf8b9919209b44882d92993f
SHA1 75dee978f579ccc9838c9e4de46a52666786b323
SHA512 0e1ae892941115a7b9031b9bc695e744e44a9d4d60528844508a6b4e27242a9ec07ec2ea47ab2cb66cb322dca35158db8810d4cdd5391200f0bcefc05062cc61
SSDEEP 192:iD3pdG+XJsTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7p4+FYKDmVw+T4K
TLSH
T17CF19504BDB36A2A07A347769BFAC8433325D71B43934E94BF9E16009F54518CAFC75A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Browsers/Slimjet.cs

SHA256 c7158351b91b841073b2e6edd15f9c3f2d0c525375a63458d2c21e26577d2295
MD5 5335dd1fcd6ba46102aa2dfe39899772
SHA1 5caf953eece125d655403be83db90768e24ed8c4
SHA512 208021454250e6e576f97a602558a57d5f9ab1561099b1c74d78ad4a6bc1b1ff452a47325b4710dfb974e4fc31e0d7c2c1b94244a3aab658f250f172ba6739e1
SSDEEP 192:iD3/xn+XJsTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i75n+FYKDmVw+T4K
TLSH
T1CEF18404BDB76A3A07A307769BEAC8433325D71B43974E94BF9E16009F54518CAFC36A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Browsers/UR.cs

SHA256 9d85eafcec8535c184f4debdc6e3b435855183986e9cb711cba70c8fe7a50df2
MD5 1c7f640580068c68c9dfe91417bcac53
SHA1 d7fbe5aca9b069fad8ba3f50930b9ef95b82a543
SHA512 33f49834960928f3792d45fc3d8dd7957f8bde2f45d387db16b466070d0546bc60faf5a008f88a17aaf3a54b653fb318f55e4ed00a8ec127d71471f641de7adc
SSDEEP 192:iD3vxC+XJsTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7JC+FYKDmVw+T4K
TLSH
T18DF1A404BCB3692A07A343769BFAC8433325D71B43934E94BF9E16009F54518CAFC36A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Browsers/Vivaldi.cs

SHA256 c5769f28a022eb366e127f968b077b2b6961a33a25acf5b557738d0bd71e0299
MD5 2ae7e467ce5531ca694ce0bab399a608
SHA1 706aa067c120daaf530b9937ecfa1b4cd78e05fb
SHA512 1f38f2ce0afd1460f9a45ad672da1f2984dd8e86a4faf7e2bb0ffcba20f503cad89cff0289b9e4c6465d8b0941a658e41dc2edf79b274ab123f85fb2be302b7e
SSDEEP 192:iD3ZxK+XJsTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7HK+FYKDmVw+T4K
TLSH
T14AF18404B9B7692A07A307769BFAC8423325D71B43D74E94BF9E16009F54518CAF83AA
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Browsers/Yandex.cs

SHA256 336c1e4b546cb19e42e2c50afec684c257fd1e237d34ae99961a9f2bf559fd4c
MD5 541125e63e7164607806f3fa12f6f458
SHA1 5b3a60db4f519ecafbed4dbce79c3ef0fd7299b9
SHA512 9d0e52b11ac80e97d63e19b016eeb179993be0707f807061d50776c44b8e14d0d17717081e0a55f0bcea195c3463498ca7cdad4350fc209a5ae83388874b3164
SSDEEP 192:iD3jxj+XJsTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7Nj+FYKDmVw+T4K
TLSH
T1B9F1A414BCB36A2A07A307769BFAC8433725D71B43974E94BF9E16009F54518CAFC36A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Crypto/WS.cs

SHA256 53be950d2344d24765a2b7a91459cc37e27e02f7186bbe603ec04595f1fdfcf5
MD5 3f197835c649c085be3da633e63672a5
SHA1 40194a2ae46bf7f765e2dad0401e3766cf5d32d6
SHA512 cddd601985c947da9abcc8486722fd01ea18757e73317de1393a64f63579715811b79727f9388d32c9242aa06b442993c4494274a453103bd94c024f7a3c4e1a
SSDEEP 192:DDGhSL83cqFz4o+mog6SkX0HnLBxSCWz4CuL:DyhSY3cmzCGLBKI
TLSH
T1D7E113B1EAA2B20511576368338B19BB77F0C17B07AE9C74B78C77001F0B56C1AB52A6
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Helpers/SQLiteHandler.cs

SHA256 aab16ad92c2b41a632db2169d7efd308bad83767c82cce92d5c7b1eb192fe484
MD5 e4a6d79497af72e6cb60e0014921a50f
SHA1 95427c8f00db1e2a45771014a528490c657bbdfb
SHA512 f1017537872b744020f95088efa49314ea90d73d88e263a7c47faba661449761aa5e47805a5314695a4bcee3612c49adc8ee1ad8a9357583575f9c59bda8e8cb
SSDEEP 192:iMY/TxdeEcwr/l7zPMpqs6DyK9nbfbBXUWUGm5t5n5SC42cKyaa1eyR953qzl6QW:iMY/T3rMsnLNXpHmnlK2M5zM8+UzR
TLSH
T1E9A28D68179305B4037F6EB8D34E850A6B245413A8CF6EE1FA7D1E804F42D2766B4FB9
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Helpers/Simplej.cs

SHA256 eaeb5971babf49b749e1baed10fb2329e029d77187d2e53a41048a771b8c951b
MD5 b11ed55dc61f090e7301f7fc56c4265d
SHA1 f513703785691bc310dad6aa6bc552c96533f111
SHA512 4204a17c247507217ff3348e1aedf57f91adabdc95352294731e88c615f6e80857699c9b350d1d6a282621c2bfe626b3760c3234d4aa28f7339c6ecfa6ae0747
SSDEEP 768:c58C9x2P+YPrGNFlyroiklaS5mDmFtgVlexEsR2RHa:zklMitgg
TLSH
T17F83E76875A3D5314A4B80B45757A081E7224413A25DEC20BBECCBB0AF855706FBEF9F
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Messenger/Discord/Format.cs

SHA256 462ac5d331cfddbb514061d403f83320209391a1d4fdd1e5b0a3376258ed1908
MD5 32abd66b47070aa6a5ee3628df5f739f
SHA1 77e688b26b32325f0e48c2b6f09fce7970824916
SHA512 716e5b2fb456cada7eec88ee19a3c2d5829aaed096daeb41062f0787639a79d16c90c5aefb0485f2f40ca085a53e2a220edfe74f8a19ea30fe191c77af0feaae
TLSH
T16E41C37721A74900094118B0DED8544526A0A6B3A3EBF8A9FDED47308FD6C49BBB878D
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/Components/Messenger/Discord/TokenStealer.cs

SHA256 7ca41f7e5dfa83f765fbc56d818866f01fa23be5043102d68db5531a1ad8da9a
MD5 82681db81049fe6facf3c4df377eac5c
SHA1 4a82cf32ccbb21be8f4d23120e62776dfb7e676b
SHA512 ab147e2d354d2103f20c4b2822cafafd05b35fd1f0e2be1b2a7e4929341261b363dc556edbd806a082b8757a181901d0adf202907fe583ae0036fced9aca12d0
SSDEEP 384:i/KoJ3/FyFqtLfaCa9r6UXNDTD8rjQOZMHzki:xo2LHT4rUOZGzki
TLSH
T1ED8260219CB325511A8BA379EBDB59163B32921B67EE5C61FF8C954C0FC841C89F07AC
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Postman/PG.cs

SHA256 4a0ba310890bc3ef4c103c250245b13f9a0e476c96d37948514ff88f872fe1d9
MD5 cba9ee37557a53d6c89fdc95c1e4c983
SHA1 ab87f87d7a727265faeccc0b46e23d35705fa60b
SHA512 2b485636eaaf1bfe79fb152ec14921b71377456bfa64fa2c2e00b8157dcf2488067af45108b47f2c6500184a13517c22d03b36b2b0355472ea46c83234f6de54
TLSH
T16851DF132635891B082654319687C24E2336A28F5A5AEC65BFDC0229DF13D58BAF0F79
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/Components/Postman/Sd.cs

SHA256 05da6ada9352820c487052ec14a23e9ea6eb8e68859cba6ef80ea421b9bab31c
MD5 705dfd5043c53b7d7bf8fd2c5c668bd9
SHA1 d6e3982ccd018e9f0f35b6ff4c8d3b4d0a1007d6
SHA512 05e400d0be7e957bdd01dd46d683890d37f3dca629e88807ef3728867a8a81842de89db19be92dce5c97993b0b863f2bcce99e691064340bb2d0d5860fcc8cd6
TLSH
T11131AE3530A7B2A54647E171CA1BE6543332662B2543E931BE9C104E9FD311816F8BDC
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/Components/SystemInfo/General.cs

SHA256 ec79700deae0fca169061636f4379c9d2a2029ad7d01cae4f5c9162337308c69
MD5 65625a902e4c175f7f5155f49bf2ed3a
SHA1 fac5342b1bfdf62ddaec0cce7cc9e1190cf83e70
SHA512 f42fba5a07f3b13871fef6b5c0fdf6caf20bf27bfa5a8ee5b720e85c47934847a77a31205a4b00ac9c58706436d7da02b6b40ec1e0ff356c46e490de77560629
SSDEEP 96:JjNV58uMSrJOBbgDaT+fjVvTr7XgZbIhb9EYYN+L:1KbaUbr+L
TLSH
T1CEA1645BD97F5925C1AA285E778702431DE82103A312DE387ABCDB086F0DA7485B1F5F
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/SystemInfo/IpInfo.cs

SHA256 c70a4133337531d0412dedb3de60d46c94f0e6e0a58cba8c332d50c1999981b4
MD5 dcd81bba3301377eff0badd203845158
SHA1 131d9d34d62c82f13a85fd785cb53166f45398b7
SHA512 3e842ca9137af7c0be8215b24d2c71be88c2e003d76c94df24c02fce03b28e9013045b3b6bdb981fa70fd631fc8c1eb25d0541a64e04b8d7be8ad627f23ba491
TLSH
T1C8216A2B72719426093BDA34E0D0E0403B715D936BB6BC19FAED02045F87D4C96B4BEC
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/Components/Utilities/Common.cs

SHA256 d9d700700643a54713215ff751b58d48dd136488ca8fe4dbafb93d217f681f33
MD5 63fd7f18281e4aecd68d46cf26e58f18
SHA1 33bd2bfd47bbdd3c163ff04674a7fbc5258f23fd
SHA512 39455063c24323b688c28c0fa9db9cbb80a9db6f53cbf631a0658b0bbd0f3fbfcac4e8823ee3178cff1cf503d1fe303a81663a69215fb39eb2c2bbeb073722de
SSDEEP 96:Jj4YrP8MKV7BzvAyZ+pICw9aqLAWC+O+K/G94ancYFBK5691aA4Crsl+7PSqkO6o:iNhN/CwQqMWe+Kehc8BK56b05ySqjRY+
TLSH
T17FA1FFA978A795284A232236AB5FA81063369353239E9CA5FE4C4614DF4042C5FF8B9D
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Utilities/SaveData.cs

SHA256 c9d219a838b6634309319dfd3aff36636f2ee255d1c28e4b15cc2c9fc82f316a
MD5 dcdb4083f4c2f90200c28d883bedc59b
SHA1 a3255ffd4cae29b8690d92762bfa2df0bfa6785f
SHA512 ccb5dea29a80b3541158c6bf0265a41fd6dc4eaacc0a8089878a74e83f824f80ed8f6889a0ebf2b964391359f1a60091881b7ae17f650312514240538bcd143e
SSDEEP 96:Jj4YzvzzP26VYcOSh+w1Ow9/MS9+z1JvCiS9+wl1Dy8kqiS9+X1GICyS9QzQfqCw:i2rqGYRSP2S6JCiSDHHpiS6hSoEqCVOp
TLSH
T18CC111162D93424B0A832632FFD689016326923703BE7C94BDCDE029AF0791D5D787AF
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Components/Utilities/Syscalls.cs

SHA256 f9f8b275bded93edd54fe0614311abf5d11c6de6187da618f4fb07946b0bba67
MD5 4f724d1818bfd522a27fce7f59ee6578
SHA1 b9f2f4aa375f7c61d9b1cdc1ecd1d3b12f7e1ebb
SHA512 e97456a4d95109dbf81c64092b2f2fb1875e6feac2fc0588751b7cc7b3a0b47a4daae78c27d51ddd3456a6104fc86b5671b19736f74732b1a224c18043b72783
SSDEEP 96:JjNPMMJKVvxvVmFsDqX+7W/iF951BjBX9NeNoTyKDPi8N9s5N99G6uEUyL:EmOk+7WqF1NRGa+KDPiWKz8yL
TLSH
T123B1FF4BA9BF5A1085E7242EBF4B12032A7D51231395CD30B93CC608EF499759A79B8F
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Divulge.payload.csproj

SHA256 0104798c774f42b3f8ef891124a1e858ac555b95fad025e1825e4db9261f4aa5
MD5 34c39aa973fdb7422ef2cff08cd4aa0d
SHA1 f6c283bf868841c3c5dda62186437a9b6a5c3b7c
SHA512 8b41f88aea1902ef7016923287d55ad4589a033420ee8668b3e6aa6263f0632cea04ed3acf1efb649609ccffa09626cf0421687e9edc915a953d111932d6c77d
SSDEEP 96:7YWnpu5fOwpSc1x6a46VVHMEW9P5vsHbG3VWjYQ5uSBCOrfyAeDtbfnzGW6Gbsf6:7WfRpe7UCWByAeDtbfnzGW6GblD2m
TLSH
T185E19B34D6EC6EA803F010768766ED4BDEA8A3E31C940495779F928F9F72D091223677
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Divulge.payload.csproj.user

SHA256 169b4f8d3b1a9b1d074a30f0d8104bf921485d34a3abd9429ea0e21bb0d2b8b5
MD5 6442a00a5c0f41be8272ef29e993753d
SHA1 808d226017993e5f66319f258adfb6ecad4025b9
SHA512 a0f8bc7307500f5ef951bc6df31e37d7e7a301fd0f1fc7cc479fdafcabc8d2693e393f3d3d82ded54b1e75393b8c4f83f7a52f5714b39c5473b7d9e952964f2d
TLSH
T1E4F0A0621292F43B7BF886295508852CFFA1A1EB04751594F1C2824F2B32146E3679B3
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/Program.cs

SHA256 4b3487569050180492dfdc0f2672a824ae9201be6f8b3288081ec63fffef2686
MD5 79aa742bafca6043e1e183c2c85fd820
SHA1 7389553f18c871b3c1f2bae92001ed3f974751c8
SHA512 0fc8186a5a4060bed33e502b23d4e4bac0e55fcb122174517d12cdbae2633fdc162cdd3e0551a89d1b3d50e66693090f0c4731bf5df2fe7e39ceda741521d569
SSDEEP 384:9t64/paeeAXkg9xK6sfu7Ai/ZD0O3JDQ9iN3waT:/eAXkg9xK6sfu7Ai/ZD0O3JDQ9iN3XT
TLSH
T104B2111D3436294D1472B2A1BF55465FFF859C2306EB62207EEC72185F32D570EA8AE3
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/Properties/AssemblyInfo.cs

SHA256 fb55ab3184feb750fbfae2aa28f33335f6263de0b7d09d281c237ceffb2cab35
MD5 a14bf892aad904eb5e6969955f3cd4b1
SHA1 f85c2f1070596a52f16f2f7a6271fcfe09762d5c
SHA512 a1a911f99a4bf731762786dc905cd37fd30ef32d4e767b7f49258115b5b730c796c9dae28f951ba9fd3b44c066a32685d0048e54173aa014458ccd8c6493f60d
TLSH
T108318F2D6341E37E8F510193AE6B75C5C37D632896F60C4535B8B413E301B7843A99BB
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/Settings.cs

SHA256 a1a8d1402f511e4a0f8971baf8c4a688872bd14c6abe4820885b71a52da372f1
MD5 0650b472cd72ae1831b34a6672da81fc
SHA1 3a8d84bc7ec1f08b2ea05b3b64036a2267be9a3e
SHA512 20de2fa40169428b03129f9bf92452ca08b64f6640040ed84daf1aaa83a3ab2bcef16c9680e783f54983a22c3e6f7610331b001ea96c670b819ee1d099c9861f
TLSH
T167617D67BE63DC1889B18033CEB8D052ABB0066B8B6EC9A07E9EC5115F44D5523FCBD5
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/obj/Debug/.NETFramework,Version=v4.6.AssemblyAttributes.cs

SHA256 0a9cd45b60cbad5af2fc1fa2df0f3f4c5ce6351557be6339446fa6e568e3ac3c
MD5 3d907e84abab52ef71d60c6cf3029ba6
SHA1 4000d6377212e89af1d7ddeb2375835cafcbd173
SHA512 7f6bf9d179ef6a984ba96c020ce744d2b212324e39203249b4fad08cef26ad40bc3834a9f7716a5d196e593d37ad977d1866b95cd2281797ac2cc59263cdfccb
TLSH
T180C0223C7209AB394A2000C7D801E09A17F9A300B2A5886878AC900BE5AEE254278B6B
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/obj/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs

SHA256 af4c24efdd16c0cb3946e8e148fb6df4fc9c501c71cc718738b4728808737373
MD5 e7e4dfcde604f38e91e42fd0e92033c8
SHA1 100774f6122fa0433a6dd9dda553722981a924db
SHA512 4f435e0a0d01a78b0ea0c0ed50390279414fec78ea0d75690ff7082ee9103723d7dbd1944cf74741ae80787102672b6f1f446983376904d028510b5b39ce6754
TLSH
T1D2D0A73C71455B794A3010C7D801909917F963407A65C86474ADA40BE5AAD254138B67
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache

SHA256 f8e81b5c287cde597fb249412b28f13ab83f1f7c5bdc1c7b6396c48e4cd11d5d
MD5 7430e8588cedf52070e991663e4dfdec
SHA1 93704d392a73512ea5f7e7e9b000338cb8c3c732
SHA512 de998ce8e708806f1f599fc9313c68a0a8d34e14d19f4f05391214b51e9188a7a4479aee15ce11c101593daf9bcafd550abb2f203664a9422bad23bc664cb209
TLSH
T1BD41C92C4509C7F1F3316492FB437D09118E8F2374D89A66A2549A1FC4F2FEC55663A3
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/obj/Debug/Py.payload.csproj.FileListAbsolute.txt

SHA256 47edc67faf71da01fe80a5d76beebcbc9fdc24cbb10c9025fe81966d5438a2ec
MD5 639c12b08e403ee389f7ce58c5cac98d
SHA1 c2fae831242621f6dc0a6c93edc6a6fdaa570b63
SHA512 ade5117507d0794760e8849c692a8641cfb6ab213e77f7dec34cac374f550ba883673bb6ea3694e075619eb00d6046e9dca0e3b095fef18b7902132d70b3b410
TLSH
T1D001563A08C0A9147D50085BFAA3C5CD2785BD066CC2DA4D53CC059FA8D6FC9B6937E7
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/obj/Debug/Umbral.payload.csproj.AssemblyReference.cache

SHA256 9fff998d4b3515dc5336fe826f5279bef0ef55cbebb50de290970626fd14c949
MD5 d371ff6abedd36f1c9b2ac18500b4619
SHA1 6100bc931d0e3d71bbb2db45d96b3df97756148c
SHA512 0e636db90c882fe3f63ac6e61d6d50cac3a614f4875b411423a4cd6c17135843c7f09b237853a8787b62c6d5559774d205174ae18c5931e8bd85074995408bda
SSDEEP 96:xp2wIiJKisSwixVoyZ+iJxV5qNi2J1piJKi1WiJQIziyKSoJKixVVX5triQJHKiH:7w5FQ5+Ce/5taplQPiasV2xAbP+YW
TLSH
T1FAC11EB84F26C16CD213B872BA26777423DC92437175AF0772881617F8739D88F6EA11
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/obj/Release/.NETFramework,Version=v4.8.AssemblyAttributes.cs

SHA256 af4c24efdd16c0cb3946e8e148fb6df4fc9c501c71cc718738b4728808737373
MD5 e7e4dfcde604f38e91e42fd0e92033c8
SHA1 100774f6122fa0433a6dd9dda553722981a924db
SHA512 4f435e0a0d01a78b0ea0c0ed50390279414fec78ea0d75690ff7082ee9103723d7dbd1944cf74741ae80787102672b6f1f446983376904d028510b5b39ce6754
TLSH
T1D2D0A73C71455B794A3010C7D801909917F963407A65C86474ADA40BE5AAD254138B67
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/obj/Release/DesignTimeResolveAssemblyReferences.cache

SHA256 0731bc2ce4b217a283bfa0f16735d731e9265ef1dc8a4b85c5c3d5f211ac0a61
MD5 3eed88a904ac7139a5dc84d310bc88eb
SHA1 c8458d5ac256ebf7b6cee8683aff68fefe7af49e
SHA512 d1e39f11551ee4d9cf997e0a352c351ae4fdb266bdb1fb857b2484254fe09be607ef70c852910f1e7bc5e2f2c55fe84050bb85bb88c01f1daa9378c0f3f4c524
TLSH
T1FAD022283B37CAA8E2617CA2BE4A2E190308A29FF0C41212A8088B0A48509991024373
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/obj/Release/DesignTimeResolveAssemblyReferencesInput.cache

SHA256 63d9d1f3f0ab7b5cfe4c3f740bec57b4a7ff6de5133284dc8876c69a2f5dd77c
MD5 b38383b7376bb5bee3f6d3fa35248630
SHA1 335916a2371a0c513f4f6d20157d1de86313f65a
SHA512 ec43ac6a73c4cdfc812827184dff96060fb30b2084d8dbcbc3fda4bab81c7a0f1d27790db9a78e1ee565a25a1309baa22f77792a9beab1e903140ef57b1ae21f
TLSH
T1D1513C285209C7B1A3327982FB537D09114E4F2778D4DEA5A284561FD0E3FEC456A3B7
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/obj/Release/Divulge.payload.csproj.AssemblyReference.cache

SHA256 914b424e5c129fbd6e0195449fe7ef127dc06d78bb861fc84ad8b4b8117f71aa
MD5 9da54b331125c50ed67c3238afc042c3
SHA1 37dde1a2daa1085f2105eea0e351d1504c165046
SHA512 9dc0c253650ed5fffcb7ccfc7d1f844e363566c48871eaa70cbd4cd4fe619c3b77c744be058744aae74744df3f5065172b6ebaa5f96038b65bb294f1a0fcf6dd
SSDEEP 96:Mk2wOklO5toiLZMq+6528ioQxAIOrGaxvz0izZxvKiEX6J0S0Tul:BqoASj8fxr06xiULl
TLSH
T151B1103447018564E36275B6FE23639D23898642B598AF57B2CC170FD9A2EDD0F721B3
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/obj/Release/Divulge.payload.csproj.CoreCompileInputs.cache

SHA256 2b1d594d669250d3eb54ff625700f337dcffa486bbba57b2cb213a1948a5b20e
MD5 67182bf0c1f63f4be4c7968b26fdef3a
SHA1 deedb9fe61bcbd62ba4900202ee7b41b3024220f
SHA512 853f337e799724185c757c8edfde9f001dd15da1cc20504882f0bb15402238b63da2acfc883fa391366aec96ce5fc8290155d9f09e7b9d430f6021a1195efdec
TLSH
T1B9A002E708A4882B6F4719731639595B1576851423A9211E310687A3317320DA05A56C
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/obj/Release/Divulge.payload.csproj.FileListAbsolute.txt

SHA256 4d66208d006a4e34822a88a4443fc99439d17c9be44d3d41377649d50d52e59a
MD5 ff95453f2d2220f3bb8c007378a8cdca
SHA1 24f2242d35da5503e4083dab2343aa7286bc2f9b
SHA512 348a8896d3cefa6b6f21099e10334aa3a515b6aa5dfdee8bd5f6ec885bbbe5f141bdb73ab31d3659e6af421f3fbb298dd7560a550326ecccc155bb02f17d73c4
TLSH
T1F5617F362590AA19AE40094BF927C48D5B45AD012DC1DE0C53C8216BF4C6EEDBA9B7FB
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/obj/Release/Divulge.payload.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5dd0d74ce7e044c93ae79a7d5a66e1a1cd2a8c838c89e19f67279ab91dc19bd9
MD5 b8a2e51668eecf62d6518408ac66be1e
SHA1 770952f2f0a47cff4209db04e23cbe904d4b6646
SHA512 8b2a3e0f700b555c50a3433b49087e5df9f53d4b4ae14ed327b3b56efe84499d48f1431163eadf5c096d4c30ca12f532ff5dab21ed4f619a02ae740ce626d1f3
SSDEEP 3072:UpQz+kk3BvvXB1qXR5qxBJh+ylltfpYgB66QKgq/A103dec9n0NUDHpkj2iIS9eV:UJRDwqk2iIS9e2jv9RhW
TLSH
T143145C8823F88F11E7EF5F789520919ACB31F517EC8EF74E1D4CA6E820253925485AE7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

195094

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Badus\OneDrive\Desktop\Divulge-Stealer-main\Divulge.payload\obj\Release\Divulge.payload.pdb

Divulge-Stealer/Divulge.payload/obj/Release/Divulge.payload.pdb

SHA256 e930bc061982b1f2202772df7cf14e75754e2b539eee81b4df8c7165c24efada
MD5 dc14cb4df806da8cb499930591b7763b
SHA1 e7d1dd82b5ff62f554bdff54433bbdac10254406
SHA512 7540c9bc4f83e75da323e859c98d155b42b04120b6360b4ec4776fc08a6c440908e711faa2bca646fbcd0332eefb69203b564d4c659a2883edd6ac7665477ce1
SSDEEP 6144:4PdiflodjPUEWFEfLZvdU8k1Cvx2CLuyt8kKx2CLu:eXk8GCb8
TLSH
T10D94835BBB80DA32C85586382ABBCF0E4334F4899F87874F2795316D3D92B591D4A3B4
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/obj/Release/Py.payload.csproj.AssemblyReference.cache

SHA256 9fff998d4b3515dc5336fe826f5279bef0ef55cbebb50de290970626fd14c949
MD5 d371ff6abedd36f1c9b2ac18500b4619
SHA1 6100bc931d0e3d71bbb2db45d96b3df97756148c
SHA512 0e636db90c882fe3f63ac6e61d6d50cac3a614f4875b411423a4cd6c17135843c7f09b237853a8787b62c6d5559774d205174ae18c5931e8bd85074995408bda
SSDEEP 96:xp2wIiJKisSwixVoyZ+iJxV5qNi2J1piJKi1WiJQIziyKSoJKixVVX5triQJHKiH:7w5FQ5+Ce/5taplQPiasV2xAbP+YW
TLSH
T1FAC11EB84F26C16CD213B872BA26777423DC92437175AF0772881617F8739D88F6EA11
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Divulge.payload/obj/Release/Py.payload.csproj.CoreCompileInputs.cache

SHA256 c085299b64dec4f451dcd8dada0b901631dbb7eb9497e105dc51519cfa790ed5
MD5 effa927f04ec6eadc2f8c2158588193f
SHA1 95ab5848dfaeb5e3b112228e4ae1f94423fac554
SHA512 6db8de5fc9eae3d7ee269eadd884e0b1e3f261907b770e2e7c19736a1041a1ecca9cfd14ff167aa1582fa0996a1820e0b2f220461230350b0f57e87a16acb445
TLSH
T10CA0024CB6221A2D5073DA6A5BB038FD7229D5A1A5901102DEA9D657126002D5261934
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/obj/Release/Py.payload.csproj.FileListAbsolute.txt

SHA256 42d593691c108345faa183a08b49a7fe3e9ca44c31acca5f914091ca7f76984f
MD5 619eefbb2ef6653d70f045f4c9ba7148
SHA1 eab5b69f604d66973fda134759102b67246aa800
SHA512 d51e2c27d98f72e7ee3731d2287bc3d538ce271e0885f2e7ac22456910743dc8909f8771773ec336f9dcb39fd67838b3ce38fd4855974b3c67b13031cadb793d
TLSH
T10A0152365880AA093D40084BFA63C58E6745BD026EC5C95853C8029FA8C6EC9B5837DB
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Divulge.payload/packages.config

SHA256 c626035ab1a03b1201aab1239a1b24684620b35a85a30bc286af66624a7aa137
MD5 8baa25e887232d8e017cd751cd369b25
SHA1 8ca51bdc68e05292d91fdf7c6844ac8d7e41917c
SHA512 a5f8f8bc970ecfd8b69ddee55e303033089ceab43f69daa0ced9d48a4c6c460a1ffe1dad04b1b064903a48049148675104d6c4a973ff02955cf86f93881e9bc5
TLSH
T1D8E06D3402ACA6FE47622DA5B7B981051B787656B4200ACDBDE14105DBA244D82677A7
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Read Me/KleenScan.txt

SHA256 b60e63b1ff0e48cc449e7e2c6d79b712714d2c30eede9b9bf553f9e11ea05779
MD5 dfe2c7568c617c116de885c1ee55dc65
SHA1 bb65f33b82c0ecee9b94f2f6924b4debaf258573
SHA512 b19c2c3bc884e03436aaceb5f958686d517d29512b0cd92127547b4dde496742749cf619b2f3363dd61b2dafc9cb5aa6b4c8fc5524d248887284349f95dfd5ac
TLSH
T112B012BE188EC55F81B9FB808F1DF41010A51B2002980DC5D58E740400505E3B001172
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Read Me/Read ME.txt

SHA256 c2a7cb97f6e4600347cf02c8c4fe4d8859ce6288147b26b157c3f5f3163cc20e
MD5 98fe4aba688cf919a4e6c771aef0be9d
SHA1 c7b3d4ae54c0a92e76c3c8ddd0e221fa1e701074
SHA512 1f0bf50f2d6a55643e08b3ef352e2ee93743193ec95385aebbaeaa62d0b60eba83c14ee833e17d88d4b5a2eb9f46954fb8fe16c7a64d0af8dba8b79989f722b1
TLSH
T19CE02B7B38BB511291A6C125C1358FB7F37541EEC16D2A183D04FB5C2A36861327D17E
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/Read Me/kaspersky_14598.ico

SHA256 725ae8e7fabd2344ac044bbf2555a6186b6151faad3bdfb40dfa309787142e0f
MD5 9eaa06979b607a7692f606677be77e4a
SHA1 328dba96d2829b8a3e5aac9c1766db275597775b
SHA512 c9a9c9376d25203890abd125056a1448c5aa266cc5088d42f1b574db047e9b4756124f9c43fa58b41f09c73d0b9e4e613cf443c85e6ac3afcc198f1b23614412
SSDEEP 192:B4d7WDrLzVjMJAHmovfuVJAfuKKHKKKKOtG5pXUu:AC3nvvO75RUu
TLSH
T1DDA284347986E147C6B8907DC6B6EE38B2319C5DDBA71F113AC6AFAB78B170B0852150
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/Read Me/tdsskiller.exe

IMPHASH 95840656814dcf833c50394027d5a026
SHA256 2d823c8b6076e932d696e8cb8a2c5c5df6d392526cba8e39b64c43635f683009
MD5 ff1eff0e0f1f2eabe1199ae71194e560
SHA1 3b035da6c69f9b05868ffe55d7a267d098c6f290
SHA512 cfe89198e9d5d490a7cbbe7acbc99e492841f46f0cf6dd990568726df6e6f295cfe2ff832032beee4eb228ed9f8885615bdebd14d2b6969c008dd9b3122a559d
SSDEEP 98304:NV92pm4i4yxEKvBaKrL1D3iTtFyYbRpINzBnOFr9LYUuv6A2:hHeryYbRCPU9UfiA2
TLSH
T1F436334578D0DC76C1320E3648A4EDB50B7CF8226AA4DBDB72D0A25DEF786D0363859B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

a4:62:7e:28:ee:dd:42:99:6e:df:30:35:db:9e:4e:c5:7c:94:06:1e:20:62:90:6b:e1:55:c1:7c:84:35:c3:78

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=1027739867473,CN=Kaspersky Lab,O=Kaspersky Lab,POSTALCODE=125212,STREET=39A/2 Leningradskoe shosse,L=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.2=#13064d6f73636f77,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Apr 9, 2019

SERIALNUMBER=1027739867473,CN=Kaspersky Lab,O=Kaspersky Lab,POSTALCODE=125212,STREET=39A/2 Leningradskoe shosse,L=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.2=#13064d6f73636f77,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

19:4b:60:33:eb:62:a8:8c:0b:db:90:87:33:49:41:bc:a2:85:1f:34

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Kaspersky Lab,O=Kaspersky Lab,L=Moscow,C=RU

Chains

Apr 9, 2019

CN=Kaspersky Lab,O=Kaspersky Lab,L=Moscow,C=RU

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Kaspersky Lab,O=Kaspersky Lab,L=Moscow,C=RU

Serial Number

0f:9d:91:c6:ab:a8:6f:4e:54:cb:b9:ef:57:e6:83:46

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 2, 2017 - Jul 8, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

SERIALNUMBER=1027739867473,CN=Kaspersky Lab,O=Kaspersky Lab,POSTALCODE=125212,STREET=39A/2 Leningradskoe shosse,L=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.2=#13064d6f73636f77,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

07:f9:d8:0b:85:ce:ff:7e:e3:f5:8d:c5:94:fe:66:b6

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 16, 2017 - Sep 13, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

1

Major OS version

5

Entry point

12800

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Perforce\All\virlab\anti_rootkit\research\KlDropper\Release\KlDropper.pdb

rpcrt4

UuidCreate

kernel32

Sleep LockResource DeleteFileW CloseHandle GetModuleHandleA FindResourceW GetProcAddress MoveFileExW CreateProcessW CreateFileW WaitForSingleObject GetTempPathW RemoveDirectoryW WriteFile GetCurrentProcess SizeofResource CreateDirectoryW WriteConsoleW LoadResource UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW EncodePointer RaiseException GetLastError GetModuleFileNameW SetLastError RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetStdHandle MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW GetProcessHeap HeapSize HeapReAlloc GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers DecodePointer

advapi32

SystemFunction036 SetSecurityDescriptorDacl CreateWellKnownSid SetSecurityDescriptorSacl OpenProcessToken InitializeSecurityDescriptor InitializeAcl GetLengthSid AddAccessAllowedAce GetTokenInformation

Divulge-Stealer/packages/Microsoft.Bcl.AsyncInterfaces.8.0.0/.signature.p7s

SHA256 8e667553b7762b00639f9addb309d58aec20a57323c6abd5bda7c3372f0c96fe
MD5 37252d818734d0b29c5ac06785048a03
SHA1 fd90ea5e643c315d5af96a184ff70507bf3b694a
SHA512 000543fb65e0deadcf922089987a8c7fdeb88848c306d210d89e850e223d631c95ed0313f71c9bb7c7a3b9bc17a00994370c0a6fde9d8ee3030c456afc88fd21
SSDEEP 384:I0vDG6w0HQIYiKDrzJNyb8E9VF3AM+oOUW+JNyb8E9VF3AM+oN/:I6DG65YiKvxENAMxdENAMx5
TLSH
T1FCB229B2C9646C01EE5B8C4675C89E3B6E7577876AD0C4E3136DC1908B827827AEC1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.Bcl.AsyncInterfaces.8.0.0/Icon.png

SHA256 3356b59b6d9c24db3a22398c0fb3430724052fe75ae5e8430ee8ede2fb713356
MD5 09e1aea3b3b37c1d1df0cac1526db117
SHA1 62e90259673547dcd6f96724457102bce993a21d
SHA512 12d5aa8bea27ad6a1118bee3b1185dbb952197dfa4465e141d3b51090364db7d7ab7c2add6463a0adc318410faf1c3783c69b35e08cba0285571c59c0c7aab25
SSDEEP 96:663c45/CUP/tGCokZHaRNDDxzlmOgJ5T0bI645pjXxHwLW+ditsML:XZ5qUHtGUwfDNhgvX5pjTIy
TLSH
T1E1E1B1E0C79151FBC4B8A7F086DB4D999ACAC5B8B3371B0A6F0814AC392FBA55114F46
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.Bcl.AsyncInterfaces.8.0.0/LICENSE.TXT

SHA256 d7a68596ab69b06f51ca278a6545148e4269a9381c26d597c13df5d88e08cf5b
MD5 ba2bed45d99b13d4c31485d0631ae675
SHA1 26c7c096ac257154020a07532c5edeba91ee97e0
SHA512 430f0a57ff6be9cb03316eb7312b70f5a2eb44175edacac242a9fd329257ae52c03de8add8a957cd3a336f99fd638eb89d8d3d1338525d5be21d8f4e22f86f97
TLSH
T15221C61E73560363186203614168ECC1F12BB14A3E6F0985306EF309132A018C6FF868
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/Microsoft.Bcl.AsyncInterfaces.8.0.0/Microsoft.Bcl.AsyncInterfaces.8.0.0.nupkg

SHA256 f5a5a68b03092ab2abf68843d4a4aea25dfbcbe8dd0f13c625cb779b6fc1927c
MD5 9876032db290071aaf7b96d523f8b2e8
SHA1 6d2611bf4407c38b619331b39bd354423cd62792
SHA512 79cb0773d94465924cee4e471d90353d5d8df842c46ab2c572cb15d9b9fb5d0209a1a88d64392995335c5fe54a00d7c3194440b84c95142711bbb685cb5e9552
SSDEEP 3072:OLZWBdfCpEi1fmzfoXcSntk1S8VqZwDpBeWI1:8mdfCalmcwQb9BM1
TLSH
T18DA3F022D654BC62DE4BED7031C88A297D35779B2AD4C4E32315C0948BC27963EEE1AD
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.Bcl.AsyncInterfaces.8.0.0/PACKAGE.md

SHA256 35a3cce16209a2c85b6ad7e3a4211b5ff64b2bc2835d715b2998843bcc0e18ec
MD5 3dcdb22610a9976cdd8de1782e3436be
SHA1 d6f4f28b208315c08fcfce32e72545fe7ba4e1ff
SHA512 3b116151a7c85679cd425eda20c4d93b0e592d22ffcc804de7c2d705bc9e4f8d0896f941f97459236bd9b5221e323c963949be4615364661d525b20f29fc55eb
TLSH
T1B041632957420B3A1BF23066B6089558DB3D647E2DB25964300C8562BF238085536F7C
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/Microsoft.Bcl.AsyncInterfaces.8.0.0/THIRD-PARTY-NOTICES.TXT

SHA256 19c19dcac9f3ee6302cfbc6745bb8e79f08efc4c933eb8dc5509bf14b88347ec
MD5 bb0d94085c74c0c1ab94ff3451e5ed6e
SHA1 545f9b60da6e83fd233d283f30520f07ec05ba43
SHA512 e179c051afd2308803f2019c49230d1321294838f263cf38eb8fdebb6d08835ddfc38b52c1faf237cc9312314e7e9c962fb93862a8d9661fc5661d4172719643
SSDEEP 1536:HA4jHwLvGfgg39/zwgAVkguQqQhrDjuglN8g+eCJwk3WvrpX7anu6Y9LSFhUJXJL:HA47wyogz1AVxu9MjHlNZ+fJw9rB9Lw6
TLSH
T1C563C55F7E450B7319E2C3956569A8C4F22FA02E3B6B2944346EE248233F42DD6FF458
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.Bcl.AsyncInterfaces.8.0.0/buildTransitive/net461/Microsoft.Bcl.AsyncInterfaces.targets

SHA256 da8f4d9446189e4a7d21b202575473602ff15281afcde516b02e284f9fe94642
MD5 ea576974a2a0e6a3c50d7fba2eb16a86
SHA1 66f10b4ed7edad4ae75757b33cc9bc2851833359
SHA512 6afa6077fbb2946c084793bd3d3445ce270693abf9183ca72c3f44a7610f9eb2dd3e47ad55de9c99381c6a8a5ee734595b5cca48c66d41d53dbdfa513205415a
TLSH
T163019E19F35137E2406032D065620E61F2AFD2FB3A528298740CD78A53229E0C877657
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/Microsoft.Bcl.AsyncInterfaces.8.0.0/lib/net462/Microsoft.Bcl.AsyncInterfaces.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 80678203bd0203a6594f4e330b22543c0de5059382bb1c9334b7868b8f31b1bc
MD5 ff34978b62d5e0be84a895d9c30f99ae
SHA1 74dc07a8cccee0ca3bf5cf64320230ca1a37ad85
SHA512 7f207f2e3f9f371b465bca5402db0e5cec3cb842a1f943d3e3dcedc8e5d134f58c7c4df99303c24501c103494b4f16160f86db80893779ce41b287a23574ee28
SSDEEP 384:cOJWqnwCBbNAP0VES2j0cX6dAl+NWpVzrdcoquWeP/WxR5kHRN7dDFcYR9zPrf8O:culwCBhdVv2wK5fdcUtFFn9zT8pY
TLSH
T14FC27C1A935C1317CEAF2EB4E570D9422935E78A2C22EB3E1588F2950D97345EB31738
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

73:a6:36:c1:dd:b5:ab:95:84:54:f7:d7:ec:c4:a1:7e:22:c6:c0:c4:77:c8:31:52:a6:11:c8:6c:c8:6e:03:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 31, 2023

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 11, 2023 - May 8, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:d2:21:24:31:4a:58:bf:2d:11:00:01:00:00:01:d2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 25, 2023 - Feb 1, 2024

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

21458

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/Release/net462/Microsoft.Bcl.AsyncInterfaces.pdb

Divulge-Stealer/packages/Microsoft.Bcl.AsyncInterfaces.8.0.0/lib/net462/Microsoft.Bcl.AsyncInterfaces.xml

SHA256 3d06c35d7b0eca37abe2d135cfe12d1012816a99e5e92e0cf4e8501e1b540aae
MD5 1fc4bc74b30d484c24b04de5c0a38f5e
SHA1 aa0f9f8db757d37f1f92473a57ad53f20615460a
SHA512 6ba26c5d6edf273cfae5e637ef1623fa37b171d8927bfd9fa8c85dcc27eb6a4fbbf8427e08cc61746604dd0e75e4ba31fcfc661349966fc5aa48da8d5b5f6045
SSDEEP 384:XgOpngSae6jWuTPP/xM2fB8qnmltJ5XZzRzgqW81Fu3DRmfCh7sE+siDBQsFJIss:0FQJNTR7TIcXI
TLSH
T183E20F2473C99B220CB6121A8D18F0C4EE225E37695D983834CD6D679F7B89663FF4B4
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.Bcl.AsyncInterfaces.8.0.0/lib/netstandard2.0/Microsoft.Bcl.AsyncInterfaces.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 33e3c58d46c76d5535d7c24085957b7ccb7ce3815707300955a6309ecc2e81d1
MD5 c0da2ad16384a9c4dd9c411ebb330646
SHA1 522dada541bf59299ec518042d5162da7d7bb87b
SHA512 1255e7130f204a585f25cb68ede2a3cfc6ac0eb1c0f0ff075198b4f2943ca703c6e849429acb83d21a7f684c261b46554f9baf6e8e235696ebd59202df10a54c
SSDEEP 768:Iulwgl2xxrZ7VO26K5EcN+L/igQL9zRiO:BwLpBQKicNGigQhzUO
TLSH
T185C26C16E36C9317DE6A6FB09870CB433A79E78A2C12E63F1588E2660C873459730779
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

5f:cb:8b:6d:54:6c:e8:8b:93:05:38:b4:1e:5e:52:65:6b:2a:f0:83:fc:6c:84:a5:53:04:2c:97:61:ae:d2:55

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 31, 2023

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 11, 2023 - May 8, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

21454

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/Release/netstandard2.0/Microsoft.Bcl.AsyncInterfaces.pdb

Divulge-Stealer/packages/Microsoft.Bcl.AsyncInterfaces.8.0.0/lib/netstandard2.0/Microsoft.Bcl.AsyncInterfaces.xml

SHA256 3d06c35d7b0eca37abe2d135cfe12d1012816a99e5e92e0cf4e8501e1b540aae
MD5 1fc4bc74b30d484c24b04de5c0a38f5e
SHA1 aa0f9f8db757d37f1f92473a57ad53f20615460a
SHA512 6ba26c5d6edf273cfae5e637ef1623fa37b171d8927bfd9fa8c85dcc27eb6a4fbbf8427e08cc61746604dd0e75e4ba31fcfc661349966fc5aa48da8d5b5f6045
SSDEEP 384:XgOpngSae6jWuTPP/xM2fB8qnmltJ5XZzRzgqW81Fu3DRmfCh7sE+siDBQsFJIss:0FQJNTR7TIcXI
TLSH
T183E20F2473C99B220CB6121A8D18F0C4EE225E37695D983834CD6D679F7B89663FF4B4
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.Bcl.AsyncInterfaces.8.0.0/lib/netstandard2.1/Microsoft.Bcl.AsyncInterfaces.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 136d5965cf4768e8420b547a8bddea882921f426c371833d558a858a2f0c235a
MD5 b984be2a4fc05e9f83e7446b4455806d
SHA1 3a9cd4a322a8f91e67552a87b079a4652805848a
SHA512 d0200ffceb4f850db6a7b3e1d7aab6b996ae8f26971472eca3e80d0ab4c763ff13f628a48c1ce02bb9d695a90986f872b81932ee8b7aa45b5cdf67080bb55b71
SSDEEP 384:JbZwqhkB49n5q1WeP/WuTb2HRN7IPsWAR9zgX2iKdTS:FkBT5/iIkL9zRiKE
TLSH
T1B0825A62D7AC8207DCB62FB0E975D5123D39BBD26C22E56E0589E1460C93B81DB3533E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

d1:cb:37:a4:5f:de:7f:72:82:b4:b6:5b:b2:cf:27:16:79:de:7d:09:ab:67:5b:f7:d7:a8:4c:82:61:8c:e8:63

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 31, 2023

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 11, 2023 - May 8, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b3:fe:25:ce:29:1b:1b:8a:1c:00:01:00:00:01:b3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

13682

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/Microsoft.Bcl.AsyncInterfaces/Release/netstandard2.1/Microsoft.Bcl.AsyncInterfaces.pdb

Divulge-Stealer/packages/Microsoft.Bcl.AsyncInterfaces.8.0.0/lib/netstandard2.1/Microsoft.Bcl.AsyncInterfaces.xml

SHA256 5976d8c6e990008ce2d8b3e7dcba62c1c428a0ae18002f68db85a1636f39a67c
MD5 eac05809778dbe8c7967a3c122e11971
SHA1 f148f3327d08cabfbfa40c05a6ab25a5704505e4
SHA512 bf810f48ef2bf3690468e4f06f8adc094e19961a8b29d4901e2103d3cc1d5e6e6b640ec123f0c52304cd3a4340db0cec0d24349462222cd50bff5c4c0cd9c63f
SSDEEP 96:ei/vl5RaMcwo3LGBQySad93EvLd4z8ySYSe93FEN:Tju
TLSH
T1B1E18A1577C69E320C7201279E68F8C4FF124D37166AAC29B2CD1E5B4FABC91227F564
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Abstractions.8.0.2/.signature.p7s

SHA256 4b17c75f03bbd7d177ba21ec6869cdd430a4a4bc52461126699d3c69021bacf4
MD5 a4730ac82704d4be7ebc2726b0080ef9
SHA1 26e4908345f0bb4b5d76bcf3f238d80fc22ec715
SHA512 2abfb5beeffd5429ab994e549d239c5d0462db0f74b3160c26d7f6fb0c443f156d1f7b49ed995df24754733a3c4a5d283cb23c15b24866a8f0890912962a94f5
SSDEEP 384:RmH8HQIYiqIYiKDrroDEhdJNyb8E9VF3AM+o8/uyTrXJNyb8E9VF3AM+oUKST:RcG5YiXYiKvEAVENAMx+TrdENAMxiT
TLSH
T16FB24AB389146C04DE4BCD4175C89A3AAE7677876ED0C4D3226EC1808B953877EED1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Abstractions.8.0.2/Microsoft.IdentityModel.Abstractions.8.0.2.nupkg

SHA256 8f7ed6598ad880834a567e5e5a1cad19a77b9361b040f09e9ae9895d4edc1ecc
MD5 739bc6e992677af60d0dfd09a01bf3d5
SHA1 ad0064f52e3f843f31a36bc9a6c5590be62a6abf
SHA512 5b8f448390c274640196940d9f162bd58385629fffb92bbb8800545ad6d49090343f74bb84644a3826f776ab97609e63806d57b7eeea73c62b1fcb11b1fb96ab
SSDEEP 1536:y1fxPoxBYl8Wmmffx3FPAelVYmSKaXMj6bQF8mN8qv1mjl8uBdE4T8lv7X7KvEAm:y1fa374B3FPAgwS6bebv12vEBvbIEkjc
TLSH
T138A3E0D2CE547C16EC1BAC3174C55A26B8B567A33E9098E72219C1C087923C67DEE0FB
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Abstractions.8.0.2/README.md

SHA256 c774521dbec393b291c914f4cfbd80bd01ba1f8e761e55ac908e30158623cdaa
MD5 14357cf67f2be3243b85b424581b2d0a
SHA1 f1a58128629c14fd34c564e30b8c33d7030865be
SHA512 9f0eb798fd1ea767ffd0850d441578d2b8e9e47679f5be4871569e18757e7e4bad37eb6976a47d65bda6ec6ae143a0f0e89df4733e4671ec620733f5dd686a61
SSDEEP 96:I9P91rBZROodWawmyK3R2nD7N3xFXfIGd9Rs9+FxVpQScBC/sGPL7DP1MznFzFZc:mrBZ8PLmyKu3xFB90+bVpVckKD1w
TLSH
T13FA1F9B7D18A0A775B237281FF89A488E36F918A1E9404FC3491809E5312FE9C2B70D9
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Abstractions.8.0.2/lib/net462/Microsoft.IdentityModel.Abstractions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 52bfa8a10100b00c38ab5a8c72ca2b20c710afe00b530198b029af4a2fb37bac
MD5 689c4cf0253accf3589c36bf8161666e
SHA1 347671fe53e5ec3509f1a28c3e9b9111a10739a8
SHA512 a357970d4b934c4a2bc26b2f02a10be3fd658bfa7b20b323b3cab938a1ab234eb259aa1503098719ae301644674cc0a9a90cce80223dcfe3b0b4284d7d3a5589
SSDEEP 384:ow+DHw2OLyQ1VnwmzWdkoW1v2HRN7PYMTR9zrs0Oyc:oul7wULiAg9zr7Y
TLSH
T1C2924B59C7AC9213EC872A31B1AADD432E3DA7C78811C23E5B4CF5591C537899B3123E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

bb:3b:a7:a3:a0:02:08:55:2d:4f:6b:3a:a0:e4:e3:8d:76:16:48:65:71:84:0f:67:f5:db:50:f6:8e:ac:c2:c2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:401A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:fe:d0:a8:c2:7b:34:21:0b:01:00:01:00:00:01:fe

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2024 - Oct 22, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

14902

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Abstractions/obj/Release/net462/Microsoft.IdentityModel.Abstractions.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Abstractions.8.0.2/lib/net462/Microsoft.IdentityModel.Abstractions.xml

SHA256 5e729e604a63929ba0d77d1b484da1144d719e5a76dc32a8109acf609ca2fc3b
MD5 9508b8014c25a184631e8cb8221756df
SHA1 fb4dee5d26bff00ddfa82959e1f99ad04da48659
SHA512 3778696c092dfa0186ffe73266475dda864ac19f6d1e6e645ca1f2ab160d82378576082c357d1448b09c3235283865d8ac38574bfb149e5f0f5cd91e52f64e6a
SSDEEP 192:FL8OKRQ1+594G4+47b6t/594G4+4CkCMZBWM:Z8c+594Rp7et/594RpCkCMZBWM
TLSH
T17772E018BAC1EF6119B75212A925F884FF798973102A8D1A35CE1F1B0F36CC6A2FF545
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Abstractions.8.0.2/lib/net472/Microsoft.IdentityModel.Abstractions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3cda5ba0bf7855bc7ddb513dd349388e974d37ede4ceffb311700a95a3203f84
MD5 e6184e4766c6f12614793eac9deb3f47
SHA1 3f867acc4202875a5a85c6aa21f64f52b5291df3
SHA512 fe53cd254c7d067a0497c9033b40d49fc331572e26458d351547cdfe9047c075f3e53023da6952c1327bcf331760e5a9e67544c431886117b463a86ea4f16dea
SSDEEP 384:8w+DHw2OLyQ1VAzLzWdkoWY2HRN7YVYMTR9zrs0eU:8ul7yVaiYeg9zr7eU
TLSH
T1B3923A59C7AC9253EC9B2A31B1AADD472E3DA7C78811D13E4A8CF5491C137899A3423E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

dc:83:e9:03:98:12:29:5e:2c:6c:8b:b4:0b:86:5f:0f:d3:c6:39:ba:a5:a3:bc:24:0f:8e:84:07:fa:d2:9b:58

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:401A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:fe:d0:a8:c2:7b:34:21:0b:01:00:01:00:00:01:fe

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2024 - Oct 22, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

14902

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Abstractions/obj/Release/net472/Microsoft.IdentityModel.Abstractions.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Abstractions.8.0.2/lib/net472/Microsoft.IdentityModel.Abstractions.xml

SHA256 5e729e604a63929ba0d77d1b484da1144d719e5a76dc32a8109acf609ca2fc3b
MD5 9508b8014c25a184631e8cb8221756df
SHA1 fb4dee5d26bff00ddfa82959e1f99ad04da48659
SHA512 3778696c092dfa0186ffe73266475dda864ac19f6d1e6e645ca1f2ab160d82378576082c357d1448b09c3235283865d8ac38574bfb149e5f0f5cd91e52f64e6a
SSDEEP 192:FL8OKRQ1+594G4+47b6t/594G4+4CkCMZBWM:Z8c+594Rp7et/594RpCkCMZBWM
TLSH
T17772E018BAC1EF6119B75212A925F884FF798973102A8D1A35CE1F1B0F36CC6A2FF545
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Abstractions.8.0.2/lib/net6.0/Microsoft.IdentityModel.Abstractions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fe13df0feb31927cd52cf0cc900e9b8114fc51c148ae1aa84547a1166e4636a4
MD5 773c14ca7292c9b0066c2cc3151cac40
SHA1 5d9cb7cf76595045f66f5466d8fc7d19503cd250
SHA512 a231bcf56c85efb2a7856851af81a265f97da8b93493ad01ec616750e0eba9ea70a5b4f04252ff913a9dbd1048e28dafb37a6d49abae370014aecfd2bac25806
SSDEEP 384:Eow+sQvSgwFtH1d/I6rzWdkoWy2HRN7hSR9z9qRMV:EoPqnjH1wihe9z0yV
TLSH
T16D924B559BECC253EC9A1B3166A6E9432D3AF3C78821D16F069CF8492C137C5DA31339
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

7b:36:bd:62:6b:3a:7c:9a:9a:10:d4:22:29:e3:56:22:1d:d5:5a:d9:53:14:62:01:e5:60:ac:ef:1b:f7:90:d1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e7:2e:8f:2f:93:0b:4f:1b:e9:00:01:00:00:01:e7

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

14962

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Abstractions/obj/Release/net6.0/Microsoft.IdentityModel.Abstractions.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Abstractions.8.0.2/lib/net6.0/Microsoft.IdentityModel.Abstractions.xml

SHA256 5e729e604a63929ba0d77d1b484da1144d719e5a76dc32a8109acf609ca2fc3b
MD5 9508b8014c25a184631e8cb8221756df
SHA1 fb4dee5d26bff00ddfa82959e1f99ad04da48659
SHA512 3778696c092dfa0186ffe73266475dda864ac19f6d1e6e645ca1f2ab160d82378576082c357d1448b09c3235283865d8ac38574bfb149e5f0f5cd91e52f64e6a
SSDEEP 192:FL8OKRQ1+594G4+47b6t/594G4+4CkCMZBWM:Z8c+594Rp7et/594RpCkCMZBWM
TLSH
T17772E018BAC1EF6119B75212A925F884FF798973102A8D1A35CE1F1B0F36CC6A2FF545
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Abstractions.8.0.2/lib/net8.0/Microsoft.IdentityModel.Abstractions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9ca532051c3e292c143233f13c84f9f6bec34ef66b2f63c863bbeb631e943dc2
MD5 4725e28ab5f18a1e22119f6da12b42f2
SHA1 01de75a908c47e7e2e460c908dc325d30a1d1579
SHA512 021965a1f2956c5f78a14704fddcbc70ba8b4d7423eaed173fa97a7cc79391acf5bdbd931b8ae576ab49c1dd33a9d3d784cf9d5c1999e90433f4b58f68a45320
SSDEEP 384:X25zb5Hd5+1SbBCbzWdkoWue2HRN7HR9zEUsxctM:XuzF94yBCFdix9zh2
TLSH
T124924B5587ECC153EDE71A3166ABE95B2D39A3C78C10D12B0698F90A1C137D89B7063A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

d8:aa:98:1a:a3:4f:8d:4d:88:10:ec:9c:fe:5c:ef:92:a6:8d:ff:12:8a:ba:db:cf:ea:e9:b2:49:c6:14:c5:34

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e8:50:b0:80:cf:2b:72:99:4d:00:01:00:00:01:e8

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

14434

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Abstractions/obj/Release/net8.0/Microsoft.IdentityModel.Abstractions.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Abstractions.8.0.2/lib/net8.0/Microsoft.IdentityModel.Abstractions.xml

SHA256 5e729e604a63929ba0d77d1b484da1144d719e5a76dc32a8109acf609ca2fc3b
MD5 9508b8014c25a184631e8cb8221756df
SHA1 fb4dee5d26bff00ddfa82959e1f99ad04da48659
SHA512 3778696c092dfa0186ffe73266475dda864ac19f6d1e6e645ca1f2ab160d82378576082c357d1448b09c3235283865d8ac38574bfb149e5f0f5cd91e52f64e6a
SSDEEP 192:FL8OKRQ1+594G4+47b6t/594G4+4CkCMZBWM:Z8c+594Rp7et/594RpCkCMZBWM
TLSH
T17772E018BAC1EF6119B75212A925F884FF798973102A8D1A35CE1F1B0F36CC6A2FF545
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Abstractions.8.0.2/lib/netstandard2.0/Microsoft.IdentityModel.Abstractions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ea7d94b5cd2180716d2f857ed322343a2b2328f1b3796335762c8b681d34c404
MD5 1b8d28c07b48d08dcf96ec4b92081a32
SHA1 4f548d267f1038cdaed1a9787163790415ff43e9
SHA512 ad386616cb8de0aa93171c3d4dd4e5b6353b34fa4999bb6eba9ae947599c0b93dac89001d30db040efae734623ea4460626d84a67b4bf43ef37a3b6c8d54ddf9
SSDEEP 384:3wmz4ptFZK1V4RNzWdkoWw2HRN7OIBHR9zQvK4C:3H7wz2inf9zM5C
TLSH
T18D925B49C7ACC243ED5B2B3062A6DD472E3DF3C68811D67A574DF80A1C633C99A2023E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

53:80:68:fa:94:54:9a:ca:02:71:94:e3:74:0f:c9:b3:3b:a9:9d:d2:d3:ea:3c:91:9e:f3:e7:67:a3:b7:59:09

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:321A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f8:a3:a1:26:0c:0c:40:48:fe:00:01:00:00:01:f8

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2024 - Oct 22, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

14906

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Abstractions/obj/Release/netstandard2.0/Microsoft.IdentityModel.Abstractions.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Abstractions.8.0.2/lib/netstandard2.0/Microsoft.IdentityModel.Abstractions.xml

SHA256 5e729e604a63929ba0d77d1b484da1144d719e5a76dc32a8109acf609ca2fc3b
MD5 9508b8014c25a184631e8cb8221756df
SHA1 fb4dee5d26bff00ddfa82959e1f99ad04da48659
SHA512 3778696c092dfa0186ffe73266475dda864ac19f6d1e6e645ca1f2ab160d82378576082c357d1448b09c3235283865d8ac38574bfb149e5f0f5cd91e52f64e6a
SSDEEP 192:FL8OKRQ1+594G4+47b6t/594G4+4CkCMZBWM:Z8c+594Rp7et/594RpCkCMZBWM
TLSH
T17772E018BAC1EF6119B75212A925F884FF798973102A8D1A35CE1F1B0F36CC6A2FF545
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.JsonWebTokens.8.0.2/.signature.p7s

SHA256 f2b6dc9dff1b61e3415b7bcbeb74050c3bed9c885e946b80fe54cfbaca423adc
MD5 39f9a34d1ae93ee71620ca860704e8f7
SHA1 0f1bad211d6dead7307ec261c2744f03b12091f2
SHA512 db23ba9a9d297901a983664b3e1e861af5e542179d536dabba6ca2feabdf9ff219ebab78883be7361641a605f21b9b5cd79a84cfd9031954b43d9665957deaf0
SSDEEP 384:WhH8HQIYiqIYiKDrroDEh6KOJNyb8E9VF3AM+oIynllJNyb8E9VF3AM+ogx3:WlG5YiXYiKvEA0ENAMx7rENAMx+
TLSH
T15CB23AB389146C04DE4B8D4275C8DE3AAE767BC76EC0C4D3222DC1908B917867AED1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.JsonWebTokens.8.0.2/Microsoft.IdentityModel.JsonWebTokens.8.0.2.nupkg

SHA256 b222a5a18399281455fff6a933f3be03e2b08405936746679c223b3eafa9c4cb
MD5 77a27b0d8508a74889234e340bc89399
SHA1 8e88e9a9853f0f5dbabe86b476b2d79f3b6e4b62
SHA512 8b9ea2e0741f458ef190b3dcbf32081b119cb73a9b59c7783622bde463d04d05fb24b36667d9aa0dec600bc7ddb214ea250d963c7e58a8ca6d7bcdbf4fe3dc47
SSDEEP 6144:4n8FOiWE54K9zG7vOCTA0/Pim36ID1eIksJJREwqf:44Oi74K9zG7WCT1L3hTn7Ewqf
TLSH
T1668422E289206420DFA75FB971C0FE19BDF412478D90D6E353E2C240A78A7C61FD66DA
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.JsonWebTokens.8.0.2/README.md

SHA256 c774521dbec393b291c914f4cfbd80bd01ba1f8e761e55ac908e30158623cdaa
MD5 14357cf67f2be3243b85b424581b2d0a
SHA1 f1a58128629c14fd34c564e30b8c33d7030865be
SHA512 9f0eb798fd1ea767ffd0850d441578d2b8e9e47679f5be4871569e18757e7e4bad37eb6976a47d65bda6ec6ae143a0f0e89df4733e4671ec620733f5dd686a61
SSDEEP 96:I9P91rBZROodWawmyK3R2nD7N3xFXfIGd9Rs9+FxVpQScBC/sGPL7DP1MznFzFZc:mrBZ8PLmyKu3xFB90+bVpVckKD1w
TLSH
T13FA1F9B7D18A0A775B237281FF89A488E36F918A1E9404FC3491809E5312FE9C2B70D9
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.JsonWebTokens.8.0.2/lib/net462/Microsoft.IdentityModel.JsonWebTokens.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 43e72f5682acc99e6c3558db254d6cf026fae147d01f5cd57b9ced6950bffde1
MD5 58e77992676c416a9cee019cab0d6ec0
SHA1 51ddb68f9012780f82ec21ca39ae09fca50d29fb
SHA512 96716a3dff1ed0ca5335e85fba4969b409df9d51f1d122d704a03bf66d8dfdf3f71e37d598d0630bdab52e8008d3bbca68d42ef979e9a55bc1ae12b23a6729b0
SSDEEP 3072:3rcuzSJgvTRIfvjSCYEkrn2N2sN9XNEgfpXaXr0iMJgBGILkDzVZl0+88niFF2G7:33+KNIf722a8M
TLSH
T16DE3064877FC4706E5FF6F3D64B460140EBABA4AAC79DB4D0D6095DD0822F809A60B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

74:17:10:71:8a:c3:6f:1e:ed:0f:6b:dd:c9:20:97:cb:91:cc:93:5e:b8:88:d3:d0:bc:5c:f7:63:0a:ea:28:ca

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e8:50:b0:80:cf:2b:72:99:4d:00:01:00:00:01:e8

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

147870

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.JsonWebTokens/obj/Release/net462/Microsoft.IdentityModel.JsonWebTokens.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.JsonWebTokens.8.0.2/lib/net462/Microsoft.IdentityModel.JsonWebTokens.xml

SHA256 d83d266a6e2c8310fd7d1dd421dcddc0e40ff91aae44671e7da13e601b945522
MD5 fee07f75fbe294d617b275af2040c339
SHA1 0b4a8e5206b1f20b7c908a8cadea8718c9bec629
SHA512 023282d0e44da935fdeb78e6836e819aaf3a3e491363ab001470d725bb189960864f86553ff6dc6b1a162e6d8534bcd7e447da82e05326b32dc8af5f5edf4873
SSDEEP 384:FCUC1Z44jOOgl3E2r2v3Juxi2ZK3Q3McQ08Hh4zPBexPfZ9T9ol9uji29GjU9usI:FHGUUh4zywzrkfOs0/gMul44buJVp1
TLSH
T107C33115AAC689225873570BDCA0E494FB7E0613161EED5371CD4E9B3F2AFC2D1A348B
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.JsonWebTokens.8.0.2/lib/net472/Microsoft.IdentityModel.JsonWebTokens.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1133557b978ba2b4449a2f771da2767fb284093ef3b5874d397efbbcc33eca74
MD5 4d972211bc037c122f8c6ebc3ea67310
SHA1 39799e10404fff3270fd588027f7fcfdae08b7e4
SHA512 5bc85393c03bb8b360b5217c5eccab79eca9087402faf12e785d55f97307fa78712e01c56597866ae542515de68c83fcda842f3dc8b8d1273d609ae589c6b1a5
SSDEEP 3072:7AqNy96xTDhknNJEn9lA8fYEk3nYj22N9XNEgfpXaXr0iMJgBGILkDzVZl0+88nA:7xy96xPhknNJEn9iw2UahB
TLSH
T168E3074463FC4345F6FF6F3D64B0A0550E7ABA4AAC78DB0D1DA055DE0822BC09A64B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

ef:b2:d4:d9:0c:2a:06:16:06:d7:ec:9c:b8:3f:4f:93:3a:b3:6d:4d:74:05:d4:cd:9f:5c:ae:90:17:c0:77:9b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:86DF-4BBC-9335,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dd:5d:57:1d:95:d4:ad:aa:1b:00:01:00:00:01:dd

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

148846

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.JsonWebTokens/obj/Release/net472/Microsoft.IdentityModel.JsonWebTokens.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.JsonWebTokens.8.0.2/lib/net472/Microsoft.IdentityModel.JsonWebTokens.xml

SHA256 d83d266a6e2c8310fd7d1dd421dcddc0e40ff91aae44671e7da13e601b945522
MD5 fee07f75fbe294d617b275af2040c339
SHA1 0b4a8e5206b1f20b7c908a8cadea8718c9bec629
SHA512 023282d0e44da935fdeb78e6836e819aaf3a3e491363ab001470d725bb189960864f86553ff6dc6b1a162e6d8534bcd7e447da82e05326b32dc8af5f5edf4873
SSDEEP 384:FCUC1Z44jOOgl3E2r2v3Juxi2ZK3Q3McQ08Hh4zPBexPfZ9T9ol9uji29GjU9usI:FHGUUh4zywzrkfOs0/gMul44buJVp1
TLSH
T107C33115AAC689225873570BDCA0E494FB7E0613161EED5371CD4E9B3F2AFC2D1A348B
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.JsonWebTokens.8.0.2/lib/net6.0/Microsoft.IdentityModel.JsonWebTokens.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 06c8d34db92bc8709b5142b9abd03e513d48fc5a95b23ae369e25658e8409b86
MD5 db9cd101352808c7cf5eecd5b6ff1598
SHA1 8350e84437aa01165126290cfe1feb7bdb23c4c2
SHA512 4a0f96bdb1ec62fa9f510f52b91de02db1aefe531acb6e672a9c7770ab17c1a5e1803cb055d81c9b71983693023356f8c5eb56ee85090e57d10c6acad5333b8a
SSDEEP 3072:xcABE9jnhN6XTMNMHIc9eK8q83MnYfkFC4k2RN9XNEgfpXaXr0iMJgBGILkDzVZo:xHE9zhN6XT4jKr83N23aNB
TLSH
T1B8E3080877FC4345F5FF6F3D64B0A0544E7ABA5AAC79DB4C1CA096DD0822B809A21B77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

6e:40:a9:8b:1c:9b:17:f1:41:df:0f:bf:3d:a7:dc:76:36:74:20:f6:29:5a:4c:51:86:14:18:c1:dd:f8:f6:ff

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f2:3e:32:d7:64:ac:70:91:94:00:01:00:00:01:f2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

149502

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.JsonWebTokens/obj/Release/net6.0/Microsoft.IdentityModel.JsonWebTokens.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.JsonWebTokens.8.0.2/lib/net6.0/Microsoft.IdentityModel.JsonWebTokens.xml

SHA256 84f09768f8eb365e3415f27e83d579cfaaeb11122d7ecfb52b866f9321395075
MD5 7eb964c86fbd3bfac79f4c9db2a54465
SHA1 3924516679705f779358fb2601721186c77938d6
SHA512 16c1b486360cb6a0d897a43bab8d1998554d4064563087e57edbacf7392e00fc89755bdda867bb3548454a595a659be803b6ab928ba8f6a26bebcef9b885de64
SSDEEP 384:FCUC1Z44jOOgl3E2r2v3Juxi2ZK3Q3McQ08Hh4zPBexPfZ9T9ol9uji29GjU9usW:FHGUUh4zywzrkfOs0/gMul44buJqJIp1
TLSH
T13CC33115AAC689225873570BDC90E494FB7E0613161EED5371CD4E9B3F2AFC2D1A348B
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.JsonWebTokens.8.0.2/lib/net8.0/Microsoft.IdentityModel.JsonWebTokens.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c39830a02e0a6d5902ee77465c63ac05779c7064234e6dd7c899326ee88f1b2c
MD5 0dbb3be0ed151379b8c69a87dbe5be76
SHA1 09bfdfbe7b22b0058df582d064573fbb1454dd65
SHA512 ed6d0e2a13e7d145d5f3445f8f45844757dc329ba9d9efa19a70db3c1f1e51b6b501925a9c953a5233fabc3ff5950ea8247eee37d2a3a5f80800682a1b216093
SSDEEP 3072:3jMMnxb4MTYjsSDzdBkJerZkDHMxzfTWTPgtqoNBYRkgJbl2nN9XNEgfpXaXr0iD:3jPb4MWsrHMxzyTYNW2xasSKxc
TLSH
T1A0F3290423FC4305F5FF6B3D65B490558EBABE16AD39DB4D1CA09ADD0822B809E60B77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

30:c6:fb:5f:65:ba:49:86:da:fb:9c:fa:55:0f:06:fa:ea:6d:7e:74:ef:f9:fa:93:27:b9:31:94:21:f8:42:48

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:3605-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f7:58:20:75:04:ca:fb:c2:f4:00:01:00:00:01:f7

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2024 - Oct 22, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

152098

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.JsonWebTokens/obj/Release/net8.0/Microsoft.IdentityModel.JsonWebTokens.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.JsonWebTokens.8.0.2/lib/net8.0/Microsoft.IdentityModel.JsonWebTokens.xml

SHA256 2f25952fb288696b3abd2e29911a3bce36c6d9de0ccde61fc852f39d30333ea4
MD5 88cf1fffa4593f457e82542e4779d41b
SHA1 0f9b8825791da659780f3fc98fe9b9d0d77e9e61
SHA512 db18169564da59f2b5a142523b8f5c603864ee6e292d989a63fd8252fd7533d09d15ee4533f00f9f642b81a9731dcc02738e6e1b2fa9e53943420bbfe65755ac
SSDEEP 768:FHGUUh4zywzrkfOs0/gMul44buJHw/JIphN5Ol:FHY4zywzrO44bhJz
TLSH
T1B3D34414AACA89225873560BDC94E494FB7E0653121EED5371CC4E9B3F2AFC3D1A748B
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.JsonWebTokens.8.0.2/lib/netstandard2.0/Microsoft.IdentityModel.JsonWebTokens.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d05f58da8cb7748eac3923de8a9820849651de40cddf6df7f48a740adbb1b914
MD5 d0661db471340ea2020605e61a46e9ff
SHA1 10aaf8a27e03c9387af04b9f6d1d3d79f45f3091
SHA512 26b3a803ac0c1cfedba4e17349084679934aa5c1e2edd9aa1846076808be929eda6189bd3d52d3ebe6e27e0e9dd1db825cf8070cb167645160020e5601fe67c4
SSDEEP 3072:/rcuzSJglfYEkkl2N2WN9XNEgfpXaXr0iMJgBGILkDzVZl0+88niFF2G5m5lz1qm:/3+Kla20aLg
TLSH
T156E3F64477FC4706E5FF6F3D64B4A0140E7ABA4AAC79DB0D1DA099DD0822F809960B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

de:f0:4c:8d:a6:08:8e:c7:c6:c3:60:b8:9b:9d:73:23:d7:89:bf:82:57:49:a2:9c:38:ab:e6:07:7b:c5:8c:c4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:eb:e0:18:6c:b5:b6:ef:38:ed:00:01:00:00:01:eb

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

147778

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.JsonWebTokens/obj/Release/netstandard2.0/Microsoft.IdentityModel.JsonWebTokens.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.JsonWebTokens.8.0.2/lib/netstandard2.0/Microsoft.IdentityModel.JsonWebTokens.xml

SHA256 d83d266a6e2c8310fd7d1dd421dcddc0e40ff91aae44671e7da13e601b945522
MD5 fee07f75fbe294d617b275af2040c339
SHA1 0b4a8e5206b1f20b7c908a8cadea8718c9bec629
SHA512 023282d0e44da935fdeb78e6836e819aaf3a3e491363ab001470d725bb189960864f86553ff6dc6b1a162e6d8534bcd7e447da82e05326b32dc8af5f5edf4873
SSDEEP 384:FCUC1Z44jOOgl3E2r2v3Juxi2ZK3Q3McQ08Hh4zPBexPfZ9T9ol9uji29GjU9usI:FHGUUh4zywzrkfOs0/gMul44buJVp1
TLSH
T107C33115AAC689225873570BDCA0E494FB7E0613161EED5371CD4E9B3F2AFC2D1A348B
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Logging.8.0.2/.signature.p7s

SHA256 740017a9bc0aa769cf6b6273a99cfd35394203947b07af56c93baea670f425da
MD5 6a3909d33241522f5e6fe1c94c39122a
SHA1 ecc7350874f5d44c0ae85a78ba15f29a2b2f6677
SHA512 e4e2256f476fe4ac1f3420c53ff71abeae467034f70aee9fd18634eedc7ec6e1b0d5c0129df3de600faab98b0e9babd4eceaf70e3dde9decf732a841a47d184d
SSDEEP 384:WAH8HQIYiqIYiKDrroDEhUJNyb8E9VF3AM+oBqD+bhNJNyb8E9VF3AM+oiF75:W6G5YiXYiKvEAUENAMxK+NENAMxo5
TLSH
T1CEB24AB389546C04DE0BCD41B5C8D93AAD7577876E80C4E3226EC1908B917837BED1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Logging.8.0.2/Microsoft.IdentityModel.Logging.8.0.2.nupkg

SHA256 45e7f91392571d70c076883f622c76e5fb183bb4787821cff0bfc6209cfbd29f
MD5 08be6df4ea216d910b2225ecfd8abf71
SHA1 5812837867d3352d10edff3219a3726f92e2d05e
SHA512 432951df8aa2465ac0a812652045e93d33131e2bd23d9225b5af687dc5de1c82e1a46ccc59dbe76d18376505d70aa7c1cc612cfe64c45e996fa784d72568a214
SSDEEP 3072:zervPE0eUnZf0oiQxqalqoAc+Txa4E4V1ZbIENg:zgtTZsoFxhcc+Th3V0f
TLSH
T160E3F1B3C2A49C02EE4BEB7176DC8C36A9B0A2874E54C5D222C5C06547D67C136EE69E
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Logging.8.0.2/README.md

SHA256 c774521dbec393b291c914f4cfbd80bd01ba1f8e761e55ac908e30158623cdaa
MD5 14357cf67f2be3243b85b424581b2d0a
SHA1 f1a58128629c14fd34c564e30b8c33d7030865be
SHA512 9f0eb798fd1ea767ffd0850d441578d2b8e9e47679f5be4871569e18757e7e4bad37eb6976a47d65bda6ec6ae143a0f0e89df4733e4671ec620733f5dd686a61
SSDEEP 96:I9P91rBZROodWawmyK3R2nD7N3xFXfIGd9Rs9+FxVpQScBC/sGPL7DP1MznFzFZc:mrBZ8PLmyKu3xFB90+bVpVckKD1w
TLSH
T13FA1F9B7D18A0A775B237281FF89A488E36F918A1E9404FC3491809E5312FE9C2B70D9
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Logging.8.0.2/lib/net462/Microsoft.IdentityModel.Logging.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3813db3621a8bed69d3f55efa449fcc3ba8899b14a17c86c136ddf5b0b9516ad
MD5 deb150734b1969ee594a786786c7c1ba
SHA1 56a6d6764a898b0f36bdd3bcdf326bdb92faea11
SHA512 ec84250106576998d749262c30bce8cd6d009cc603cfe8d9a2743301d124d6c39d24a76d64aebdcda33c583930a37b26862bad9fec5398d757bee81d3a65cfa6
SSDEEP 768:3WzdIv28b8ukqa15zUtb6B8xdfbiDmoQ9zW:3WIu8ba1iYCxdODmVzW
TLSH
T1DD034B5263ECC716EEFE1F30B4B9AA02153ABBC76921C75D6954E14E0C03BDA4B107E6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

a4:80:61:d7:38:69:df:95:59:f1:0d:aa:2b:69:4c:6c:09:57:71:37:ae:8e:7d:91:f9:64:57:80:a1:d5:01:9e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:179E-4BB0-8246,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e0:d4:fc:1f:13:15:1f:7e:5d:00:01:00:00:01:e0

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

33922

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Logging/obj/Release/net462/Microsoft.IdentityModel.Logging.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Logging.8.0.2/lib/net462/Microsoft.IdentityModel.Logging.xml

SHA256 bcd29310c4c3d5e201daf9535c3ea4ea87ac84e0a129db8a9a3addf66b03f1ce
MD5 71f0073f8ceef16b1c1d4c327463c11e
SHA1 887d57cfbd0138b1633edf4333f60ea38f42c1cb
SHA512 cbeb7a7cdd6d423a4a74490be99e71d7b828c372a58eb0a9b4d6dae870ef0b727766303d7855b3c3a89a938544eafaf39de71a41e4f2c895c81a435f9b2769f2
SSDEEP 384:so8wGaeaaaeaKaGaXT13i0Dp2Hkw3BZEYjVyrtou7zCVpvhMATWMC:so8wrRvP7zH
TLSH
T196332130BAC58E560C731201EE64F9C4FF364A672109ED2AB0CD6E575F3ECE592AB445
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Logging.8.0.2/lib/net472/Microsoft.IdentityModel.Logging.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 61a92cdd7e59190b36140599b01355eea8112e760ff9652d03cbce3e08473872
MD5 3394299fe2213360cc0e02b203564142
SHA1 1768d6f74cc98c38d47c0acd4425fb14cd5bdf32
SHA512 01e46415c43f9b8ce77b2e8e1ae978295f15bd443ed4c9ea6e32c0c5f47bc17380a087200ba6f3114558bee3a7618ca199d4029d0b4b8957db2771706015e9d4
SSDEEP 768:4oCu7YL50bJGhQkH+zUtb3jw6Bfmilu9zhd:4Y7i0bgHJJLZblqzj
TLSH
T1F8034B5167EC8712EEFA1F30B9B9EA52153ABBC36622C31D6564E18E0C037C54B107EA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

47:e3:b1:0a:ec:40:8c:65:18:4a:44:c2:fd:78:03:66:de:f6:72:31:51:79:cc:f7:21:a1:f9:5f:3e:62:49:3f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f1:b3:45:f5:27:e8:c0:16:d6:00:01:00:00:01:f1

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

33886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Logging/obj/Release/net472/Microsoft.IdentityModel.Logging.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Logging.8.0.2/lib/net472/Microsoft.IdentityModel.Logging.xml

SHA256 bcd29310c4c3d5e201daf9535c3ea4ea87ac84e0a129db8a9a3addf66b03f1ce
MD5 71f0073f8ceef16b1c1d4c327463c11e
SHA1 887d57cfbd0138b1633edf4333f60ea38f42c1cb
SHA512 cbeb7a7cdd6d423a4a74490be99e71d7b828c372a58eb0a9b4d6dae870ef0b727766303d7855b3c3a89a938544eafaf39de71a41e4f2c895c81a435f9b2769f2
SSDEEP 384:so8wGaeaaaeaKaGaXT13i0Dp2Hkw3BZEYjVyrtou7zCVpvhMATWMC:so8wrRvP7zH
TLSH
T196332130BAC58E560C731201EE64F9C4FF364A672109ED2AB0CD6E575F3ECE592AB445
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Logging.8.0.2/lib/net6.0/Microsoft.IdentityModel.Logging.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2a253782b4d896a83d35a67ab0551b794398c3e546bdf65ea1fc2a8dc7256f37
MD5 f8c4b4d54ceb7f7419d26839a728548c
SHA1 74b70407ab6bbf6b494d59d7c11175504bb48a91
SHA512 9f5edb1c6582bc72587dcb427d91139626b705b245d79dcfcd78ec5c7ec7f8ffc61bb75966d7959c177741c93f91011bdfc46aa8b7153f386df19f57bcf8f6ae
SSDEEP 768:EbRlhBmgKxfNJiDxlXEgU9PHcPzQifYidrHU9zCe:EjhcLiD8SLQA9doz/
TLSH
T1A1F23A91A3EC8236E9FE1F30B8B6E9560679B7C37971D75D6990F28D1C037D44A1032A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

52:60:0c:d6:d9:d1:65:2f:22:7c:59:ab:e4:d3:25:32:88:ca:88:b3:95:20:f3:2b:7a:5c:04:85:0e:57:41:15

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:eb:e0:18:6c:b5:b6:ef:38:ed:00:01:00:00:01:eb

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

32122

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Logging/obj/Release/net6.0/Microsoft.IdentityModel.Logging.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Logging.8.0.2/lib/net6.0/Microsoft.IdentityModel.Logging.xml

SHA256 66ec168cfb007fa57e7379cb1018a22c038605a2e2db3b19a66f394ea7dea3cc
MD5 f4fb7d563d6036298d8d7af6a8d03294
SHA1 120dab31ca3c6aa96ec0706078f7225ca5d936df
SHA512 863152e19a1a401b11f7b844ffcda75f0236a1939f27d7010adf916bb51e73720e8f080aa06d2f7399a5f64e92de0dac338061530c33a90d13174faea62191a0
SSDEEP 384:so8wGaeaaaeaKaGaXT13i0Dp2Hkw3BZEYjVyrtou7zCL:so8wrRvP7zM
TLSH
T19B130E34EAC69E5608632201AE64FD84FF764A673109ED2BB0CD6D1B5F3ECE6C267444
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Logging.8.0.2/lib/net8.0/Microsoft.IdentityModel.Logging.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a4b16a48af959a0f0226a6fd048a6a335f12390bfe8f4c4d568ff602ab8492f2
MD5 b49f5cf0fbef281c7be78412d567d538
SHA1 c5d8090e6e9c607a6c1f6547381e8678c8d639d0
SHA512 be95a06d92dd296fed239f7fcaa353fa488b4d7db4c1cc4127606e20be7244335c3d0ef6cf1d77525431f28eaa9de73145690c31e565641f8d5c0deea02fcf34
SSDEEP 768:pbdMm+9adoRgUaP6qnfpib0Rxw9zJZBne:pqmkadof6fEb0IzJze
TLSH
T1D6F25B91A3EC8317E9FE2E30B8B9FA06163677836971C79E6994E18D0D037E40F11769
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

0d:f6:a6:89:62:9a:f2:05:85:ad:7f:e2:8c:8f:35:df:e7:e0:15:c3:68:8a:bc:13:4b:d8:6a:20:3b:d5:9e:8c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9600-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:ef:89:3f:56:a1:58:cc:a8:da:00:01:00:00:01:ef

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

31854

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Logging/obj/Release/net8.0/Microsoft.IdentityModel.Logging.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Logging.8.0.2/lib/net8.0/Microsoft.IdentityModel.Logging.xml

SHA256 66ec168cfb007fa57e7379cb1018a22c038605a2e2db3b19a66f394ea7dea3cc
MD5 f4fb7d563d6036298d8d7af6a8d03294
SHA1 120dab31ca3c6aa96ec0706078f7225ca5d936df
SHA512 863152e19a1a401b11f7b844ffcda75f0236a1939f27d7010adf916bb51e73720e8f080aa06d2f7399a5f64e92de0dac338061530c33a90d13174faea62191a0
SSDEEP 384:so8wGaeaaaeaKaGaXT13i0Dp2Hkw3BZEYjVyrtou7zCL:so8wrRvP7zM
TLSH
T19B130E34EAC69E5608632201AE64FD84FF764A673109ED2BB0CD6D1B5F3ECE6C267444
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Logging.8.0.2/lib/netstandard2.0/Microsoft.IdentityModel.Logging.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b05da1f73a1c997be56bac691155843b95c2ee00982dfd0cbe70df2e41526d56
MD5 62dc35fa19cc770ae8f731a8c1e7fc3b
SHA1 765b39520ec4b69a374ce790920307f5914e1833
SHA512 a54d5955529dba6f87f4503a88d69acc2ac05aaaf7d34762052bb1ab5cfe8c65f58d0ebe821f7eb6c41c38dc0caa488856b198b7ee0ed2800bff2c65d0e6e3ff
SSDEEP 768:aWzzIh2CElWEKk+xUDbDarMfmiHjDuO9zp:acIBkzruabHzp
TLSH
T10F034B51A3EC832AEEFA5F30B874D607153AB6D77932D74D2954E24E0C07BD90B1076A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

24:4a:61:fc:24:80:5b:6e:25:b7:81:e5:6c:a2:8c:64:b2:2b:6a:d3:12:54:d1:07:96:df:4c:64:b8:ef:56:52

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e5:8f:6a:c0:f3:3d:b4:0b:a3:00:01:00:00:01:e5

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

33902

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Logging/obj/Release/netstandard2.0/Microsoft.IdentityModel.Logging.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Logging.8.0.2/lib/netstandard2.0/Microsoft.IdentityModel.Logging.xml

SHA256 bcd29310c4c3d5e201daf9535c3ea4ea87ac84e0a129db8a9a3addf66b03f1ce
MD5 71f0073f8ceef16b1c1d4c327463c11e
SHA1 887d57cfbd0138b1633edf4333f60ea38f42c1cb
SHA512 cbeb7a7cdd6d423a4a74490be99e71d7b828c372a58eb0a9b4d6dae870ef0b727766303d7855b3c3a89a938544eafaf39de71a41e4f2c895c81a435f9b2769f2
SSDEEP 384:so8wGaeaaaeaKaGaXT13i0Dp2Hkw3BZEYjVyrtou7zCVpvhMATWMC:so8wrRvP7zH
TLSH
T196332130BAC58E560C731201EE64F9C4FF364A672109ED2AB0CD6E575F3ECE592AB445
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.8.0.2/.signature.p7s

SHA256 9e5c2eb617c3fb20f81cc9ffbecd9c9c88ef363695addd54bc8d4a36e909d476
MD5 9912b6c4cd5fd34df4cf91fda098ec92
SHA1 37fb34aef87f9c2f7dfae49a9c2a123069a06239
SHA512 0a2e027e20f7875b63c07199b56eec7ae5001a99ebde97df1bf90019428ebedd433079f8af2e6ce0e9f4b1d6d09cfdf54cc6c978d5e79f76ac85704409630099
SSDEEP 384:WTNH8HQIYiqIYiKDrroDEha1n7JNyb8E9VF3AM+oNUAiJNyb8E9VF3AM+ofyAzk3:W9G5YiXYiKvEA4NpENAMxWENAMxzkkE
TLSH
T152B238B389546C04DE0BCD4575C88A3AAEB5B7C76E80C4D3226EC1908B917877EED1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.8.0.2/Microsoft.IdentityModel.Protocols.8.0.2.nupkg

SHA256 5bbeaf76b611fa5a45998ed51c1255d4acfb0d8c74cc37b7d50e46f3768f14cc
MD5 ebae2ee231531521ecdcb46d9bb740c1
SHA1 4f8d2b9e2294bf079bf80a3f83ba436434a73a6c
SHA512 9e9fa24d473eb00a217283b9c97cfd8268afaa91ce72e78b4d4105d1f7594b9662f4fe8c6edd65a891c71196ef1cc9cab4b5647747d9ea6da05b32aae27b153d
SSDEEP 3072:yljJqPDjz/7S9Yq8fvz/suVKC2RzCjgSVf6zGr8TzzzebIETym:yCbjz/7S978fvzkuVdUzCjgcf6zGezzs
TLSH
T1B4E3F1AACC54EC04ED436E3678D9D939E87226935F80C6E37099C3449795382FF9B81E
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.8.0.2/README.md

SHA256 c774521dbec393b291c914f4cfbd80bd01ba1f8e761e55ac908e30158623cdaa
MD5 14357cf67f2be3243b85b424581b2d0a
SHA1 f1a58128629c14fd34c564e30b8c33d7030865be
SHA512 9f0eb798fd1ea767ffd0850d441578d2b8e9e47679f5be4871569e18757e7e4bad37eb6976a47d65bda6ec6ae143a0f0e89df4733e4671ec620733f5dd686a61
SSDEEP 96:I9P91rBZROodWawmyK3R2nD7N3xFXfIGd9Rs9+FxVpQScBC/sGPL7DP1MznFzFZc:mrBZ8PLmyKu3xFB90+bVpVckKD1w
TLSH
T13FA1F9B7D18A0A775B237281FF89A488E36F918A1E9404FC3491809E5312FE9C2B70D9
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.8.0.2/lib/net462/Microsoft.IdentityModel.Protocols.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 36a5f62765807257e321a2169cc12fe2bdf5e6028cf5c1dbfcb6e3fadb0302f4
MD5 3a8b1c990cd677ff5b5df0c8c1101f35
SHA1 6c24f02ce23472519947ca0687f41ccc03b8d164
SHA512 d92176ff488e3a63cc10b9cfb7a988924c0687cd90776fe17f07f7ef239bea66d9bcca4da8ad6de3712686f38e57964aef9d4340976315625db992db815e4eb7
SSDEEP 384:SbZaux98llDj63swyIMQAvV44NqMJZcmarkaGhjkD97B6ZhNAbUjWb4OOP0o9+N3:M569zNJbcLTklhjW8byNs/vi6e9z00L
TLSH
T19C132C46A7FC8202F9FF6F35E5B499124D39BA837821E65E46CCE59D1863B40CE20727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

7c:b7:70:ba:df:48:d0:98:45:87:97:cf:9b:f6:67:98:b5:cd:26:32:cc:7a:43:b7:35:50:9d:7a:60:81:2f:b2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e7:2e:8f:2f:93:0b:4f:1b:e9:00:01:00:00:01:e7

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

36626

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Protocols/obj/Release/net462/Microsoft.IdentityModel.Protocols.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.8.0.2/lib/net462/Microsoft.IdentityModel.Protocols.xml

SHA256 a13fa8462f9e91433ed912e9bee3ff8bf23cf375cf4029a6a9d490b630674146
MD5 86b0bc11bf334ab275cf195e0a180b8b
SHA1 2c65448acb361d3e318841c41b67eeafb7fa260b
SHA512 13d02ba8b1822dfed43f4ba536de460a1c8e2cbc985a822c404eec8f1af988a15b85303aec5cd18e3b1a0bcfcd1ec5b0fa48585d14f2821bc399d4c71bfad426
SSDEEP 384:6Jhuq3LaYSOARg7KU+X+sA+XyEPC4PVfPJLEgOZatHMxaIJCvgpnt7LzvJ3WWUrL:GuqWYSOARg7tHCkCOzN36h
TLSH
T1A9E2CE46A6C69E1B58A35343D890B850FE7D07A3A44EDC1970EE6C2B1B3FDD283D7845
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.8.0.2/lib/net472/Microsoft.IdentityModel.Protocols.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e9281aea4774e500801b610e5e1316d0dd18c387292f67d58414bacc1ca2345b
MD5 d0550f88028814672b30c2d78fe85df1
SHA1 351f9b39d479b4607908c086559ca1daeab82487
SHA512 86f49f0cb0cee6dd7269f59d780f8c74507c76c3666cc99a67c269d26080613691e0a98d3517de1f181fb7422807485cb3f0f217b50d64c40b884921f3308fef
SSDEEP 384:bIZaux98llDj63swyIMQAvV44NqMTZcmarkaGhjkD97B6ZhNAbUjDb4OOP0o9+6U:c569zNJ9cLTklhjD8by6o/Pig69zS
TLSH
T157033C46A7FC8202F9FF2F35E5B485124D3ABA877821E65E56CCE19D1863B40CE20727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

d6:7c:da:f3:64:f3:e4:86:25:cd:e5:f0:e4:73:b5:32:8f:29:f7:c5:a6:2e:05:d2:39:ae:28:22:4c:6e:7f:02

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:86DF-4BBC-9335,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dd:5d:57:1d:95:d4:ad:aa:1b:00:01:00:00:01:dd

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

36626

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Protocols/obj/Release/net472/Microsoft.IdentityModel.Protocols.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.8.0.2/lib/net472/Microsoft.IdentityModel.Protocols.xml

SHA256 a13fa8462f9e91433ed912e9bee3ff8bf23cf375cf4029a6a9d490b630674146
MD5 86b0bc11bf334ab275cf195e0a180b8b
SHA1 2c65448acb361d3e318841c41b67eeafb7fa260b
SHA512 13d02ba8b1822dfed43f4ba536de460a1c8e2cbc985a822c404eec8f1af988a15b85303aec5cd18e3b1a0bcfcd1ec5b0fa48585d14f2821bc399d4c71bfad426
SSDEEP 384:6Jhuq3LaYSOARg7KU+X+sA+XyEPC4PVfPJLEgOZatHMxaIJCvgpnt7LzvJ3WWUrL:GuqWYSOARg7tHCkCOzN36h
TLSH
T1A9E2CE46A6C69E1B58A35343D890B850FE7D07A3A44EDC1970EE6C2B1B3FDD283D7845
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.8.0.2/lib/net6.0/Microsoft.IdentityModel.Protocols.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ed93a59442d7dd4550952da69604bcdeec999e73751cb765a2eb95ed97d8f0fe
MD5 9f2e2f641b858d32f3bf9eb3443d22a1
SHA1 752b6a936e558013f15b3974b8ba3c59b05371d1
SHA512 693e6962245303592cd7e6f771c5d7d9243576d6ebb1cf12dd54e1120a27fdece99331fc5c6dd3b76be6adc6095e2bd839b93d5555b02912823ba5c7b3d43575
SSDEEP 768:A6vFIWWV4J9McL2kOJjQ8bF6+/KiC9zhshH:/NIWWVILrWE8I+/XezM
TLSH
T194131A0657EC8203F9FF2F31E5B499118D39BA87A821E61E56DCE19D1C63B40CE2076B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

5b:df:09:ea:bf:b2:f1:2e:43:12:7e:de:30:a6:b1:ea:c2:d8:97:03:cc:ab:70:9f:28:ec:5b:93:aa:5a:f7:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e8:50:b0:80:cf:2b:72:99:4d:00:01:00:00:01:e8

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

36698

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Protocols/obj/Release/net6.0/Microsoft.IdentityModel.Protocols.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.8.0.2/lib/net6.0/Microsoft.IdentityModel.Protocols.xml

SHA256 a13fa8462f9e91433ed912e9bee3ff8bf23cf375cf4029a6a9d490b630674146
MD5 86b0bc11bf334ab275cf195e0a180b8b
SHA1 2c65448acb361d3e318841c41b67eeafb7fa260b
SHA512 13d02ba8b1822dfed43f4ba536de460a1c8e2cbc985a822c404eec8f1af988a15b85303aec5cd18e3b1a0bcfcd1ec5b0fa48585d14f2821bc399d4c71bfad426
SSDEEP 384:6Jhuq3LaYSOARg7KU+X+sA+XyEPC4PVfPJLEgOZatHMxaIJCvgpnt7LzvJ3WWUrL:GuqWYSOARg7tHCkCOzN36h
TLSH
T1A9E2CE46A6C69E1B58A35343D890B850FE7D07A3A44EDC1970EE6C2B1B3FDD283D7845
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.8.0.2/lib/net8.0/Microsoft.IdentityModel.Protocols.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fe92a3168b107e9ba7cc22b941877e6b61a422a25ffb4e043dcdb314db2f24a4
MD5 cc0c497a3b00b76e0c07b99ddbc23a8b
SHA1 beeb63e3c935c116553c77bd3e7bcb242698238c
SHA512 a1c870bfef8372e44a779b1b2aec24c804a46bfc6fee6c54f7a42b4d90bcf315ea38111b774d215e7277e910a730379168726bae2644eeb9a73d9d3de030dc19
SSDEEP 768:cXKCXIYlQeelHao2cL2kyMSnhFej+T/RiP9za:PYKeS6ohrb8hFnT/cVza
TLSH
T105131A4667FC8303FDFF2F35E5B0C515493ABA86A835E61E4588F19D0863B809E6076B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

ff:92:c8:f8:6a:ed:5b:aa:07:b3:87:cf:ee:31:ed:e7:3e:d9:17:2a:7f:cf:10:4d:57:61:fe:59:10:aa:25:26

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f2:3e:32:d7:64:ac:70:91:94:00:01:00:00:01:f2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

36578

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Protocols/obj/Release/net8.0/Microsoft.IdentityModel.Protocols.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.8.0.2/lib/net8.0/Microsoft.IdentityModel.Protocols.xml

SHA256 a13fa8462f9e91433ed912e9bee3ff8bf23cf375cf4029a6a9d490b630674146
MD5 86b0bc11bf334ab275cf195e0a180b8b
SHA1 2c65448acb361d3e318841c41b67eeafb7fa260b
SHA512 13d02ba8b1822dfed43f4ba536de460a1c8e2cbc985a822c404eec8f1af988a15b85303aec5cd18e3b1a0bcfcd1ec5b0fa48585d14f2821bc399d4c71bfad426
SSDEEP 384:6Jhuq3LaYSOARg7KU+X+sA+XyEPC4PVfPJLEgOZatHMxaIJCvgpnt7LzvJ3WWUrL:GuqWYSOARg7tHCkCOzN36h
TLSH
T1A9E2CE46A6C69E1B58A35343D890B850FE7D07A3A44EDC1970EE6C2B1B3FDD283D7845
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.8.0.2/lib/netstandard2.0/Microsoft.IdentityModel.Protocols.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 70de109b918503ef7ee745b0815ba87dc5a57b778d80e906bda891dbbb87148e
MD5 96338f3532683c417421a3e47b057fb8
SHA1 1aa761dfa7d2166f5c4db65c98ea066370d06c8e
SHA512 294f300aea97ed4f2ddd46184511bd6839cd5d7d8519fd7f6a15d20493a4c4e1743eaa0bcddb0c4c12e90ef1cb21bc6b30a981195146ee2a6b02e1140ba260ea
SSDEEP 384:90aux98llDj63swyIMQZSVEk64rMY/qMhZcmaAkaYh2D97B6ZhNAbUP8b4OOP0oO:u66SVEkjJTcL2yzhP88br3V/Ei39z6
TLSH
T1B2032C0667EC8302F9FF2F31E5B499114D3ABA877821E61E569CE19D1C67B40DE2072B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

f3:26:78:a9:0c:8a:21:c5:37:bc:44:2d:ca:7a:c8:34:06:08:4c:e7:e7:0b:bb:f8:8b:4d:51:c0:e2:e9:d0:8c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:de:9e:48:9e:96:9f:28:44:3d:00:01:00:00:01:de

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

36546

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Protocols/obj/Release/netstandard2.0/Microsoft.IdentityModel.Protocols.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.8.0.2/lib/netstandard2.0/Microsoft.IdentityModel.Protocols.xml

SHA256 a13fa8462f9e91433ed912e9bee3ff8bf23cf375cf4029a6a9d490b630674146
MD5 86b0bc11bf334ab275cf195e0a180b8b
SHA1 2c65448acb361d3e318841c41b67eeafb7fa260b
SHA512 13d02ba8b1822dfed43f4ba536de460a1c8e2cbc985a822c404eec8f1af988a15b85303aec5cd18e3b1a0bcfcd1ec5b0fa48585d14f2821bc399d4c71bfad426
SSDEEP 384:6Jhuq3LaYSOARg7KU+X+sA+XyEPC4PVfPJLEgOZatHMxaIJCvgpnt7LzvJ3WWUrL:GuqWYSOARg7tHCkCOzN36h
TLSH
T1A9E2CE46A6C69E1B58A35343D890B850FE7D07A3A44EDC1970EE6C2B1B3FDD283D7845
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.OpenIdConnect.8.0.2/.signature.p7s

SHA256 09a2654bf878129c2aaf8c3ba386a8a6155473a33f10b90f4dbf5f4f09ae9de5
MD5 a61c9f4597a405df29eaaaa44921e012
SHA1 92f583de581b1c663004d29d9135a6b6ff3918b2
SHA512 6aff8d251e4ef62b0707b177e0d78365a371fe0a20abe782f362f94e29f63cecf6931c51b0aacbbce890c57c6983ee29397f14931e8fda639b16363349833e4c
SSDEEP 384:rwH8HQIYiqIYiKDrroDEhDfJNyb8E9VF3AM+o5uAVJNyb8E9VF3AM+ooEm:rKG5YiXYiKvEAnENAMx0A7ENAMxk
TLSH
T10CB239B389546C04DE4B8C4675C89A3AAE7577C76ED0C0D3226EC1908B923877BED1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.OpenIdConnect.8.0.2/Microsoft.IdentityModel.Protocols.OpenIdConnect.8.0.2.nupkg

SHA256 620151ff2459c3f91c9ded54a9906c150240135f2046e65623a68af95b7afa79
MD5 f2c9c8ad9405177df978a50a022b9433
SHA1 cb01013992850efc10f320e4d2454d0bb7b17186
SHA512 9784a23ffa19759cb69de3d6edff5687cd9d2d76eb6987b8c93c0582ec574aef6844dc7f11073b6f5e0bc33b7b1da852e863704dae6ffd3e15586fea6b7bf37d
SSDEEP 6144:+d/o2KldXHuc6VTFEpQl/xghaGsK/MgiMUC0mspBDQ3VFfgZ6WU:++2yX36nEU5tGsKHiMUC0NDQ3LfgZhU
TLSH
T1E064127B8558A883F8DBAC967588E768A072B5813B50CAB32230C5849F233D75F5E57C
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.OpenIdConnect.8.0.2/README.md

SHA256 c774521dbec393b291c914f4cfbd80bd01ba1f8e761e55ac908e30158623cdaa
MD5 14357cf67f2be3243b85b424581b2d0a
SHA1 f1a58128629c14fd34c564e30b8c33d7030865be
SHA512 9f0eb798fd1ea767ffd0850d441578d2b8e9e47679f5be4871569e18757e7e4bad37eb6976a47d65bda6ec6ae143a0f0e89df4733e4671ec620733f5dd686a61
SSDEEP 96:I9P91rBZROodWawmyK3R2nD7N3xFXfIGd9Rs9+FxVpQScBC/sGPL7DP1MznFzFZc:mrBZ8PLmyKu3xFB90+bVpVckKD1w
TLSH
T13FA1F9B7D18A0A775B237281FF89A488E36F918A1E9404FC3491809E5312FE9C2B70D9
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.OpenIdConnect.8.0.2/lib/net462/Microsoft.IdentityModel.Protocols.OpenIdConnect.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 22571822bbe3447ae80b466bd897f3e8a2bfe5eb808544d9f967f04b5955a588
MD5 326882fd21a57ce96400cf9edaaac7d3
SHA1 f6ae7e50fdd77278fb844465e942e85327f66f17
SHA512 180d784d4e5bf5358e80a72d139d7462e6c672648b7d23ff410c88fb113ee902caf81558ca7065d52f0368074afea281ee08b1c9b00ac4fcd3a1e51cfc3b1c66
SSDEEP 1536:kLoyi8xxnvAmbKvLXyAxAHG6sAJhUrO/lAX8pc4ujXPjdfWzdJ:zyi8xx4m4XyAYsA+X8pc4Mhe5J
TLSH
T18BD3B420BBFC9609F5FB7B31B974092589B7BE9E7D70C68E1540818E0862B81DA71773
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

f0:ec:00:67:0b:8a:93:dd:a9:89:67:af:34:24:bc:b1:8a:c8:6f:02:bf:d0:79:e8:fe:6d:45:04:68:d3:b4:cb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:321A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f8:a3:a1:26:0c:0c:40:48:fe:00:01:00:00:01:f8

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2024 - Oct 22, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

128738

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Protocols.OpenIdConnect/obj/Release/net462/Microsoft.IdentityModel.Protocols.OpenIdConnect.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.OpenIdConnect.8.0.2/lib/net462/Microsoft.IdentityModel.Protocols.OpenIdConnect.xml

SHA256 f35035de8895845605a8eed2ecbe1c20231de8fb3477c9d0c021ffdc6dddb6f3
MD5 ac20183b48a9e3bd807250ae5b8b3942
SHA1 bc6b19b45641c786cdbe5460c0d7b193e03b44f1
SHA512 7bc63d8a872382689fe82db48144056a9efd31f433afb7c82c1dbded469043380107d0dfc650e5fe6586cb8ad9b67146f54eca1f60f7e75065dc2f2240602c71
SSDEEP 384:AyAOrTYXpEQRaNXFr8XLtzqSrczqrmUzV0oJn3osQNQFizyqPdIaTIdm7Y4ux8t+:6VRaNeRr4Fw+RAgBpE9
TLSH
T158B3AA6FA1C5DD2D29A38146D420BB64FB7E0F2341499E17B06D4D374F75BC282AB8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.OpenIdConnect.8.0.2/lib/net472/Microsoft.IdentityModel.Protocols.OpenIdConnect.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5fdef39e45c6b39be063a27ca5e51346fa0be7f5ad5c1b9c782d5d956ec26119
MD5 02d62415759aef5851f3de6e1aa14fa1
SHA1 ad77134a4288ea6e3734afef5fb9d20a9cb12c5d
SHA512 ad14ca27bf8d8961a06a9528666c3fff8994cb1fa876d38aed3f54581f0233fbeea088c9c22bf2968e54073e3366581c0ea8fccfc89c10e7553dca036f45365a
SSDEEP 1536:pLoyi8xxnvAmbKvLX0AxAHG6sAJhUrO/lAX8pc4sjX+vdA0C4dezJw:qyi8xx4m4X0AYsA+X8pc4KknIi
TLSH
T15CD3B4207BFC9609F5FB7B31B974092589B7BEAE7D70C68E1540818E0862B81DA71773
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

73:7e:56:b6:a1:0c:d0:d5:88:47:41:ed:e8:f4:00:59:d2:81:c7:dc:5d:28:05:26:9d:09:ea:7b:59:e3:47:b4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A400-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:ec:e0:2b:a4:82:d0:91:52:80:00:01:00:00:01:ec

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

128738

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Protocols.OpenIdConnect/obj/Release/net472/Microsoft.IdentityModel.Protocols.OpenIdConnect.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.OpenIdConnect.8.0.2/lib/net472/Microsoft.IdentityModel.Protocols.OpenIdConnect.xml

SHA256 f35035de8895845605a8eed2ecbe1c20231de8fb3477c9d0c021ffdc6dddb6f3
MD5 ac20183b48a9e3bd807250ae5b8b3942
SHA1 bc6b19b45641c786cdbe5460c0d7b193e03b44f1
SHA512 7bc63d8a872382689fe82db48144056a9efd31f433afb7c82c1dbded469043380107d0dfc650e5fe6586cb8ad9b67146f54eca1f60f7e75065dc2f2240602c71
SSDEEP 384:AyAOrTYXpEQRaNXFr8XLtzqSrczqrmUzV0oJn3osQNQFizyqPdIaTIdm7Y4ux8t+:6VRaNeRr4Fw+RAgBpE9
TLSH
T158B3AA6FA1C5DD2D29A38146D420BB64FB7E0F2341499E17B06D4D374F75BC282AB8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.OpenIdConnect.8.0.2/lib/net6.0/Microsoft.IdentityModel.Protocols.OpenIdConnect.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 682bf426822d37a4b3f6e8c0d0174474d8e2d57c8ed505640a01519ac33c7c5e
MD5 dc70deffb239a81b3c0ab7e7e4948afe
SHA1 d16b97c07a4446a336a9e35c3dbc40a22b289472
SHA512 560ab40c3e4a41abbd24a0ac3ccf64e6cbf60ce94092e16fc80e9520af99f9f97b82d0e10cf960955a65fd49944af9b9bfd9b9052f2636367096eaa72268624e
SSDEEP 1536:TJyi8RkAV/jjBXbAxAHG7pgJhUrO/lAX8pc4mVbkdDLzN:dyi8RkO/jtXbAhpg+X8pc4umXJ
TLSH
T163D3C460BBFC950DF5FB3B31B97419258DB6BE9A3C70C64E1A50818E4862B81DA71373
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

15:dc:2e:77:af:ee:ab:95:d7:f9:a7:f8:1e:78:7a:20:0f:02:ca:a9:7c:a8:3a:6f:f7:11:48:2c:ed:0c:95:61

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6F1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:fc:18:a0:af:cc:69:5a:87:3a:00:01:00:00:01:fc

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2024 - Oct 22, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

129294

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Protocols.OpenIdConnect/obj/Release/net6.0/Microsoft.IdentityModel.Protocols.OpenIdConnect.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.OpenIdConnect.8.0.2/lib/net6.0/Microsoft.IdentityModel.Protocols.OpenIdConnect.xml

SHA256 f35035de8895845605a8eed2ecbe1c20231de8fb3477c9d0c021ffdc6dddb6f3
MD5 ac20183b48a9e3bd807250ae5b8b3942
SHA1 bc6b19b45641c786cdbe5460c0d7b193e03b44f1
SHA512 7bc63d8a872382689fe82db48144056a9efd31f433afb7c82c1dbded469043380107d0dfc650e5fe6586cb8ad9b67146f54eca1f60f7e75065dc2f2240602c71
SSDEEP 384:AyAOrTYXpEQRaNXFr8XLtzqSrczqrmUzV0oJn3osQNQFizyqPdIaTIdm7Y4ux8t+:6VRaNeRr4Fw+RAgBpE9
TLSH
T158B3AA6FA1C5DD2D29A38146D420BB64FB7E0F2341499E17B06D4D374F75BC282AB8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.OpenIdConnect.8.0.2/lib/net8.0/Microsoft.IdentityModel.Protocols.OpenIdConnect.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d1e58fe44d86d41e588a6edcf25786b0100e792746f80a2ed9aa8dc4d1a7c6a4
MD5 206b041d37631414fc4f82debd26429d
SHA1 76847bcaa41736e6ce5851fb75bd76be4f9a5162
SHA512 90e37a078b3f13ecb4db074a3588de558291e01c668385fb61268c0cd0b76009fa13b80d3982c41ee32eef7e562c572737ee447ad504ea39eebbb4977c33d62f
SSDEEP 3072:VrYnhy4Aj5png4D8ROmAO/D+X8pc4R2Gw:Vcy4Aj5Vgm8eX8pc48
TLSH
T15ED3B320B7FC950DF5FF7B31B974092589B67EAE3D70D64E1540968E08A2B818AB1337
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

f4:cb:d3:5f:7f:b0:20:09:4f:76:e2:be:77:a5:39:a2:b9:ed:fb:d5:7f:b5:7f:f3:62:7c:7f:00:2d:9b:92:c6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f1:b3:45:f5:27:e8:c0:16:d6:00:01:00:00:01:f1

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

129218

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Protocols.OpenIdConnect/obj/Release/net8.0/Microsoft.IdentityModel.Protocols.OpenIdConnect.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.OpenIdConnect.8.0.2/lib/net8.0/Microsoft.IdentityModel.Protocols.OpenIdConnect.xml

SHA256 f35035de8895845605a8eed2ecbe1c20231de8fb3477c9d0c021ffdc6dddb6f3
MD5 ac20183b48a9e3bd807250ae5b8b3942
SHA1 bc6b19b45641c786cdbe5460c0d7b193e03b44f1
SHA512 7bc63d8a872382689fe82db48144056a9efd31f433afb7c82c1dbded469043380107d0dfc650e5fe6586cb8ad9b67146f54eca1f60f7e75065dc2f2240602c71
SSDEEP 384:AyAOrTYXpEQRaNXFr8XLtzqSrczqrmUzV0oJn3osQNQFizyqPdIaTIdm7Y4ux8t+:6VRaNeRr4Fw+RAgBpE9
TLSH
T158B3AA6FA1C5DD2D29A38146D420BB64FB7E0F2341499E17B06D4D374F75BC282AB8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.OpenIdConnect.8.0.2/lib/netstandard2.0/Microsoft.IdentityModel.Protocols.OpenIdConnect.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 84e6740302a89fda3b68baab10bca9aed53cee9d88c64a7f354f809cd595ecc7
MD5 4207a3327e56f1030484be8a2f5c1d07
SHA1 100637533a5d4e0968fb63d34717a84586197758
SHA512 70453bd55842047cfcf0f8fb255065dbeded3ef968662ed9b862fa2f13e73d80819a16ce7098c2b84d2a1df08cb4a9ef9b4ef25fb2aec4ebe0f243ee6c245567
SSDEEP 1536:7oyi8xx1oLiPJAjXlzXrAxAHGp+KJhUrO/lAX8pc4ejVJodyuazFp:cyi8xx1uiPJA1zXrAX+K+X8pc42oiRp
TLSH
T107D3B420BBFC9609F5FB7B71B974492589B7BE9A3C70C64E1550818E0C62B81DAB1733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

80:9a:29:b5:01:1e:3d:ae:1f:fb:5a:e7:25:ea:24:c1:23:e9:26:94:90:4d:89:05:57:d0:d9:c1:0e:d0:bc:ef

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e7:2e:8f:2f:93:0b:4f:1b:e9:00:01:00:00:01:e7

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

128654

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Protocols.OpenIdConnect/obj/Release/netstandard2.0/Microsoft.IdentityModel.Protocols.OpenIdConnect.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Protocols.OpenIdConnect.8.0.2/lib/netstandard2.0/Microsoft.IdentityModel.Protocols.OpenIdConnect.xml

SHA256 f35035de8895845605a8eed2ecbe1c20231de8fb3477c9d0c021ffdc6dddb6f3
MD5 ac20183b48a9e3bd807250ae5b8b3942
SHA1 bc6b19b45641c786cdbe5460c0d7b193e03b44f1
SHA512 7bc63d8a872382689fe82db48144056a9efd31f433afb7c82c1dbded469043380107d0dfc650e5fe6586cb8ad9b67146f54eca1f60f7e75065dc2f2240602c71
SSDEEP 384:AyAOrTYXpEQRaNXFr8XLtzqSrczqrmUzV0oJn3osQNQFizyqPdIaTIdm7Y4ux8t+:6VRaNeRr4Fw+RAgBpE9
TLSH
T158B3AA6FA1C5DD2D29A38146D420BB64FB7E0F2341499E17B06D4D374F75BC282AB8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Tokens.8.0.2/.signature.p7s

SHA256 64a9ff99829e646471ada3ae9004c5417f430aff19f69e87745c7d799ecbd788
MD5 cdb1358c0ef6c42c29295f35cfd412c8
SHA1 6fcfd784cb1422fb8422487aab0cd30a6d7e5417
SHA512 53f6959b581d8b715172b606d2776bc655e89452ea477ff9c0d69c1659ac9df0e893a60ec7f9fb120672848b02e1a8f23ef97a40f07141ade4a1e272a04369e4
SSDEEP 384:rh1H8HQIYiqIYiKDrroDEhHhzLJNyb8E9VF3AM+owDbbJNyb8E9VF3AM+oudT:rh5G5YiXYiKvEANlZENAMxEtENAMx+T
TLSH
T124B24AB38914AC04DE4BCD4575C8993AAE757BC76ED0C0D3226EC1808B957837AED1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Tokens.8.0.2/Microsoft.IdentityModel.Tokens.8.0.2.nupkg

SHA256 54ce53c38952d57c556a3980f0f078ca7f09f806e2dfcf14fffe7fff468d387a
MD5 2a4280d214fff382fa3dcc2e1dc38b4b
SHA1 52094c9259c4453359b6e8d1a52456f41b382c2c
SHA512 43baba65334b5895290a6895a3e350802d220a46c099d5024ae50d3c97b3d8b6dada1ae48f9ab771999c646dc0e250e8d7aadca9a07b463b0627d184b3af4dc5
SSDEEP 24576:KvcIl4ShnEbVZJi1Rggn2aU8isrvjbICpKFvTmDdZ1kEv0:Mvn5OgnxU8iE3IWKxTmDdZWE8
TLSH
T14E053347868D2840CE87AC28B5A419F7A72FFB82A4C044D646E9C5CCF7E53D7355C2AE
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Tokens.8.0.2/README.md

SHA256 c774521dbec393b291c914f4cfbd80bd01ba1f8e761e55ac908e30158623cdaa
MD5 14357cf67f2be3243b85b424581b2d0a
SHA1 f1a58128629c14fd34c564e30b8c33d7030865be
SHA512 9f0eb798fd1ea767ffd0850d441578d2b8e9e47679f5be4871569e18757e7e4bad37eb6976a47d65bda6ec6ae143a0f0e89df4733e4671ec620733f5dd686a61
SSDEEP 96:I9P91rBZROodWawmyK3R2nD7N3xFXfIGd9Rs9+FxVpQScBC/sGPL7DP1MznFzFZc:mrBZ8PLmyKu3xFB90+bVpVckKD1w
TLSH
T13FA1F9B7D18A0A775B237281FF89A488E36F918A1E9404FC3491809E5312FE9C2B70D9
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Tokens.8.0.2/lib/net462/Microsoft.IdentityModel.Tokens.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 42d4db1018a9bdefed00f3fbd34a2d7b4bb25b72992abb9926f26fabc5e5ac65
MD5 330d80ab813e4437ec3bfe5ad8c789a0
SHA1 489f5b6e756703a7e3b9a884235af48c00ed06b9
SHA512 9479b2477b30c272e9c457b4fc601e099cf81af06db7cac77e40532c3a554168205fd6b7feba6910135fcbf9b3417c8052fad741b4070e698e69a9f01b288e38
SSDEEP 6144:7XeMWwndkAfwKEc6hbqt/Bjoq81X1PuEWD51:bMZTq
TLSH
T183641911A7FC8756F5FF2B35E9B560018AB6FD4BBC78D75E2640909E1862F809820B37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

e8:cb:da:13:a1:f4:3d:58:25:e7:ef:ff:4f:1b:47:0b:51:26:e0:ac:aa:d7:b2:52:f3:81:76:d1:00:28:02:00

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:321A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f8:a3:a1:26:0c:0c:40:48:fe:00:01:00:00:01:f8

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2024 - Oct 22, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

327954

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Tokens/obj/Release/net462/Microsoft.IdentityModel.Tokens.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Tokens.8.0.2/lib/net462/Microsoft.IdentityModel.Tokens.xml

SHA256 f05e4c9d14091900c4faa78548d1334f8240a95dddfcac0814a9d0752cfe3bf9
MD5 0c3e1b22897db1d1daeb05d0a579f1e0
SHA1 a08aa1ee06a25326491598e7797710f4387e03a0
SHA512 bc43a4bacce01c73db0899f491b84dfb5694138ee8c9146541c7cba8a0fba158834b1a69f86177d6f2e844203355a9c1495b7fb3f7761babf127f49a36a3e507
SSDEEP 6144:RVuKY6FzIfMmclLSYBEFgWlG2JzLPp9jjV:6KY6Q
TLSH
T187B42319BAC6CD1258A36217AC90F8C4FBB90763541EDE4274CD1C9B3F6ADD3C2A7489
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Tokens.8.0.2/lib/net472/Microsoft.IdentityModel.Tokens.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a325b72e237b7f005d17a46baa924d29ade5c6f480457cf88dc92a81a61b0ccf
MD5 dfef66fd7a48c258222d276423693870
SHA1 72efcc2853344931995f6ad03bac26a5390b5529
SHA512 c900e8a6e759f212ee82f296d9ef21b7ed3037299e38a5d62a0bda9b38c5cd4f9bbea81673690e105fd162f396c0e4f4e4c2fcfa4a0b3d1b1d78090ed936cf46
SSDEEP 6144:KEuNcBJ4lzxHL4EdbdZ2DDs8whbqt/BjoqKX1PuEWD5+:KElO7cUD
TLSH
T137641921B7FC8355F5FF2B39A9B610158AB6FE4BB879C79E6540905E1832B408C60B37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

9e:c6:ae:39:ca:04:17:e1:91:d0:47:82:c0:52:c3:7b:26:03:ea:06:d0:c2:f3:a1:dc:70:81:9c:86:dd:c9:48

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e8:50:b0:80:cf:2b:72:99:4d:00:01:00:00:01:e8

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

331618

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Tokens/obj/Release/net472/Microsoft.IdentityModel.Tokens.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Tokens.8.0.2/lib/net472/Microsoft.IdentityModel.Tokens.xml

SHA256 cb0ae7f17d104f505651e9f9d85d5bdc2a1e450a4bd68306f06bcc77b1797943
MD5 18af96a644474593ce0011800a54c9e8
SHA1 41bccb6d2c3efd80c7b280903abf914ab3e9a66c
SHA512 6988febc36ccebb85e8986704c0df0899c65fd768dd69512b7b8b93bc60607b85589f036b2e1339169837e7a9e1dca326f9d24ecd3dba690f8907a6c0835e592
SSDEEP 6144:RVuKY6VmIfMmclLSYBEFgWlG2JzLPp9jjV:6KY6X
TLSH
T170B42319BAC6CD1258A36217AC90F8C4FBB90763541EDE4274CD1C9B3F6ADD3C2A7489
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Tokens.8.0.2/lib/net6.0/Microsoft.IdentityModel.Tokens.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8695938096ed1fe646f54f3b62394dcdc4a91878cfe36adbb2800ee027eea47f
MD5 07a8910167f3e86489fdc011eeedfa14
SHA1 cc3972bbc0eda5ea8bbf666fe0648f7a99943a15
SHA512 89afe9d569e3d18181cdbe7b7a03dfaa6213b76c9901ab6599e0f924136be19cbba4ae6073418a3f35ffec5ec9a3481303f6a9d33f9bd09c4cb0bb44cfa69def
SSDEEP 6144:xp0dK/doDpR8V0PWgwtNL4TUlWlhbqt/Bjoq2PX1PuEWD5xq:xp0dnR8VJgw+v
TLSH
T15E740751A7EC9365F4FF2B31A9B110118AB6FD8BF879C79E2240C55E1832F419920B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

88:36:eb:80:36:26:66:1c:68:cf:05:fd:66:90:46:46:26:ef:0b:aa:f0:73:ee:8a:16:fb:23:73:6e:93:5c:3d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A400-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:ec:e0:2b:a4:82:d0:91:52:80:00:01:00:00:01:ec

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

332278

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Tokens/obj/Release/net6.0/Microsoft.IdentityModel.Tokens.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Tokens.8.0.2/lib/net6.0/Microsoft.IdentityModel.Tokens.xml

SHA256 4adc68fe27d56ba9c13f029b34aefe972da71506df97238e3872338847f83560
MD5 e7b9574d0097341c15dadc171b361be8
SHA1 412e851986e6b10760b8908911ce341dbe055c2c
SHA512 48d05a5d3e12f783cc18ee26d55e22e4f916aee6cf41dd9af5ca9a4812ccd9baea04e111168e34386d50df1b3a0f8d8b802460ba10cde8d6991754d1f655f3f8
SSDEEP 6144:kJcVuKY6VVJoJDIfMmclLSYBEFgWlG2JzLPp9jjV:sKY6Z
TLSH
T1D6B42319BAC6CD1258A36217AC90F8C4FBB90763541EDE4274CD1C9B3F6ADD3C2A7489
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Tokens.8.0.2/lib/net8.0/Microsoft.IdentityModel.Tokens.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bf2b727381546cbbfb70fc0ef0f6c71bcaf66ccae6a255c3ba350393d4a5193c
MD5 76c1913009f0d676047f41b77d69d35f
SHA1 6b33dac71cf944b9ea6681007ca7e85e0674f594
SHA512 9add651d67ad4bc5a311d91a71adc214db35de2f8df2e342d8280a7d863075921984dab134c5fe174b73cc3cb6c5c8ae5a8b0146e56d8b34af9b20d0c621f8bd
SSDEEP 6144:jIsD2KG/tc9PZAKZjjb6+uHh7vhbqt/BjoqAX1PuEWD5T:4KetcXu
TLSH
T1D2640751B3EC8316F5FF2B35E9B164118AB2FD4BB87CC79E6640D16D1822B80D960B27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

d7:d4:c0:03:f0:e6:cf:75:95:6c:6e:77:df:7a:bd:64:2c:51:c3:68:da:f0:e1:1c:4c:10:d8:16:e1:12:36:95

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6B05-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f6:83:2f:26:6a:54:5d:22:c1:00:01:00:00:01:f6

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2024 - Oct 22, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

331762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Tokens/obj/Release/net8.0/Microsoft.IdentityModel.Tokens.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Tokens.8.0.2/lib/net8.0/Microsoft.IdentityModel.Tokens.xml

SHA256 4adc68fe27d56ba9c13f029b34aefe972da71506df97238e3872338847f83560
MD5 e7b9574d0097341c15dadc171b361be8
SHA1 412e851986e6b10760b8908911ce341dbe055c2c
SHA512 48d05a5d3e12f783cc18ee26d55e22e4f916aee6cf41dd9af5ca9a4812ccd9baea04e111168e34386d50df1b3a0f8d8b802460ba10cde8d6991754d1f655f3f8
SSDEEP 6144:kJcVuKY6VVJoJDIfMmclLSYBEFgWlG2JzLPp9jjV:sKY6Z
TLSH
T1D6B42319BAC6CD1258A36217AC90F8C4FBB90763541EDE4274CD1C9B3F6ADD3C2A7489
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Microsoft.IdentityModel.Tokens.8.0.2/lib/netstandard2.0/Microsoft.IdentityModel.Tokens.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 08b32a02a775b906d21c46d7c6d2145ba48085bb24f49f91c89e62bffee73011
MD5 7ab1ae8a23f7a6f79b16e7d86a68ec2d
SHA1 96ee6d45c9ec0b83b60de5cea8c6fb40f624532b
SHA512 ebbfde52c75b75390f8bb463369bca71760aaffcf11e58a96095e23cb63af6d69af47b8c14e2dfcb8d80ea4212080949f822a7d2e340aff027a796ee1b2c955b
SSDEEP 6144:c7dfJWxD7SSC9odS2thbqt/BjoqeX1PuEWD5QiYV:JsSEWbV
TLSH
T13D640811A3EC8355F5FF2B35E5F521258AB6FC4BB8B9C75E2240C19E1822B40D8A1B77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

bb:a4:20:d8:f6:9c:21:4c:84:b7:95:2f:ed:99:45:30:70:6d:c2:f9:27:5c:41:ee:0f:7f:5d:7e:22:dd:fb:75

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e7:2e:8f:2f:93:0b:4f:1b:e9:00:01:00:00:01:e7

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

326906

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/Microsoft.IdentityModel.Tokens/obj/Release/netstandard2.0/Microsoft.IdentityModel.Tokens.pdb

Divulge-Stealer/packages/Microsoft.IdentityModel.Tokens.8.0.2/lib/netstandard2.0/Microsoft.IdentityModel.Tokens.xml

SHA256 90f5e7e74c17be5c5a8a259e6c8c418a88d8a5bad0d2272a861272bc6ee21047
MD5 6842f0dc8922fd86db02d5779ed25b64
SHA1 04f4fd461d5a97935d983a5aa9e436b02e2299aa
SHA512 ab1057e05bd478dbd655c876f67cfad64955eba011bd124cdfe07fd2ae9f4298ce4327f1ca7e4138b275e73c26237e10d10ba5c3714fa51d81df12651e31dada
SSDEEP 6144:RVuKY6rSIfMmclLSYBEFgWlG2JzLPp9jjV:6KY6h
TLSH
T1EBB42319BAC6CD1258A36217AC90F8C4FBB90763541EDE4274CD1C9B3F6ADD3C2A7489
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Mono.Cecil.0.11.5/.signature.p7s

SHA256 33a477b09d773bc2231089b30e0a67c348c5d65cc63fe401a230dc9a786cf049
MD5 1e197a1a5dba80f25eee79af7904e2ab
SHA1 891031d3d5e98e55832a0369856ed64ae9212e7e
SHA512 918963633ffd6b13c9dcd14a54c50325193bd95b2d44336d7034bd0dd95dcd11d51efb3d0cbfbebdc0ff5e275d4f4a8fe96a844028c4be3e2e81229efc693059
SSDEEP 192:fdNK7x0KDWpHiX1x3ifV7x02Nyby2sE9jBF2+noPOJB3Y4ltU5:VNQvDG6wfXJNyb8E9VFDPxYwm
TLSH
T1F9321A66CA546C11EE978C0571D8D92B7FB17782AAE1C1F3932DC1909BC1383B6EC1AD
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Mono.Cecil.0.11.5/Mono.Cecil.0.11.5.nupkg

SHA256 9cf1706f35b4f209c28da7417608bed7a307621b0f0179c52258af78bc4668d0
MD5 43245df500334e4e3a190ec33017b216
SHA1 6ea03b322dece2a971d60e5527e01a53bdf705ce
SHA512 a03f273cdbf9da73b119a9381519a5e12c2fc96aa89c39da88fc1d6afe6d326e959e2ab7703f6668215db170989b9dbcad4036ebc5fb7470ee5964c0739e0caa
SSDEEP 12288:Z6nP6GuDxestijfY6IidQZu3wcmgsa4Yd++GwhVMw+1NR7qLuHCrS2AIVO:wnSGuDxestijw6IiOIwza1d++Gw3MwM1
TLSH
T13BE4239CC2FA1851E7D7723BB70A220A66B2D793FF6997F1012479EB230425944FCDA1
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/net40/Mono.Cecil.Mdb.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d65e445a02dc2d2a189d19745f14368c6a24d05914e36bbc7ed9732962998ea5
MD5 a97d8b05414aaaa056d6aec577ab15a8
SHA1 19b2a8967106dddbdb60d09d6012bae36d0d17ea
SHA512 be05b237d8beaa52ae22a97a27280341a5eab3f88e59816c9c699ca9fe74ac22b0e5e8611cf4ddce1f13d5f8afc2153422906fe08dffc74c742529dd4358dc25
SSDEEP 768:Yr5EYZep98C87KHeBUZwrEe9EAnlF+em5Kktn4CRIcZwMRTIzCuAtpx:Yr59g98C87KHeBUbTAnXGVXdwMRTOAtr
TLSH
T1AD1319156BFC8B27C29E51FEA4D226060BF19178A513FBA79EC0E5F7BC43B45450222B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

49134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\src\cecil\symbols\mdb\obj\Release\net40\Mono.Cecil.Mdb.pdb

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/net40/Mono.Cecil.Mdb.pdb

SHA256 a39544801392aa28d0061a2570e0f85c58c268fe41aa9c314d263c66878f9e66
MD5 fadcd29d4ca06ec44e6d08a2af0ce82a
SHA1 9c9eebb17d714ca4ac1ff6ec7b0b28ff4f90d46b
SHA512 826b032990b09d8fc762acba1a5211f2ff17615b78d9d8c3c032371f8ab61b09e84be5286ccf5167d398423fc5dc9e6e32c7f5502839feca0a1f542eec1000f2
SSDEEP 384:A9NdBvkE/zECNLuSY5oA/+yj7j02r6u9K2tmrNvnmBXizuXNYpkUeB8ukOVgDq/k:ABBvkE/znuSOtj7j/DF3B8uqK7g
TLSH
T16682A626D2C98359CB16557B9172932F63F6D1C1C58F0F0683ACAB79BCD172872A3705
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/net40/Mono.Cecil.Pdb.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8e221211df8a917d69145239b71b71c87e61761fb0c96d5e997964c172dda4c0
MD5 358ee793e3f5139ec1f835f0cf306baf
SHA1 be0a3453276ae078d66eebed4f3516f246805cef
SHA512 b48a78e55573c29ea925138753f4996309929cf1ada435e1c88ae3b9f97b13eaaccb2e756f929b341ab9110204f85b5d024e65364e023e286fe2f8e50c7d712c
SSDEEP 1536:ifCEVETXo3f+yAvaDvNaPS/vSC6GOALYKXgAJGsZAhcbcvjCXej:kuiQPwvH6rArVJGXh+cveXej
TLSH
T196938D35E798672AE5DD797628A60D050BF1D2B9C153A70E4A84FEF83E0B7121973383
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

94910

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\src\cecil\symbols\pdb\obj\Release\net40\Mono.Cecil.Pdb.pdb

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/net40/Mono.Cecil.Pdb.pdb

SHA256 e21e21ea1417f9f488311c39778afaa1666d5ae3176a595d7ff27c84cef86f90
MD5 62455ea634b851e6c1caf5507ff144ab
SHA1 5fe276894dd8622a389e503cacccbe8ad89ae0cc
SHA512 4319a24c0ebe4b6926c06775fd518e961458d00f06a631926a9fea44c5f148bca48360aa250340b23cd90b97c4bec74496afa44d516f1b543f7b12ea594858d1
SSDEEP 384:Rt7ZdhNC72Xtqp5dZ+li1NjEOsG0TSLJdTWhmtBsqMK13BwzCsLWpOyesLiRQkef:RR/CWwZtjDsGGQdcmUK1ohsuU
TLSH
T1DBC27222E6F4C628C936873D81B74322BBF4C189A7074B0B13ACF37D69977686D83655
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/net40/Mono.Cecil.Rocks.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9db3edaa8bc6ccd7ac6e2517c743591658bd6bdd436a146e0eda101d30a1332e
MD5 6fcdf77e1f173f269ff56752f273f094
SHA1 d9d26753c23fab955bb20289a20e37a1812888dc
SHA512 84f87537685ff55a681bf2acb4e35f77ea6ef3afc3cfb6257b7a72a62ba7f27e6a580fda89ddde2d8f9c22cce6a94622b58fe344d8fa52ff163d7cbc7d7a1804
SSDEEP 768:7gVxLIKwiowt0j1KODTq7/hRssvewJ1pfFpFo:s/6wtm1J3Wjssvew3o
TLSH
T11AD22A0217A6CF3BC1EF5D7AB8F2132801B1C6863003DB664DCCA2E9694BB955B613E5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

35326

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\src\cecil\rocks\obj\Release\net40\Mono.Cecil.Rocks.pdb

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/net40/Mono.Cecil.Rocks.pdb

SHA256 dfd4428bc7cc44796355de0b7baa65ce8ea7ecda5c75131e2a65a279000f9207
MD5 f20f8df203d6bf60baf93b1673ef77b3
SHA1 4a2620ee8eadb5e8aba6905ea4f769ba30c52ae0
SHA512 62fb132eb7d0a84d6f5d15ab2a12739d36976e9e4017c713c986cfbbc0992fa04ebc0f477ff22dbdc29baf4e85b86049e50974d88a3ea749882b8e8aaa7a1216
SSDEEP 192:+3GYL4JSGEMUm10L6Nn5MNMtT9RS68Y4h0BKld9Mi0DEyKKJ2VjF+n:EnySGERN+9R7Qh0BKp7040AFa
TLSH
T1AF129107F8FC8F5DC98A09B9D163531977B0C60CD30A0B1492A6F635ED873A927B27A0
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/net40/Mono.Cecil.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 71c8b01208ab37a5164f5bacd69054899db9fc00f2da87dbd07dc1ee40fc06a8
MD5 037dbbacc199b24bc0ee91f60a561f06
SHA1 3f82ecbe123c783b24705862c066018f827355b6
SHA512 dfa108f22e5e9250d0fdecb91317278c6212773d87b9fa36ab896c3f7a66a549da3d57f71b24778fe0727408eab89cc078f260dfd245c8738a0fe78b9c812549
SSDEEP 6144:krsdKY7ap3A+oQ8suUmk/yC/tyPyJH+dIz1R:gpY7YuXAyPysIz
TLSH
T1CB748E3963EC462BE68E537BE056446E42F6DC1AB34BEB8C9DC4E6FD4C83B525500263
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

364286

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\src\cecil\obj\Release\net40\Mono.Cecil.pdb

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/net40/Mono.Cecil.pdb

SHA256 c7f81c42b072979c73bf57731079125766252e2fa352d2763ac309aeeafdab45
MD5 44c278b56dbb3b5aa973906678156233
SHA1 8e69ba2487b8dc373cd39fe360e867269de9af19
SHA512 297b73621e784dcb57f20aeeaec34183c480e9da9b27b3b92bdf67e6e78f473d470aaea296a4c6085f591af1010653ecad94503feb57d14d1e1508f385b56856
SSDEEP 3072:j2DACw9iCUWQZQz9VldIas3I3uSZyMQ4kGeUG5svuXlTb:qD2kCUWX9NTAIeStmCvvuV
TLSH
T1D804080AE981B73DC6A944F6549332D22AF8928DD54F8B0563ACF235BC473287F93749
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/netstandard2.0/Mono.Cecil.Mdb.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2bda97fc302904bf235d631e698a0c81324872dfad2a38e63ef66389155bfcf4
MD5 0c2d7a3d146e193d7b8e50f0fe398568
SHA1 bf0a6ab31388eab1ffd3cd87fae62b45e90cba24
SHA512 5fdc45ae536955e6f66970b35008ce15c5c5624d0b31bd41c79d6548d0d1b950042f51fe7dbbbc33a6256f90f5db23bf0070abe24502a050505be66f086d6df0
SSDEEP 768:ArF3HuZyOt78PeWSTkazhOOgfGNOV/pVxPRpaCCrHpTFuzL4oWB:ArFecOt78PeWC8OgfGkVh6pTcL4oWB
TLSH
T18F0308086FAD962BD2AE55FEE4A0261917F1D53C6603FBAB4DC4B4F3BC4374440122A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

45154

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\src\cecil\symbols\mdb\obj\Release\netstandard2.0\Mono.Cecil.Mdb.pdb

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/netstandard2.0/Mono.Cecil.Mdb.pdb

SHA256 be9a1bd3ed8de96c1df5c027dc9e5592f729fbd6e03193a1de26470873840863
MD5 fac28421cf43cf8443dc882b6e7a165d
SHA1 6100b566c9fb03a3cddeb31704143e6eed64e088
SHA512 2a80d6ca628a3e972a8cb911267e5d82511914fa5fdea662c0da8a09a0e1740c920bd4092d9f8db8cc328c0f4d77ed598c2704deb7567749336ec23c4d784512
SSDEEP 384:N81ZdbtCUxMBp4+cE2+hjrjXq36jMai+NLy5nj4SCm5Mz6QkOAHOuXch8CPY7LTL:NEbCUxM+E1jrjXqWToOwu6n7orq+OuwH
TLSH
T1B9B2832FD3C8C226C50145374171C35DB3B2829096AA9F25E3E9AA65FCDF718B3B6721
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/netstandard2.0/Mono.Cecil.Pdb.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 333397769114ffd13046a25b9cfffd41c44a3450ea9ea1fd13b76eec28e1a815
MD5 625ce2e8be214194a161fe80e6eca7d0
SHA1 58944e03ee249618e9440545623c4545777377f7
SHA512 c324ea36e4a89a6052f685e4f96527323ab6f4eea4f4c70c71f08a84df2d46332d91c3f289463502887d9b098dc6e69036c322630b770531927d5329873b250f
SSDEEP 1536:mffXkeOyX+6C5S6R7nQSALYKXNgJGsZaBcLevjCXeo:ao5S6R7nNArWJGPBEeveXeo
TLSH
T1D1937D36DB957776E6DE797638960C040BF0E276C193A74E4984FEF8390B31219622E3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

94918

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\src\cecil\symbols\pdb\obj\Release\netstandard2.0\Mono.Cecil.Pdb.pdb

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/netstandard2.0/Mono.Cecil.Pdb.pdb

SHA256 3363c2ab56ea9fa5ba17dfd823145830c87cb078a79d5dcb5b08c61cd9443dc5
MD5 8987388fd0175312e7c1f477c5e3da24
SHA1 f6c6175f3755fae45cabf235f751c3f0a78834b0
SHA512 898fc9ea33f06d52816265b5403038a0552c141425011e27094686a6c0eaeeaefb8d6307ebe3603f8b8a09e39808babaf7f120e835abc8da7116c6ef3be2a23c
SSDEEP 768:RM/C5wZ6ov3XjDsGG/qWToOwu6n7hdcm39RLseN:iK5sfX8GWU7YmNRV
TLSH
T154E2C72BE7B4C529C812073941F28315B7F08246A317CF2B639EB3359D9F7985EA2365
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/netstandard2.0/Mono.Cecil.Rocks.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a6d3e6eab8d89dbd6fcf34268a08a6544ea142b6bcc5f665bee62317786b7892
MD5 6fc634673b94c7ddde6e2ba277f7e7c7
SHA1 f29feb86a8595d104b3b1b4be809f6e9fbc8f042
SHA512 51f4782d7a8e2b3ffbb8fedddcfe85379e5adc499a2fd55c29e29628ca9519c33a33daf806eb3b8d01cfc10c964c1cd2558152c000c7ed2a8584f36c58f31c51
SSDEEP 768:tkU1iy+QMBCocUuk0ThROoUheLXG99gmIt:tkUCCo/KjOoUhpg
TLSH
T1EDC209012395CF2BC2EF467A78E1522803F1CA962812DF554DCC90A95D8FB966723BE7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

32450

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\src\cecil\rocks\obj\Release\netstandard2.0\Mono.Cecil.Rocks.pdb

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/netstandard2.0/Mono.Cecil.Rocks.pdb

SHA256 5fff6c7256c6f9b817aa9fd37269db8a0693a9d5dce71a09601f28fa5532aabf
MD5 fd22e27ca7a9b1ea4593a11da5e7f13f
SHA1 bb31036b2165706bb908880d5d5e33ea42095f8f
SHA512 328aec5288458bb079c77a160afe325e914c6801c066f05137f68a911b87297b36e63bf5a418761542bb6fd9519c558e1bde89ae993f4c24211fa0d33a397664
SSDEEP 384:0SjSGER+9R7zq36jMai+NLy5nj4SCm5Mz6QkOAHOuXch81WBKl70Q0FY:04ERQzqWToOwu6n7XB
TLSH
T11E62623FA7A8C91BC98615758022C28DF7728308A725DB34E3D7A615EC9F3988772771
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/netstandard2.0/Mono.Cecil.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9c2908709da6761e9b5b9d4d46102d65851145bac987787d6c5a05ffe5689487
MD5 6d8d43c5d7dbe36ec01ff8b951cf1e0a
SHA1 d6b8214419870770e1ce398ca06a6a9f0e9e62a3
SHA512 221955b05d83513fadcb79721c96fd467ea871cfa401b279dc8ade426c88df4cadc884dae7a9c418c1012af202263f31ce8b63ca919e1f725eb7c7e8008c3a57
SSDEEP 6144:eCDxMlG40kOSV1L6RWDv2F2AEJHwBI+aB:rG1J1LQFLE0I+
TLSH
T1E1749F3727EC572BE6AE537AE06E04AE56F5D416B38FEB8D48C4E9F90C837421901253
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

363046

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\src\cecil\obj\Release\netstandard2.0\Mono.Cecil.pdb

Divulge-Stealer/packages/Mono.Cecil.0.11.5/lib/netstandard2.0/Mono.Cecil.pdb

SHA256 453e62ee31d95f4aabf70ecee1c9fa52a57d756e1bd1904f599f335ed549fbc4
MD5 0380953ef9b18bb335bf2bd224ad53d5
SHA1 df0dbd8c47b0712d0a0db61f140d656c4849895e
SHA512 f281ffff745e81b865812d2d4900469e0cfa1be49e39f2f10b449ea29ebd9177e27d89f7d056762d4f73d1cdda8637890642c26b12d0e4e5cf01cc1bc78706c4
SSDEEP 3072:Xgb74osNcC9iCqVGroM3JBxIXuSZAsWDkKaGqdJQfD/S:wbUoYVkCyVkhI+S35iKQf+
TLSH
T1DD141A0BEA84733DCA9944B5549362D626BCC289D54B8B0563ECF635FC8B3187FA3358
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Buffers.4.5.1/.signature.p7s

SHA256 f41a73e8fb9f40e035986d5d5b2315ce24865dfd5b71b2aa3dccf4958258d91e
MD5 8f859e9e8b77e05c78b18fe4bfa7b9f9
SHA1 8cc7e8bfff8faa1983be7dd76c0cc1d59ea922b2
SHA512 dec54a5d0408ab6cdee2f10c0ef75dec6c24fc35c9ac32bbb1e02385a2565c74cede256e6eb24faa21bae4cc8f8681f272f1e26d85e08d38d1b92d3a3984a205
SSDEEP 384:z/jQCvDGrDGmvVpCGoJN77hhA3n/WGoJN77hhRh:z/fDGrDG6I3hu3/5I3hvh
TLSH
T1368218974A246C12FFC7CE55B1D4E62B6E34B3956AE484D341B8C0929FC3B922A9C05E
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Buffers.4.5.1/LICENSE.TXT

SHA256 d7a68596ab69b06f51ca278a6545148e4269a9381c26d597c13df5d88e08cf5b
MD5 ba2bed45d99b13d4c31485d0631ae675
SHA1 26c7c096ac257154020a07532c5edeba91ee97e0
SHA512 430f0a57ff6be9cb03316eb7312b70f5a2eb44175edacac242a9fd329257ae52c03de8add8a957cd3a336f99fd638eb89d8d3d1338525d5be21d8f4e22f86f97
TLSH
T15221C61E73560363186203614168ECC1F12BB14A3E6F0985306EF309132A018C6FF868
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Buffers.4.5.1/System.Buffers.4.5.1.nupkg

SHA256 c30b3dd2c7e2f4cee4b823d692fd42118309b42ab1f5007f923d329a5b0d6b12
MD5 fb8d2f2ab757fdce7e4f81d074d4eba8
SHA1 59fcb21b5de721751d5e786411ec02d78d34b4f6
SHA512 80da6158e55b9bcf7e0b5e6379b9cf45a632914f037b53c5bf5609576e3cd7821f7861956b73d74470d2d0c2e56dd235a5ef4ca6ffe7e192b820dc2d023aaff2
SSDEEP 1536:S4tsi5pGr9HvEkYTf32lb8hoWfMoHB22TU9Xj0R3hEO3hvb:S4tnrGr9HsObmN0UMib
TLSH
T14D93E0664F24A412EF93C634B2D0D91B6A2DB79A39E144C349B5D5804F837DB2B6C43E
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Buffers.4.5.1/THIRD-PARTY-NOTICES.TXT

SHA256 7864a01e2fdef7e8fdf81b906efb1466f083206affea7ba7e6dadea429754765
MD5 0bf833f1b32b1cdefbed5e860457d1dc
SHA1 91ea4bdac6268da316ff578ef4a4996052636ef2
SHA512 b022b1a2b0eb5001f49066ec1326567536e2bd92108b873c024824836a05d268e7727166bfa03073e564039ccfa1f5b3074c6c922f476b683dac19affc367963
SSDEEP 384:FU3qNdKkjHrEjsELvyv4a0rB2kSK5gDTYCYbWq/TbOy/rsUrsESOzYgArsErseSi:FU3qvKkjHwjsEuv4a0yK5gDc3aq/T//c
TLSH
T16062C65F7E4547B218E2C7917598E8C8F22FA02D7F6B2940346EE248237742D95FF498
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Buffers.4.5.1/lib/net461/System.Buffers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
MD5 ecdfe8ede869d2ccc6bf99981ea96400
SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741
SSDEEP 384:/rMdp9yXOfPfAxR5zwWvYW8a2cyHRN7vCvlbLg:/rMcXP6N6e
TLSH
T156926D12DBAC4213DE3B2E7012A4C9C62E3AD3C66A11DB5E1848F5591ED37CACF11B6D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

d4:65:dc:35:86:93:2f:fb:0d:d0:c1:ac:2f:31:92:bd:28:75:14:21:57:3f:3b:7d:55:33:05:32:59:3d:d4:62

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FF06-4BC3-B9DA,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Serial Number

33:00:00:01:14:35:27:45:ea:b6:c8:6c:4f:00:00:00:00:01:14

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 23, 2019 - Jan 21, 2021

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

17218

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netfx\System.Buffers.pdb

Divulge-Stealer/packages/System.Buffers.4.5.1/lib/net461/System.Buffers.xml

SHA256 2ec7fb12e11f9831e40524427f6d88a3c9ffdd56ccfa81d373467b75b479a578
MD5 1c55860dd93297a6ea2fad2974834c3a
SHA1 7f4069341c6b62ecfc999a6c2d8a2d5fb59d44f6
SHA512 37fa5d4553ca3165f10e2ffef38fefc0dba4a2dbfa05ab9f09ab87b5f71f30e6d965d2f833f58b50b3bc2529ebe8fb5cc431c264f7b47ad026f5c5a874a6ada1
TLSH
T11971FE3637C88B320912203D0C4AF5CDEA64692FE54A6871349CBC26A75BFE746B7479
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Buffers.4.5.1/lib/netstandard1.1/System.Buffers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 423200010a7684763451473a4fb206dfa074fc8249676621ef9d9a13417d364d
MD5 a48936868abf91274def7231aa52dbb5
SHA1 f02fa5231536c0dd9cef9e84e609646b23d5d33c
SHA512 c8fe3d1314794ae7071a647e328a46a30e6d96e574daa896fcebebf6bb51ce0af14e6cc63a0e1600a0e4adbc7aa18e97ee58581adccac23981c029ea782b5f9d
SSDEEP 384:ay/fjFwUI/KQyVvKdDhG6ISDFWvYW8aIcyHRN7WEg2ly0:auhMaVmzDC6b
TLSH
T16E926B02DBEC0107DE7B1D3117B0DA862E36D3C66612DB6E0984F9562EE37869B1263D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

ed:d0:e0:df:c8:a1:f2:86:2e:5e:07:95:e6:59:af:43:a5:5d:5d:54:50:a7:8a:ec:33:2d:4a:60:2b:cc:64:83

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:1e:0e:bc:e5:4b:16:a2:03:1b:00:00:00:00:01:1e

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Feb 11, 2021

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

17350

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netstandard1.1\System.Buffers.pdb

Divulge-Stealer/packages/System.Buffers.4.5.1/lib/netstandard1.1/System.Buffers.xml

SHA256 2ec7fb12e11f9831e40524427f6d88a3c9ffdd56ccfa81d373467b75b479a578
MD5 1c55860dd93297a6ea2fad2974834c3a
SHA1 7f4069341c6b62ecfc999a6c2d8a2d5fb59d44f6
SHA512 37fa5d4553ca3165f10e2ffef38fefc0dba4a2dbfa05ab9f09ab87b5f71f30e6d965d2f833f58b50b3bc2529ebe8fb5cc431c264f7b47ad026f5c5a874a6ada1
TLSH
T11971FE3637C88B320912203D0C4AF5CDEA64692FE54A6871349CBC26A75BFE746B7479
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Buffers.4.5.1/lib/netstandard2.0/System.Buffers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c65fff603b283dc966d1a8b730c11d5e5e750e8021bd24640612f6cc3f2c6fb7
MD5 37bf9ec86fce2577dfe183dcfc3eb786
SHA1 1208e5e0252124f2b2764503608ea1aad69d0ff1
SHA512 42605b9dab5265e37ae6db1709b289a9e2ee927a94b206a0a7aa90a9d019f917b9f752ab287755583de616935a68e6eedc81081c44bdf2be5e1baf5b264afd23
SSDEEP 384:q1IwSyJfREPFRmyXOTp1pWvYW8aicyHRN7WELmpple:qFRJWPjbXX6Z
TLSH
T1A0A26C21ABB80117DF7B2AB055E4DE82293693C66942DA7E0988F5051FD33C6DB12B3D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

da:1c:5c:6e:41:97:64:67:2f:a4:da:3d:59:77:ba:a4:31:3f:f6:5f:67:31:0e:ce:e1:ac:c6:18:34:a2:ec:8e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:8A82-E34F-9DDA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:19:8c:bb:54:08:0a:5d:fe:65:00:00:00:00:01:19

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Feb 11, 2021

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

17462

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Buffers\netstandard\System.Buffers.pdb

Divulge-Stealer/packages/System.Buffers.4.5.1/lib/netstandard2.0/System.Buffers.xml

SHA256 2ec7fb12e11f9831e40524427f6d88a3c9ffdd56ccfa81d373467b75b479a578
MD5 1c55860dd93297a6ea2fad2974834c3a
SHA1 7f4069341c6b62ecfc999a6c2d8a2d5fb59d44f6
SHA512 37fa5d4553ca3165f10e2ffef38fefc0dba4a2dbfa05ab9f09ab87b5f71f30e6d965d2f833f58b50b3bc2529ebe8fb5cc431c264f7b47ad026f5c5a874a6ada1
TLSH
T11971FE3637C88B320912203D0C4AF5CDEA64692FE54A6871349CBC26A75BFE746B7479
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Buffers.4.5.1/ref/net45/System.Buffers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6f80d131c025f960c5ad1e224fb73677abb83198d759ecbdecc115650b356f09
MD5 73409e68eb409bfff690f123a8ec24ff
SHA1 4375617091ac801a8593eadb0e0b765799fb75b8
SHA512 bcc8555f85ba7c16fdc9ea369cd0194854e618fc3cc39b4a59f44480516bdffda57205a8261174289fd306c87581bb239bd2e08f4be6b07f89c2bc51f94737d0
SSDEEP 192:wEXJsi/WvYWJeactWsI9A9GaHnhWgN7aJeWwjZTuXqnaju0aaUY:Dii/WvYW8accyHRN7WEdily0
TLSH
T19F624A528BB84207EE735D3056F5EA537D3DA7C32921862E0D94F65A1C933C8DF2062C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

60:92:36:6f:ce:fa:bb:0e:cb:b9:21:2d:78:18:87:71:d5:a4:3f:8a:da:29:49:da:2c:98:c3:3c:9b:3d:16:8c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:1e:0e:bc:e5:4b:16:a2:03:1b:00:00:00:00:01:1e

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Feb 11, 2021

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

10938

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\156\s\corefx\bin\obj\ref\System.Buffers\4.0.3.0\net45\System.Buffers.pdb

Divulge-Stealer/packages/System.Buffers.4.5.1/ref/net45/System.Buffers.xml

SHA256 2ec7fb12e11f9831e40524427f6d88a3c9ffdd56ccfa81d373467b75b479a578
MD5 1c55860dd93297a6ea2fad2974834c3a
SHA1 7f4069341c6b62ecfc999a6c2d8a2d5fb59d44f6
SHA512 37fa5d4553ca3165f10e2ffef38fefc0dba4a2dbfa05ab9f09ab87b5f71f30e6d965d2f833f58b50b3bc2529ebe8fb5cc431c264f7b47ad026f5c5a874a6ada1
TLSH
T11971FE3637C88B320912203D0C4AF5CDEA64692FE54A6871349CBC26A75BFE746B7479
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Buffers.4.5.1/ref/netstandard1.1/System.Buffers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e81f72e4e08a552261c219b41b75e28fde1e9496a198b49b3a31d1c7e11c2f8f
MD5 1583d99fa623403b4a4a3c4779657c91
SHA1 7a799dd55b3e7a9be1f2efb4e3a6619fd872af04
SHA512 3d26caa8d7522d68076e89691734c6238c6f576cd77f54ea2305d11a3eb74e87271817f51428d3b2a5cab5980780f84a49b259540e23d4c6f53a76ecb72cd067
SSDEEP 192:pPoksHWvYWJeaLtWsI9A9GaHnhWgN7asWwf7esqnajtS:pP1sHWvYW8aLcyHRN77f7hlxS
TLSH
T14D6249968FA84213ED736D7092A9EA837C3CB7C76C12862E1985F6851C933D4DB2063D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

6d:12:a6:56:22:cd:05:3e:5c:d6:dc:61:48:19:8c:d3:dd:99:7c:4b:93:30:ac:7b:70:5c:a2:18:5e:59:b9:6a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:16:93:22:ea:bf:bb:2d:4d:e6:00:00:00:00:01:16

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Feb 11, 2021

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

11170

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\156\s\corefx\bin\obj\ref\System.Buffers\4.0.2.0\netstandard1.1\System.Buffers.pdb

Divulge-Stealer/packages/System.Buffers.4.5.1/ref/netstandard1.1/System.Buffers.xml

SHA256 2ec7fb12e11f9831e40524427f6d88a3c9ffdd56ccfa81d373467b75b479a578
MD5 1c55860dd93297a6ea2fad2974834c3a
SHA1 7f4069341c6b62ecfc999a6c2d8a2d5fb59d44f6
SHA512 37fa5d4553ca3165f10e2ffef38fefc0dba4a2dbfa05ab9f09ab87b5f71f30e6d965d2f833f58b50b3bc2529ebe8fb5cc431c264f7b47ad026f5c5a874a6ada1
TLSH
T11971FE3637C88B320912203D0C4AF5CDEA64692FE54A6871349CBC26A75BFE746B7479
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Buffers.4.5.1/ref/netstandard2.0/System.Buffers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f51c83610ab74f2605349a27665f65e3cf726f0ded25fce6779879ad9b26e1a2
MD5 7181717ded11dbb4275d08d09f632e8e
SHA1 cdb66a3ae60f40a48e5ef536d40f2ac4e919646b
SHA512 5bf577d09a9b1e3d9b990b49e18564ed75317fee1f0cd729f56633df7a57198858303f712d67e44c18241f3e03774e1cc15a71aad951d3fa457659ae3077b444
SSDEEP 384:hgM6DxLTWvYW8aWcyHRN7WEANg4JeRlwH:6de6tcXx
TLSH
T1656248568BB80357FD736E7096E8E983BC38A7C72C12862E1596F6591C837C4DF20629
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

50:db:a9:6d:15:d7:d5:6c:6b:7a:6b:f2:b1:9d:83:09:04:42:a0:88:d8:7d:c9:30:6b:7b:7e:2a:ee:45:bf:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:1d:c2:c2:08:ae:3e:ba:ae:48:00:00:00:00:01:1d

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Feb 11, 2021

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

11166

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\156\s\corefx\bin\obj\ref\System.Buffers\4.0.2.0\netstandard\System.Buffers.pdb

Divulge-Stealer/packages/System.Buffers.4.5.1/ref/netstandard2.0/System.Buffers.xml

SHA256 2ec7fb12e11f9831e40524427f6d88a3c9ffdd56ccfa81d373467b75b479a578
MD5 1c55860dd93297a6ea2fad2974834c3a
SHA1 7f4069341c6b62ecfc999a6c2d8a2d5fb59d44f6
SHA512 37fa5d4553ca3165f10e2ffef38fefc0dba4a2dbfa05ab9f09ab87b5f71f30e6d965d2f833f58b50b3bc2529ebe8fb5cc431c264f7b47ad026f5c5a874a6ada1
TLSH
T11971FE3637C88B320912203D0C4AF5CDEA64692FE54A6871349CBC26A75BFE746B7479
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Buffers.4.5.1/version.txt

SHA256 e950b4d39b83b7e7b7a5e8e91af7e3969cdee703f8c8b95eb7a5060950620301
MD5 34add15221df4bee5ff9be38a23cab0d
SHA1 8e423ea8c395023d76249a35aa375980678109c5
SHA512 29884f8b8172f343caba0fd7db0303a401b45ca96b050c7d200c31d3e927abd02d1043fef50a147cab25c096e364a30c7249691d5262e5920e666d240e0b89d1
MD5 SHA1 SHA512

Divulge-Stealer/packages/System.IdentityModel.Tokens.Jwt.8.0.2/.signature.p7s

SHA256 a5c83e5dede92673f9565fdfe030ed8bf483bf1ecd9a144b57a1c376b4e9269e
MD5 68fc1091a8c4b0735a61d8c4394554cb
SHA1 782de06207371a8a7f59f4b29335340d04c07e88
SHA512 66cd8d509246e26694a5a5f1652fe4daaa99ec481e6eb54ebdc41b8a11a91267ed51e3e3d535c69b7812e7296926c587e1fb11b7e82ee673c95732940b491e85
SSDEEP 384:rWH8HQIYiqIYiKDrroDEhXJvJNyb8E9VF3AM+os6K/aJNyb8E9VF3AM+oljG7:rsG5YiXYiKvEABPENAMxLK8ENAMxg7
TLSH
T149B23AB389246C04DE1BCD4675C89D3AAEB577876E80C4D3226EC1908B953837BED1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.IdentityModel.Tokens.Jwt.8.0.2/README.md

SHA256 c774521dbec393b291c914f4cfbd80bd01ba1f8e761e55ac908e30158623cdaa
MD5 14357cf67f2be3243b85b424581b2d0a
SHA1 f1a58128629c14fd34c564e30b8c33d7030865be
SHA512 9f0eb798fd1ea767ffd0850d441578d2b8e9e47679f5be4871569e18757e7e4bad37eb6976a47d65bda6ec6ae143a0f0e89df4733e4671ec620733f5dd686a61
SSDEEP 96:I9P91rBZROodWawmyK3R2nD7N3xFXfIGd9Rs9+FxVpQScBC/sGPL7DP1MznFzFZc:mrBZ8PLmyKu3xFB90+bVpVckKD1w
TLSH
T13FA1F9B7D18A0A775B237281FF89A488E36F918A1E9404FC3491809E5312FE9C2B70D9
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.IdentityModel.Tokens.Jwt.8.0.2/System.IdentityModel.Tokens.Jwt.8.0.2.nupkg

SHA256 49003a2eb7117844081b3fdf95a5c3ee00e5032bb7d176d02845629a965216e5
MD5 caeae6d12dc7f9940b230ba9dfa7729f
SHA1 8a39c277184a81dcba4c691e0604b36e19c6a8bd
SHA512 0c46110086684560282d086e7200739746163fcace903980d4ee31433405999b0eb7bca67ee2e83fb66b5555387d4fe0bb8000e07e42967280259f8933813ed2
SSDEEP 6144:u+ODp9bjw32AjpVs82A2RBUTjaIh+R9j60NU/+8ij2fMxQbFe:XYfK2EVf2RUw7NUG8hfMx8Fe
TLSH
T1D1541283CC045D06DC3BFE3A750C4D1A8D3642826B5699D22A5DC4CC6FDA78356BE3BA
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.IdentityModel.Tokens.Jwt.8.0.2/lib/net462/System.IdentityModel.Tokens.Jwt.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 962f136db6a7cbde5a5c9686ee98f3dc888c479483250d7f3fcd9fea201fc794
MD5 eb76afb85ac24e969c4f7bc1bccd144b
SHA1 5fc3e98bb94b568cb131b86cabf00990ce7d8348
SHA512 5d0aba8ba7266b5a636390901062faabd48d6b45872465c7032edafa230d856d3f8cc5a992dd065776a3a5b7884bf2aa6a1cf920cb136cf8dedf394321077cdf
SSDEEP 1536:YpA0O62HNowoF6J7vY4UlSHM1fk3ukvzpnqk5p/rqXTqA88zy75XnxOTdkzMG:m6b+FlDSHM1fk3ukvn/rqXTqA88zoXdh
TLSH
T12D93075477EC8319F6FF2F35E5B0A4010A76BE96B835D71D19C0A2AD48737808A60B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

1c:08:15:9c:56:12:2e:7c:09:e4:db:e5:e1:dc:ca:69:fd:ff:ac:04:36:0f:ef:8e:53:8f:14:3d:76:44:15:11

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:4C1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:ff:12:38:7c:f7:c1:65:d6:a1:00:01:00:00:01:ff

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2024 - Oct 22, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

84338

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/System.IdentityModel.Tokens.Jwt/obj/Release/net462/System.IdentityModel.Tokens.Jwt.pdb

Divulge-Stealer/packages/System.IdentityModel.Tokens.Jwt.8.0.2/lib/net462/System.IdentityModel.Tokens.Jwt.xml

SHA256 5ebd80fcff4799028a4c8f4fa7325a6d645ce127a48d33254ca50fde976a5775
MD5 51e9a947c092f792332ed5c530e93d5f
SHA1 8c21198a04344e8a9bf68ded3f57f6ea9e267d83
SHA512 f01a79eafef0496aad045f314dc67d587d3f1083589f3aa51a17c5ec43c9198319870c0e6845d4ebc49881bdc5426d2382c9e650adba07d4bc90c2332a0bf75b
SSDEEP 768:VRRotXzZWZxjM/csMrIYQPq5z/KPk8TNAhyE4IP+zAUYEFNxc:jR8CeU
TLSH
T10CD311247FC68A2118634312ECA4F984EE761713191EDDE2B0DD1D8FAF2ADC792B7548
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.IdentityModel.Tokens.Jwt.8.0.2/lib/net472/System.IdentityModel.Tokens.Jwt.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dc1d3d113410a6d397a738d72861042207509c598033563b1090b7d09b67cec6
MD5 70bc5ca070c1f2889ea7b52991179d6f
SHA1 ca033f4a06c060cdc63f2188105acfa88ba7e37d
SHA512 b4b52ee40b643c5ae340358822e70dbce5ac5d32ad921e8832dd049fc4ad79ea77381a6e94f12aca4615487d3f016a9ccecf696ff73a909aceb75c804a300428
SSDEEP 1536:bfy0Q62HHMw0FOvaPZBZ/Z8RrKfC6ukMzpnqk5p/rqXTqA88zTC5IW7MyzI:T2xOFPRZmrKfC6ukMn/rqXTqA88zoICb
TLSH
T1FA93180477EC8359F6FF2F78E0B0A5010A76BE567836D75D19C0A2AE58737808A60777
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

45:6e:c7:de:5b:ce:18:4a:c2:a5:59:00:36:8a:38:9e:4a:fc:5f:d8:80:ff:c7:05:ac:3c:2e:91:4a:02:b8:37

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f2:3e:32:d7:64:ac:70:91:94:00:01:00:00:01:f2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

84758

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/System.IdentityModel.Tokens.Jwt/obj/Release/net472/System.IdentityModel.Tokens.Jwt.pdb

Divulge-Stealer/packages/System.IdentityModel.Tokens.Jwt.8.0.2/lib/net472/System.IdentityModel.Tokens.Jwt.xml

SHA256 5ebd80fcff4799028a4c8f4fa7325a6d645ce127a48d33254ca50fde976a5775
MD5 51e9a947c092f792332ed5c530e93d5f
SHA1 8c21198a04344e8a9bf68ded3f57f6ea9e267d83
SHA512 f01a79eafef0496aad045f314dc67d587d3f1083589f3aa51a17c5ec43c9198319870c0e6845d4ebc49881bdc5426d2382c9e650adba07d4bc90c2332a0bf75b
SSDEEP 768:VRRotXzZWZxjM/csMrIYQPq5z/KPk8TNAhyE4IP+zAUYEFNxc:jR8CeU
TLSH
T10CD311247FC68A2118634312ECA4F984EE761713191EDDE2B0DD1D8FAF2ADC792B7548
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.IdentityModel.Tokens.Jwt.8.0.2/lib/net6.0/System.IdentityModel.Tokens.Jwt.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 dc74821c455b26073c1449dfcc7d69e1216b6e1602269af4a5e68e70bf91d359
MD5 c6f18ffddbe2b1865503582195a8958b
SHA1 6c064c1fa37025d6a76fb9f9ce31dd7a72083b97
SHA512 1242eca2f7f06d561a239923a3d3a464625345802203d854ea93819f8fb84389b8a939997d8473b95a6c23a90aadf2e09274110ec65f555dac2fd8468943c6d6
SSDEEP 1536:bfy0B12HiMw9WyWy2vUb8fh1oVukMzpnqk5p/rqXTqA88zavj5ibGLz0:Tz3TWVyx8fh1oVukMn/rqXTqA88zI1Cp
TLSH
T1DD93080477EC8319F5FF6F75E1B1A4010A76BE86A836D71D19C0A2AE58737808E6077B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

5c:69:3a:76:09:c5:52:0f:b9:33:03:62:31:93:24:de:d4:1b:3e:3e:06:3d:7c:c8:90:17:f5:ab:fb:16:af:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:521A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:00:0b:d7:aa:7f:1b:2a:17:56:00:01:00:00:02:00

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2024 - Oct 22, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

84838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/System.IdentityModel.Tokens.Jwt/obj/Release/net6.0/System.IdentityModel.Tokens.Jwt.pdb

Divulge-Stealer/packages/System.IdentityModel.Tokens.Jwt.8.0.2/lib/net6.0/System.IdentityModel.Tokens.Jwt.xml

SHA256 5ebd80fcff4799028a4c8f4fa7325a6d645ce127a48d33254ca50fde976a5775
MD5 51e9a947c092f792332ed5c530e93d5f
SHA1 8c21198a04344e8a9bf68ded3f57f6ea9e267d83
SHA512 f01a79eafef0496aad045f314dc67d587d3f1083589f3aa51a17c5ec43c9198319870c0e6845d4ebc49881bdc5426d2382c9e650adba07d4bc90c2332a0bf75b
SSDEEP 768:VRRotXzZWZxjM/csMrIYQPq5z/KPk8TNAhyE4IP+zAUYEFNxc:jR8CeU
TLSH
T10CD311247FC68A2118634312ECA4F984EE761713191EDDE2B0DD1D8FAF2ADC792B7548
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.IdentityModel.Tokens.Jwt.8.0.2/lib/net8.0/System.IdentityModel.Tokens.Jwt.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c2be38bb0db78cc9ed522cb12df24c1b0db3a3090bcfcf860d3cb30cc60aa9a4
MD5 915a85d137b3b867d2898cda088423f0
SHA1 9687f898f6233956c6b855cc45debf3e447a487b
SHA512 ed687a18bd26c8e184301be84f2b9a09af3c33c3a9b00b6fae62e391572d21e6b4f32decc6391ce5968bc0f47484804f10fad6d854a1e6ec8317a1d96004b6d0
SSDEEP 1536:tSGpT6NZvQQdYQ9h1c8ukDzpnqk5p/rqXTqA88zxKdgr80G2b3zem:/oZPya1c8ukDn/rqXTqA88zx2lVc3Km
TLSH
T1DD93F71873FC8319F6FF2F34A4B191510A76FE47A836D70E1980969E58777808AA077B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

45:9e:1f:b4:54:41:04:02:21:b2:cb:9d:39:fd:d6:71:81:06:71:94:69:df:5a:84:f3:79:8f:f9:62:bc:18:74

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:E002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:ee:05:d3:02:30:b2:9a:9d:a7:00:01:00:00:01:ee

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

84806

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/System.IdentityModel.Tokens.Jwt/obj/Release/net8.0/System.IdentityModel.Tokens.Jwt.pdb

Divulge-Stealer/packages/System.IdentityModel.Tokens.Jwt.8.0.2/lib/net8.0/System.IdentityModel.Tokens.Jwt.xml

SHA256 5ebd80fcff4799028a4c8f4fa7325a6d645ce127a48d33254ca50fde976a5775
MD5 51e9a947c092f792332ed5c530e93d5f
SHA1 8c21198a04344e8a9bf68ded3f57f6ea9e267d83
SHA512 f01a79eafef0496aad045f314dc67d587d3f1083589f3aa51a17c5ec43c9198319870c0e6845d4ebc49881bdc5426d2382c9e650adba07d4bc90c2332a0bf75b
SSDEEP 768:VRRotXzZWZxjM/csMrIYQPq5z/KPk8TNAhyE4IP+zAUYEFNxc:jR8CeU
TLSH
T10CD311247FC68A2118634312ECA4F984EE761713191EDDE2B0DD1D8FAF2ADC792B7548
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.IdentityModel.Tokens.Jwt.8.0.2/lib/netstandard2.0/System.IdentityModel.Tokens.Jwt.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cfcc33fef035be0da2a31b6fc9010bfb0e4916f1cbd88727537985ac712ebc0a
MD5 93bc61ec53f57cc9263e5d5b55887032
SHA1 809dcc46a8b2a30a1e81d48f399010e66b16dc81
SHA512 2244cf5631001ed0c5867ef36bb0a08f9f751d22eaa4733a8f8225f7cd6b7c368ca5391d5c3d0ac0fd3e434f5844ac07796570aec705d96f7e5bd8721bfce1f5
SSDEEP 1536:zpA0O62HNowoF6kGEteqYSxfnVo12O3ukhzpnqk5p/rqXTqA88zK85A1Pxjzt:F6b+FmEUqY4fa12O3ukhn/rqXTqA88zA
TLSH
T14B93190477EC8319F6FF2F35E4B0A5011A76BE967C36D74D1984A1AE4873B808A6077B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

6d:3c:57:ba:7b:24:06:79:f9:f6:f7:f4:cb:aa:e2:fe:50:46:b4:bc:7e:14:73:9a:e7:a3:c7:32:4e:4f:25:f6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 16, 2023 - Nov 14, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e2:99:99:95:f1:dc:e3:20:eb:00:01:00:00:01:e2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

84262

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/src/System.IdentityModel.Tokens.Jwt/obj/Release/netstandard2.0/System.IdentityModel.Tokens.Jwt.pdb

Divulge-Stealer/packages/System.IdentityModel.Tokens.Jwt.8.0.2/lib/netstandard2.0/System.IdentityModel.Tokens.Jwt.xml

SHA256 5ebd80fcff4799028a4c8f4fa7325a6d645ce127a48d33254ca50fde976a5775
MD5 51e9a947c092f792332ed5c530e93d5f
SHA1 8c21198a04344e8a9bf68ded3f57f6ea9e267d83
SHA512 f01a79eafef0496aad045f314dc67d587d3f1083589f3aa51a17c5ec43c9198319870c0e6845d4ebc49881bdc5426d2382c9e650adba07d4bc90c2332a0bf75b
SSDEEP 768:VRRotXzZWZxjM/csMrIYQPq5z/KPk8TNAhyE4IP+zAUYEFNxc:jR8CeU
TLSH
T10CD311247FC68A2118634312ECA4F984EE761713191EDDE2B0DD1D8FAF2ADC792B7548
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Memory.4.5.5/.signature.p7s

SHA256 236b487320bf9f65c124a7c38fcf841c12f19134354dada13f4072f3cfe9c282
MD5 7c91de6e46850b70d1c563d51b256ccd
SHA1 c8cd81af89e956bc1e02ea11fd9d5f82ee808a61
SHA512 05c4846c24a9a16d4f66b519942f0d2c974880ee65134727561137d62733780d106d143155347418df6270560a98ad44c43034b45c35e32a3373aa3d7b6bad5e
SSDEEP 384:z/CvDGrDGEiTwguGoJN77hhycYDGoJN77hhs0m:zcDGrDGEoRI3h8FKI3hHm
TLSH
T1FB8207974A246C12FFC7CD55B1D8E62B6E34B3D56AE584E741BCC0C19FC2B822AAC05D
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Memory.4.5.5/LICENSE.TXT

SHA256 d7a68596ab69b06f51ca278a6545148e4269a9381c26d597c13df5d88e08cf5b
MD5 ba2bed45d99b13d4c31485d0631ae675
SHA1 26c7c096ac257154020a07532c5edeba91ee97e0
SHA512 430f0a57ff6be9cb03316eb7312b70f5a2eb44175edacac242a9fd329257ae52c03de8add8a957cd3a336f99fd638eb89d8d3d1338525d5be21d8f4e22f86f97
TLSH
T15221C61E73560363186203614168ECC1F12BB14A3E6F0985306EF309132A018C6FF868
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Memory.4.5.5/System.Memory.4.5.5.nupkg

SHA256 10f43da352a29fb2b3188e4edd4dcf5100194c8b526e4f61fe2e2b5623775a22
MD5 d15ff756699c95ac1b00329307e147ac
SHA1 550daf44c96da0879b404d6cfb077d10b869858b
SHA512 e8c8e536c97b94ac3443c940b30dad43cf6e97dc7a8c3d989371048fe74e168606384f5e0143bdc0d86f7783bf9fdee8417964cb3a8a5d752713e90b125172dc
SSDEEP 3072:Jy2dj6HtPaYqwEtyR1wbpJM+aXKq3XCybrcoguDvp1Ur4MCtQZCgHTWFHq:jjWtPayEt2wv7a6GX1XgGUcxtMCuiFHq
TLSH
T1E61412C70B3CB896F9938DB571C0E747AC285796EAA8F0D7543CE2817B86B450F6902D
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Memory.4.5.5/THIRD-PARTY-NOTICES.TXT

SHA256 7864a01e2fdef7e8fdf81b906efb1466f083206affea7ba7e6dadea429754765
MD5 0bf833f1b32b1cdefbed5e860457d1dc
SHA1 91ea4bdac6268da316ff578ef4a4996052636ef2
SHA512 b022b1a2b0eb5001f49066ec1326567536e2bd92108b873c024824836a05d268e7727166bfa03073e564039ccfa1f5b3074c6c922f476b683dac19affc367963
SSDEEP 384:FU3qNdKkjHrEjsELvyv4a0rB2kSK5gDTYCYbWq/TbOy/rsUrsESOzYgArsErseSi:FU3qvKkjHwjsEuv4a0yK5gDc3aq/T//c
TLSH
T16062C65F7E4547B218E2C7917598E8C8F22FA02D7F6B2940346EE248237742D95FF498
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Memory.4.5.5/lib/net461/System.Memory.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bf3fb84664f4097f1a8a9bc71a51dcf8cf1a905d4080a4d290da1730866e856f
MD5 f09441a1ee47fb3e6571a3a448e05baf
SHA1 3c5c5df5f8f8db3f0a35c5ed8d357313a54e3cde
SHA512 0199ae0633bccfeaefbb5aed20832a4379c7ad73461d41a9da3d6dc044093cc319670e67c4efbf830308cbd9a48fb40d4a6c7e472dcc42eb745c6ba813e8e7c6
SSDEEP 3072:nUGrszKKLB8a9DvrJeeesIf3amN32AW/rcyw/s:OB8l3/aK32qU
TLSH
T1BAD37D6857C6DE56DB5FEC70E02052016631C52F5742BBEE5DC8B8F026923EA28193FE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

a4:6c:07:cf:a9:38:ad:dd:05:7b:ae:24:e4:ad:78:9e:fa:07:82:fb:e0:b3:ea:d5:f5:bc:8e:78:ff:71:9b:27

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 8, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 2, 2021 - Sep 1, 2022

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 2, 2022 - May 11, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

136114

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netfx\System.Memory.pdb

Divulge-Stealer/packages/System.Memory.4.5.5/lib/net461/System.Memory.xml

SHA256 d5714c96607eb1a9d0f90f57ca194d8a9c3ede0656a1d1f461e78b209f054813
MD5 add19745a43b2515280ce24671863114
SHA1 cf44e6557fde93288ff2567a002a69279965caba
SHA512 8d7e564fa61411b5c28f29b07855dd112687edcb39b991803c7c7de67b6894b309102ac9b52409b56b7bb5c9101eb4cdfb21fcfbf5d835e4a153e188cb97cc87
SSDEEP 192:19SSrAVfjSE0wxiMiLiLiXdCjticiciAiJiziPNjNei5i9zhi+ipOUTJ:1gbXKKXppPmcPi6LmJ
TLSH
T18852AE787BCF8D10553602256EA5F480FE295A67700DBD58B1CE3D43EB7E896B2BB840
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Memory.4.5.5/lib/netstandard1.1/System.Memory.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 06ea95f8388a6b031acb2449fd5663d9d26d720ae13df80c800805f896734430
MD5 6e6b7b9faa684d668aef8589f41f368c
SHA1 74373d82e6b9f3236df0e8aa555ecf510b9a6f2b
SHA512 1c656a7dd4a4cff92e671771e43d907a279eb9092735e3812480dad7067a2f94bf0c3346a5d6ff0f2131c21ce9f989b386b9a72ec267e8ab36d3f1909ec1a33e
SSDEEP 3072:s3XFz0qjCIPMAxlUXUKoPfw0kG71AHK7c/X:W0qjCSRE+fw0kG71E
TLSH
T10ED34CA8AB85DB52DF4F8E34F034214597308A279647F76629C878F027E679D38093E9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

7b:79:1d:b7:9b:6c:d6:1e:32:75:f9:5b:0a:9c:4c:10:ea:f2:bd:45:d3:23:4d:72:1d:29:db:6e:49:5a:67:6a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 8, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 2, 2021 - Sep 1, 2022

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 2, 2022 - May 11, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

131986

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netstandard1.1\System.Memory.pdb

Divulge-Stealer/packages/System.Memory.4.5.5/lib/netstandard1.1/System.Memory.xml

SHA256 d5714c96607eb1a9d0f90f57ca194d8a9c3ede0656a1d1f461e78b209f054813
MD5 add19745a43b2515280ce24671863114
SHA1 cf44e6557fde93288ff2567a002a69279965caba
SHA512 8d7e564fa61411b5c28f29b07855dd112687edcb39b991803c7c7de67b6894b309102ac9b52409b56b7bb5c9101eb4cdfb21fcfbf5d835e4a153e188cb97cc87
SSDEEP 192:19SSrAVfjSE0wxiMiLiLiXdCjticiciAiJiziPNjNei5i9zhi+ipOUTJ:1gbXKKXppPmcPi6LmJ
TLSH
T18852AE787BCF8D10553602256EA5F480FE295A67700DBD58B1CE3D43EB7E896B2BB840
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Memory.4.5.5/lib/netstandard2.0/System.Memory.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 11590d8bb3b12f29f4202b3ef8593229a5cd6debb61e76cba9ac5493a82ee382
MD5 0aed51b795e3424f306840013ab4b6ab
SHA1 03d07a75ece4f6f20952836bdbdf3722db9da697
SHA512 a5da35cde61afef3c49e7f1facf8ec672278051bbed0f04000d9c4cd115eb0ddd3177b38462c28ee57ae3b9ed7920fbc86682df447855a3145dab7ae835874a1
SSDEEP 1536:xRi8ae06y7Q0kSvtmvEmFk0pBa/+h8k/6wY2F8VNdhqABtW5yIk1c6ud/zuj:30vDkSvtmhFFYq6DqAGzocX/I
TLSH
T157D34CA46BD9EA57CB4FCCB0F0245155A730852B4652BB7B5CCCB4F06993BAD240C3EA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

03:8e:97:22:68:d7:60:65:d1:23:5f:79:2e:7a:22:88:bf:46:67:1c:59:c6:42:b0:7c:3c:c8:44:90:aa:b5:fd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 8, 2022

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 2, 2021 - Sep 1, 2022

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 2, 2022 - May 11, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

136294

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Memory\netstandard\System.Memory.pdb

Divulge-Stealer/packages/System.Memory.4.5.5/lib/netstandard2.0/System.Memory.xml

SHA256 d5714c96607eb1a9d0f90f57ca194d8a9c3ede0656a1d1f461e78b209f054813
MD5 add19745a43b2515280ce24671863114
SHA1 cf44e6557fde93288ff2567a002a69279965caba
SHA512 8d7e564fa61411b5c28f29b07855dd112687edcb39b991803c7c7de67b6894b309102ac9b52409b56b7bb5c9101eb4cdfb21fcfbf5d835e4a153e188cb97cc87
SSDEEP 192:19SSrAVfjSE0wxiMiLiLiXdCjticiciAiJiziPNjNei5i9zhi+ipOUTJ:1gbXKKXppPmcPi6LmJ
TLSH
T18852AE787BCF8D10553602256EA5F480FE295A67700DBD58B1CE3D43EB7E896B2BB840
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Memory.4.5.5/version.txt

SHA256 150086d05c99cdf644f1b8f7a89e4edee82b1a6f5141bab11417146fa57ee71d
MD5 8bc6b1777e7f1a868ca67c2fd33a5b7e
SHA1 c85d235eae03eb11ad3554ddfd6e0325810d1452
SHA512 d36ccd47ff657a52d05b650bb7b660874218754042c4ad596b25f684362c355c442d10e54bdeb2b9423728722619b072755a7c2914cad6faf48ccf412cb68be0
MD5 SHA1 SHA512

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/.signature.p7s

SHA256 53c5b56f98cfeecdd5ed029bbe5ce1a5c149d0675174c61569463560932db65b
MD5 ff99d74756e78f4404b47b27b2c6fd4e
SHA1 2e143bf3eb27775b0f0f465ac49b00c5d7a0230f
SHA512 44820459a00a7d4f35b5473a8d4c076f960fd16d63a19a9b171021ae5d5aac85fc81479e9a299e6860c33b19affbc6122d8eec63c31bae48fc5652ee80fb7e65
SSDEEP 384:ZxCCvDGrDGrDGmvVpsVpIcYGoJN77hhCBGoJN77hhhnHr:ZzDGrDGrDGsiI3hoQI3h/nL
TLSH
T1B0A209978A246C12FFC78D55B1D4D62B2E34B385ABD584E3817DC0919FC2BD32AAC06D
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/LICENSE.TXT

SHA256 d7a68596ab69b06f51ca278a6545148e4269a9381c26d597c13df5d88e08cf5b
MD5 ba2bed45d99b13d4c31485d0631ae675
SHA1 26c7c096ac257154020a07532c5edeba91ee97e0
SHA512 430f0a57ff6be9cb03316eb7312b70f5a2eb44175edacac242a9fd329257ae52c03de8add8a957cd3a336f99fd638eb89d8d3d1338525d5be21d8f4e22f86f97
TLSH
T15221C61E73560363186203614168ECC1F12BB14A3E6F0985306EF309132A018C6FF868
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/System.Numerics.Vectors.4.5.0.nupkg

SHA256 a9d49320581fda1b4f4be6212c68c01a22cdf228026099c20a8eabefcf90f9cf
MD5 39ded0a965763bc5be721b4c0f263fde
SHA1 275152f93582047359f20b7a5db37a90a61868ac
SHA512 9c04ec0530f608aaf801837a791b33857e2ca6d2265a6049c01fd4e972825967e709cad3070f174829b7400f608e9a641d3afc3a45d4636d4c47dd43dd0657b3
SSDEEP 6144:AF/x91a7Eod1YFhk0F1FVnZ04NZhrhMFsd1YFhkXF6h9sFnFaL/F/6jWBpr:0/da7Eq1dAzVZ04nhrC+1dVKIFa51
TLSH
T19B8402E359026C12DBE2CDB832EBD973BB349745619088E78979D7658940383173FA3E
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/THIRD-PARTY-NOTICES.TXT

SHA256 7864a01e2fdef7e8fdf81b906efb1466f083206affea7ba7e6dadea429754765
MD5 0bf833f1b32b1cdefbed5e860457d1dc
SHA1 91ea4bdac6268da316ff578ef4a4996052636ef2
SHA512 b022b1a2b0eb5001f49066ec1326567536e2bd92108b873c024824836a05d268e7727166bfa03073e564039ccfa1f5b3074c6c922f476b683dac19affc367963
SSDEEP 384:FU3qNdKkjHrEjsELvyv4a0rB2kSK5gDTYCYbWq/TbOy/rsUrsESOzYgArsErseSi:FU3qvKkjHwjsEuv4a0yK5gDc3aq/T//c
TLSH
T16062C65F7E4547B218E2C7917598E8C8F22FA02D7F6B2940346EE248237742D95FF498
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/lib/net46/System.Numerics.Vectors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
MD5 aaa2cbf14e06e9d3586d8a4ed455db33
SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8
SSDEEP 1536:nPOw0SUUKw+GbgjMV+fCY1UiiGZ6qetMXIAMZ2zstK/hV+sUwS:nWw0SUUKBM8aOUiiGw7qa9tK/bJS
TLSH
T174B387E37F1EA476C7CE857F24F74E1D62B52A57C523D6B640CA5AA2016339B28040FB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

99:0e:22:c8:fb:bc:e4:62:63:f1:99:41:db:03:50:70:a9:f7:d6:99:5f:43:9a:3b:2d:d5:4b:9c:fc:3d:7c:e6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

12:57:a0:40:75:36:a1:51:f8:dd:f2:97:bc:f9:16:a8:2c:bd:f3:8d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ae:0e:d6:4e:96:89:db:00:f5:00:00:00:00:00:ae

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

103866

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.Numerics.Vectors/net46\System.Numerics.Vectors.pdb

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/lib/net46/System.Numerics.Vectors.xml

SHA256 ae2c3de9ad57d7091d9f44dcdee3f88eccf2ba7cb43adc9bb24769154a532dc7
MD5 95dd29ca17b63843ad787d3bc9c8c933
SHA1 1a937009a92b034edb168cfac0ec1c353be8f58e
SHA512 8e9397816d3435ccf79f1bf07b482473a7dd3b570bce003639f2e9fa1c5fe31c4b9400b68f191a36251a59c0253ef9e09039fdd63ba2205d379b3c582e603499
SSDEEP 1536:azQgQfMzpKGPqMGFY3lF8YzA2HrYJtJZJ9JaGf4AscoqrbuC4BqaiaIacasa7c1E:azafMDl4LfX3MIg+QDB
TLSH
T1BE04AC74BBC6CD210C6301698C69F4C0FE655DA3B04E5965BCCD2C57AF6AC9393BB822
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/lib/netstandard1.0/System.Numerics.Vectors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 671b682dde1d554d898bf34004c4dc2fef2da6985078c77311308b858b704828
MD5 9a61b7cd3af8271042172d8c26c7ec59
SHA1 a31a12c07d7726ba5f3e3f6fc640e65205413986
SHA512 dc77df716ba814349744d37ef7efc76a9181b72551179fc6ec4131c5510d0fcde817b216c33aeaf1de5d8c6b19d76ac7a8dc5286a6678b9d54a700e04f7cc92b
SSDEEP 3072:/B8BRZYccGsE41VyEs9QqTtP4r2MVvdNvzlZQs/Zn3ldbXfLCt2:qPz97heKhC/dBn3l
TLSH
T18FF351B61F2CA856C7FEC9FF11E19E15A3352463CE03DBFA0ADDA6A2158B7572501083
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

ba:72:dd:aa:0a:85:69:a5:19:7a:b5:6c:33:97:ff:da:a8:15:58:ef:e5:0b:1d:f3:43:90:d0:59:5e:35:0f:14

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

2f:8e:9c:b4:86:74:1b:a4:b8:93:76:4d:f6:52:27:2a:8e:58:92:60

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:aa:b7:a9:88:ff:ea:57:c3:0a:00:00:00:00:00:aa

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

150450

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Numerics.Vectors\netstandard1.0\System.Numerics.Vectors.pdb

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/lib/netstandard1.0/System.Numerics.Vectors.xml

SHA256 ae2c3de9ad57d7091d9f44dcdee3f88eccf2ba7cb43adc9bb24769154a532dc7
MD5 95dd29ca17b63843ad787d3bc9c8c933
SHA1 1a937009a92b034edb168cfac0ec1c353be8f58e
SHA512 8e9397816d3435ccf79f1bf07b482473a7dd3b570bce003639f2e9fa1c5fe31c4b9400b68f191a36251a59c0253ef9e09039fdd63ba2205d379b3c582e603499
SSDEEP 1536:azQgQfMzpKGPqMGFY3lF8YzA2HrYJtJZJ9JaGf4AscoqrbuC4BqaiaIacasa7c1E:azafMDl4LfX3MIg+QDB
TLSH
T1BE04AC74BBC6CD210C6301698C69F4C0FE655DA3B04E5965BCCD2C57AF6AC9393BB822
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/lib/netstandard2.0/System.Numerics.Vectors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 17924e5dc87e0d6229d2dd0bcfc1fdfabd820901b13a68baa89fcb80c4d1a67f
MD5 387c4d07c0e7c45b6d73c61b5936a102
SHA1 81580d6788f5ccf418e89f8a5fd7f720d60bd811
SHA512 c7bd03dbb2daadf43ba281287ac92e3922cddba64702c524083537b9af920cd64b8555a5d1b10dff12bf8b896518fa0ad0de5b598398f6469c9293cfa529bf91
SSDEEP 3072:7ED+u6HtI4zR2Y7Civr2rVvdN1zlyZ73I93lIS6pkHNItTsB:xc0V493l+pAB
TLSH
T177F3F9A7AF3C9112E7EE89FA60E64F526635146BC303D3E245DD56B206C73AB64021CF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

25:e5:64:45:95:90:e8:cd:6e:e7:09:3a:ab:fe:22:50:35:a5:9c:ca:7f:5f:20:2f:81:a4:d8:61:d8:e1:a5:31

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

eb:76:a8:24:2c:d0:3b:aa:44:dd:9c:26:b1:e7:4a:01:6f:5d:72:fa

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:0DE8-2DC5-3CA9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:bb:b6:77:24:71:4a:20:00:20:00:00:00:00:00:bb

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:2137-37A0-4AAA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:af:35:8f:ff:d3:22:45:76:4b:00:00:00:00:00:af

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

152918

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Numerics.Vectors\netstandard\System.Numerics.Vectors.pdb

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/lib/netstandard2.0/System.Numerics.Vectors.xml

SHA256 ae2c3de9ad57d7091d9f44dcdee3f88eccf2ba7cb43adc9bb24769154a532dc7
MD5 95dd29ca17b63843ad787d3bc9c8c933
SHA1 1a937009a92b034edb168cfac0ec1c353be8f58e
SHA512 8e9397816d3435ccf79f1bf07b482473a7dd3b570bce003639f2e9fa1c5fe31c4b9400b68f191a36251a59c0253ef9e09039fdd63ba2205d379b3c582e603499
SSDEEP 1536:azQgQfMzpKGPqMGFY3lF8YzA2HrYJtJZJ9JaGf4AscoqrbuC4BqaiaIacasa7c1E:azafMDl4LfX3MIg+QDB
TLSH
T1BE04AC74BBC6CD210C6301698C69F4C0FE655DA3B04E5965BCCD2C57AF6AC9393BB822
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/lib/portable-net45+win8+wp8+wpa81/System.Numerics.Vectors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 671b682dde1d554d898bf34004c4dc2fef2da6985078c77311308b858b704828
MD5 9a61b7cd3af8271042172d8c26c7ec59
SHA1 a31a12c07d7726ba5f3e3f6fc640e65205413986
SHA512 dc77df716ba814349744d37ef7efc76a9181b72551179fc6ec4131c5510d0fcde817b216c33aeaf1de5d8c6b19d76ac7a8dc5286a6678b9d54a700e04f7cc92b
SSDEEP 3072:/B8BRZYccGsE41VyEs9QqTtP4r2MVvdNvzlZQs/Zn3ldbXfLCt2:qPz97heKhC/dBn3l
TLSH
T18FF351B61F2CA856C7FEC9FF11E19E15A3352463CE03DBFA0ADDA6A2158B7572501083
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

ba:72:dd:aa:0a:85:69:a5:19:7a:b5:6c:33:97:ff:da:a8:15:58:ef:e5:0b:1d:f3:43:90:d0:59:5e:35:0f:14

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

2f:8e:9c:b4:86:74:1b:a4:b8:93:76:4d:f6:52:27:2a:8e:58:92:60

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:aa:b7:a9:88:ff:ea:57:c3:0a:00:00:00:00:00:aa

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

150450

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Numerics.Vectors\netstandard1.0\System.Numerics.Vectors.pdb

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/lib/portable-net45+win8+wp8+wpa81/System.Numerics.Vectors.xml

SHA256 ae2c3de9ad57d7091d9f44dcdee3f88eccf2ba7cb43adc9bb24769154a532dc7
MD5 95dd29ca17b63843ad787d3bc9c8c933
SHA1 1a937009a92b034edb168cfac0ec1c353be8f58e
SHA512 8e9397816d3435ccf79f1bf07b482473a7dd3b570bce003639f2e9fa1c5fe31c4b9400b68f191a36251a59c0253ef9e09039fdd63ba2205d379b3c582e603499
SSDEEP 1536:azQgQfMzpKGPqMGFY3lF8YzA2HrYJtJZJ9JaGf4AscoqrbuC4BqaiaIacasa7c1E:azafMDl4LfX3MIg+QDB
TLSH
T1BE04AC74BBC6CD210C6301698C69F4C0FE655DA3B04E5965BCCD2C57AF6AC9393BB822
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/ref/net45/System.Numerics.Vectors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 adcbd046f2adc02b60dccfd9a9ee8c23b627b112a2532b748db84008dc27f0e8
MD5 176d9752b9a48844fa2d3493a62fc4cf
SHA1 0b93a55a0ab16390fd5a66b314790f769aad4fd8
SHA512 79d7a36c2d04093936adda330f86eaa92a86c50c3c11180b1391855bb6b9da4996315db9c87c4033452589dad874f284d81079041c51921c70965dfd3323f4d8
SSDEEP 768:fNKv0gHAUvNgf78NhekT3GI3Dp1ghmB5LskHtDtViILoJ:QMLtcDLBtZVH
TLSH
T1F403F87E5797A42BE8660B309983C506F73CCB8A19232727F7AFB8741C4779D86122D4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

d5:af:81:05:4b:f0:d2:b2:80:7a:24:85:16:05:f4:d5:d5:6d:eb:ae:b4:c0:14:e5:e2:3f:1a:17:4f:47:a9:ec

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

30:6f:32:54:5b:45:b2:7d:6e:27:2c:73:b4:94:38:53:36:bd:46:fb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c1:09:f8:02:41:bb:4d:aa:dc:00:00:00:00:00:c1

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ab:5e:40:9d:ee:46:df:2c:6c:00:00:00:00:00:ab

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

27238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\39\s\corefx\bin\obj\ref\System.Numerics.Vectors\4.1.4.0\net45\System.Numerics.Vectors.pdb

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/ref/net45/System.Numerics.Vectors.xml

SHA256 ae2c3de9ad57d7091d9f44dcdee3f88eccf2ba7cb43adc9bb24769154a532dc7
MD5 95dd29ca17b63843ad787d3bc9c8c933
SHA1 1a937009a92b034edb168cfac0ec1c353be8f58e
SHA512 8e9397816d3435ccf79f1bf07b482473a7dd3b570bce003639f2e9fa1c5fe31c4b9400b68f191a36251a59c0253ef9e09039fdd63ba2205d379b3c582e603499
SSDEEP 1536:azQgQfMzpKGPqMGFY3lF8YzA2HrYJtJZJ9JaGf4AscoqrbuC4BqaiaIacasa7c1E:azafMDl4LfX3MIg+QDB
TLSH
T1BE04AC74BBC6CD210C6301698C69F4C0FE655DA3B04E5965BCCD2C57AF6AC9393BB822
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/ref/net46/System.Numerics.Vectors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6ade595b1b09778a2bbfb0c0935e2583029c8cd90798766ae41fcb4a0bc2e918
MD5 319d019bf6ebfc9132edde4b43b0f4d0
SHA1 7ee864c728e855a22b3e5f4fcf6e6b04cabb111d
SHA512 9268949838a0b4a71ec0d799d30f9794ea3ab5193258d9ade69cf9fe1924573a6660bf77c7beca17ca3a120f4deabe3e03f1b1f7cba698b19eeeed91505bc6b3
SSDEEP 384:q6vX5PZxKbVJ23RvMfWj/WmDPWC/WYDGFm0GftpBjTaQHRN7c2Yl4aR9QM:qUxxKbVc3tDd/DSViJLcqw
TLSH
T1A8D21B048BD8D603E9B61E3272B5CD7AB939E3CB8821871F61AD91550C53B9CEF9831D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

e4:0b:5b:61:d1:54:fa:d8:d2:ee:38:2c:74:4a:11:c1:e9:0e:7b:50:12:18:31:80:1c:46:a8:b7:c4:ef:9d:0a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

f3:2b:a3:91:12:f6:5c:db:2e:53:49:cd:1c:cc:ba:7d:55:19:a7:5d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ad:80:23:37:65:c4:5a:23:6a:00:00:00:00:00:ad

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

17358

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/ref/net46/System.Numerics.Vectors.xml

SHA256 ae2c3de9ad57d7091d9f44dcdee3f88eccf2ba7cb43adc9bb24769154a532dc7
MD5 95dd29ca17b63843ad787d3bc9c8c933
SHA1 1a937009a92b034edb168cfac0ec1c353be8f58e
SHA512 8e9397816d3435ccf79f1bf07b482473a7dd3b570bce003639f2e9fa1c5fe31c4b9400b68f191a36251a59c0253ef9e09039fdd63ba2205d379b3c582e603499
SSDEEP 1536:azQgQfMzpKGPqMGFY3lF8YzA2HrYJtJZJ9JaGf4AscoqrbuC4BqaiaIacasa7c1E:azafMDl4LfX3MIg+QDB
TLSH
T1BE04AC74BBC6CD210C6301698C69F4C0FE655DA3B04E5965BCCD2C57AF6AC9393BB822
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/ref/netstandard1.0/System.Numerics.Vectors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8ac0afe8e639dbb3ab66a41deaac7cbf2daefd42e5394c4966eae00984c3d4ae
MD5 8a8958fcb3c30f7b7284e44fb2ec0a1f
SHA1 c785567325cd49c581d20be46537fc90175d8285
SHA512 27ab89e97d93d18b8b9296d5983db758e1814849309b8419b0fada76e316b63f28a94ad3bcae01571bb9cd8dac46abe1ec00c7561bc884eda5e8f9c2aadbab19
SSDEEP 768:1fsEeiQzFH2qr2h5WpdUspeuUf1viqY6b0Mi:1fPeiQzFH2q6T82stUf1vRhbli
TLSH
T17D03D76AD394655BE973677092E68615FB3CC386AB23270B3AB5E4B40CC33DF89112C5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

c6:a6:3b:20:22:75:0f:a3:5e:f3:81:d7:b5:34:26:bc:b8:16:5b:61:73:3c:f2:96:ee:54:95:bf:65:88:d6:35

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 19, 2017

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

57:eb:34:e9:00:6e:e7:b3:44:f0:10:cb:ca:d4:74:c9:5b:32:1e:c3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 19, 2017

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B1B7-F67F-FEC2,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c9:64:4d:16:db:1a:7d:b3:15:00:00:00:00:00:c9

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 18, 2016 - Nov 2, 2017

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 17, 2016 - Feb 17, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:b2:35:05:68:37:22:1c:0d:a7:00:00:00:00:00:b2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

27330

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\500\s\corefx\bin\obj\ref\System.Numerics.Vectors\4.1.3.0\netstandard1.0\System.Numerics.Vectors.pdb

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/ref/netstandard1.0/System.Numerics.Vectors.xml

SHA256 ae2c3de9ad57d7091d9f44dcdee3f88eccf2ba7cb43adc9bb24769154a532dc7
MD5 95dd29ca17b63843ad787d3bc9c8c933
SHA1 1a937009a92b034edb168cfac0ec1c353be8f58e
SHA512 8e9397816d3435ccf79f1bf07b482473a7dd3b570bce003639f2e9fa1c5fe31c4b9400b68f191a36251a59c0253ef9e09039fdd63ba2205d379b3c582e603499
SSDEEP 1536:azQgQfMzpKGPqMGFY3lF8YzA2HrYJtJZJ9JaGf4AscoqrbuC4BqaiaIacasa7c1E:azafMDl4LfX3MIg+QDB
TLSH
T1BE04AC74BBC6CD210C6301698C69F4C0FE655DA3B04E5965BCCD2C57AF6AC9393BB822
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/ref/netstandard2.0/System.Numerics.Vectors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 cd6c992bf86770f0527aea3cbd18728071cd8e2c65d9d1eb62e8ab8eac2b089a
MD5 eea0a9f806eb782cad7b8655606e0e0c
SHA1 6ed78e52d98b42d770f56fbea7a0dd0141a192da
SHA512 af8cb031eb19e24b63d3500c9c02c32a9ae9f7f9c0fccdbf5636a9ca7c002f8eb0dc9ca4def27c5ae3a09bc1c63ac281e06d223c49486c8b75fb0a75fd884b5c
SSDEEP 768:uV80l7laElIl1e1hhWpdUspeuYviHEuN6b2wF:uCk/82stYvYgb2wF
TLSH
T12003EA6B4354669AE9B34B3056A6850DF73DD7826B23272B3B56F0760C833FF86212D4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

96:fc:64:3a:c6:52:a4:89:7a:56:07:4e:f8:df:4a:b5:fe:cd:f9:89:a8:c2:ec:4f:eb:35:fb:17:cb:79:53:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 19, 2017

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

aa:20:f0:51:93:c2:aa:40:67:f9:20:25:65:9a:4a:ca:24:ae:df:a6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 19, 2017

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:b5:ac:7d:6d:87:6b:26:11:47:00:00:00:00:00:b5

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 18, 2016 - Nov 2, 2017

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 17, 2016 - Feb 17, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:9f:67:f2:b5:a8:23:06:5b:7b:00:00:00:00:00:9f

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

27326

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\500\s\corefx\bin\obj\ref\System.Numerics.Vectors\4.1.3.0\netstandard\System.Numerics.Vectors.pdb

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/ref/netstandard2.0/System.Numerics.Vectors.xml

SHA256 ae2c3de9ad57d7091d9f44dcdee3f88eccf2ba7cb43adc9bb24769154a532dc7
MD5 95dd29ca17b63843ad787d3bc9c8c933
SHA1 1a937009a92b034edb168cfac0ec1c353be8f58e
SHA512 8e9397816d3435ccf79f1bf07b482473a7dd3b570bce003639f2e9fa1c5fe31c4b9400b68f191a36251a59c0253ef9e09039fdd63ba2205d379b3c582e603499
SSDEEP 1536:azQgQfMzpKGPqMGFY3lF8YzA2HrYJtJZJ9JaGf4AscoqrbuC4BqaiaIacasa7c1E:azafMDl4LfX3MIg+QDB
TLSH
T1BE04AC74BBC6CD210C6301698C69F4C0FE655DA3B04E5965BCCD2C57AF6AC9393BB822
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Numerics.Vectors.4.5.0/version.txt

SHA256 c3267fe0adb0b855d1fa96901b0b1c297b9c5215fdd914151d31dbbd1d75ea05
MD5 81f65b4c28699a8aac1f571eba414da7
SHA1 8ca51d19c602cdc75ca75bdb943fe78c7bd4cd62
SHA512 d08a81aca32e2a8811deff9f97d01685df701b5801f1c04478c277575e7ae5d774816cc6b7ab7a3a6b7a9d958e1239912ec8204c4753865e9c1a70800b4b7835
MD5 SHA1 SHA512

Divulge-Stealer/packages/System.Runtime.CompilerServices.Unsafe.6.0.0/.signature.p7s

SHA256 656115a2ddb0446951f12837043cf09296c9df27e73cf66e2a6ac9467101589c
MD5 52b4cee48c5cd8a1e919720e20833a3e
SHA1 e80cf38b815eee6ec01bb5b3e29b70833feb8933
SHA512 2e81a3c8d3bdca32a0793ad78c38ee32cb91dd4a68e1f12a66ded6321e6f4965027d66b72428207bafe3df120fec508e56319a56a48263e1da61571ae1836a1d
SSDEEP 384:UKCvDGrDGEiTwQGoJN77hhV29vGoJN77hhkwR:UtDGrDGETI3h/29uI3h6W
TLSH
T1688208978A246C12FFC78D55B1D4E62B6E34B3956BE584D781BCC0C19FC2B8226AC05D
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Runtime.CompilerServices.Unsafe.6.0.0/Icon.png

SHA256 3356b59b6d9c24db3a22398c0fb3430724052fe75ae5e8430ee8ede2fb713356
MD5 09e1aea3b3b37c1d1df0cac1526db117
SHA1 62e90259673547dcd6f96724457102bce993a21d
SHA512 12d5aa8bea27ad6a1118bee3b1185dbb952197dfa4465e141d3b51090364db7d7ab7c2add6463a0adc318410faf1c3783c69b35e08cba0285571c59c0c7aab25
SSDEEP 96:663c45/CUP/tGCokZHaRNDDxzlmOgJ5T0bI645pjXxHwLW+ditsML:XZ5qUHtGUwfDNhgvX5pjTIy
TLSH
T1E1E1B1E0C79151FBC4B8A7F086DB4D999ACAC5B8B3371B0A6F0814AC392FBA55114F46
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Runtime.CompilerServices.Unsafe.6.0.0/LICENSE.TXT

SHA256 d7a68596ab69b06f51ca278a6545148e4269a9381c26d597c13df5d88e08cf5b
MD5 ba2bed45d99b13d4c31485d0631ae675
SHA1 26c7c096ac257154020a07532c5edeba91ee97e0
SHA512 430f0a57ff6be9cb03316eb7312b70f5a2eb44175edacac242a9fd329257ae52c03de8add8a957cd3a336f99fd638eb89d8d3d1338525d5be21d8f4e22f86f97
TLSH
T15221C61E73560363186203614168ECC1F12BB14A3E6F0985306EF309132A018C6FF868
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Runtime.CompilerServices.Unsafe.6.0.0/System.Runtime.CompilerServices.Unsafe.6.0.0.nupkg

SHA256 6c41b53e70e9eee298cff3a02ce5acdd15b04125589be0273f0566026720a762
MD5 bc8f414c8f33e950f7f9d538438aa28c
SHA1 0eabb7759a4124139faec3d8ee75c5bb4e6440ba
SHA512 d4057301be4ec4936f24b9ce003b5ec4d99681ab6d9b65d5393dd38d04cdec37784aaa12c1a8b50ac3767ed878dae425749490773fec01e734f93cf1045822b3
SSDEEP 1536:Nua3gxmkPoAmtpn63CRkBUBd4XO7QCHSZQa2Z93h/U13h63:Nuaw5Q/63FGV/HSUZTU23
TLSH
T1D383E1A78A2C2413EBC3CDB270C59953BF357387AB99D4C760688125DBC37D90A2827D
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Runtime.CompilerServices.Unsafe.6.0.0/THIRD-PARTY-NOTICES.TXT

SHA256 a6344bfb229bc08d1071cec400eea216e307439f961c5943ec1b56d2245acb95
MD5 5c0c947c0acf593dc4b839a5af8cd258
SHA1 5b46ca04b52dd9c89295b897dafaa62729b93242
SHA512 c6f447dff7c5d2002ebd6db1e332516fd8a00635469696c913174dd1b30586c8e43e81402d6e91c718adfab2dcf3c711e735abf6485dde99f96582d170f52c10
SSDEEP 768:HULRRvIKkjHwjEEg/4a0yK5gDc3aq/1//z7zYgAVXzYgjOzi4c+/UocBUU8pM1/I:HA6jHwQZGfgg39/zwgAVkguQXrDjugta
TLSH
T18923B55E7E454BB318E2C7916569A8C4F21FA02E3B6B2A44346EF248233F42DD5FF458
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Runtime.CompilerServices.Unsafe.6.0.0/buildTransitive/netcoreapp2.0/System.Runtime.CompilerServices.Unsafe.targets

SHA256 f5b87cce4d2d05db8d9e6a8bf7789fe8c8cc3bea24b87d09944ec4ada8efb478
MD5 2c9895670c74953377dd18c544eda810
SHA1 60ee1c08aa354ac7a62eff92d45edc7f8b82696f
SHA512 b84dd811424ab0a717a388577509aff0a052222457d9ccfa883461c20bb9be87192f8aeafd1cf94e36f06b6dfd603391138c72370a8321170bede6eed1a219fa
TLSH
T1B2F05C2643D171F141742406AB7654529BB5D288358211D57E48AE4F8391A1C882B6B3
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Runtime.CompilerServices.Unsafe.6.0.0/lib/net461/System.Runtime.CompilerServices.Unsafe.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 37768488e8ef45729bc7d9a2677633c6450042975bb96516e186da6cb9cd0dcf
MD5 c610e828b54001574d86dd2ed730e392
SHA1 180a7baafbc820a838bbaca434032d9d33cceebe
SHA512 441610d2b9f841d25494d7c82222d07e1d443b0da07f0cf735c25ec82f6cce99a3f3236872aec38cc4df779e615d22469666066ccefed7fe75982eefada46396
SSDEEP 384:EybU8ndrbbT9NWB2WL/uPHRN7bhlsQVryo:Ey5ndvWbMPVryo
TLSH
T1A8824A21CFD84503FE627B344568D183FE38E38A6806A36A2586F57A1CD63C57B31E38
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

a0:70:99:f3:f5:b7:ef:fb:27:e6:01:6f:08:b5:3a:37:53:0b:75:67:14:d0:60:c5:7a:94:ea:2c:97:22:88:f7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 27, 2021

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2021 - Feb 10, 2022

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:48:a2:88:45:56:bc:2f:80:bf:00:00:00:00:01:48

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 12, 2020 - Feb 11, 2022

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

14030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\net461-Release\System.Runtime.CompilerServices.Unsafe.pdb

Divulge-Stealer/packages/System.Runtime.CompilerServices.Unsafe.6.0.0/lib/net461/System.Runtime.CompilerServices.Unsafe.xml

SHA256 39c2d4a63a186d423e9c866f4d3e9a6acba0103398f20baf8b92a38744894215
MD5 c782e92abbfc0531226f735c6ac56498
SHA1 2586fdbeb6d1e11d4cecd5b3e8387a18c7b4d350
SHA512 a12b6807695c9c626de9602abc6df72bcc5e869a29c7111e956034f321436e7c50ea36ed5ec5b6f93a639ae0f7aea93953e91ae557bf423a749b036c7252a7b9
SSDEEP 384:Y/uXukudyvmB0fmkcdZKyQe1EyriJriurs8rsF9vVwFaFDJOeOtOEKFzUxRkj1r:Y/ApEwmafmkcdZbQe1EyriJriurs8rsR
TLSH
T15E92AD243BCA5FA21772031D9E1AF1C9EE21957B308CA84134DC6C7377ADDEA4A7B560
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Runtime.CompilerServices.Unsafe.6.0.0/lib/net6.0/System.Runtime.CompilerServices.Unsafe.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2b4eb652a3748bffc734c39e6c352b17472f4a115ae683258429877540fe71c5
MD5 ffe0c4f16a6678b450b04e9b6c3dc36a
SHA1 331886b45fbc86991765672b43adaf4eaedca29e
SHA512 6bbb9d00f4e2845c77366eee3b03c75472cda67b9fb38ee3e15a80b454a221aa579b722438e82c2f523236e3ceb0a719f376b9279efcc07ef48402fce2a58622
SSDEEP 192:OTAaWxRWWWif2xLmfbWB2WXWOL8/pCuPHnhWgN7aYWnwmOCqqnajqUkoe:ltWWW48QbWB2Wf/uPHRN7A+luUkX
TLSH
T1EC823A26CFD84643FD566B3097A4D683FB38B7C6592293193889E5B92CC67CD6E20128
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

6c:a4:b4:d3:94:94:9b:49:d4:f3:3a:a2:9d:ef:db:36:45:59:04:d7:12:81:fa:fe:cc:bc:8b:e7:5d:1c:53:a7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 27, 2021

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2021 - Feb 10, 2022

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:E5A6-E27C-592E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:47:9d:8f:f1:e6:de:31:83:59:00:00:00:00:01:47

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 12, 2020 - Feb 11, 2022

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

13886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\net6.0-Release\System.Runtime.CompilerServices.Unsafe.pdb

Divulge-Stealer/packages/System.Runtime.CompilerServices.Unsafe.6.0.0/lib/net6.0/System.Runtime.CompilerServices.Unsafe.xml

SHA256 39c2d4a63a186d423e9c866f4d3e9a6acba0103398f20baf8b92a38744894215
MD5 c782e92abbfc0531226f735c6ac56498
SHA1 2586fdbeb6d1e11d4cecd5b3e8387a18c7b4d350
SHA512 a12b6807695c9c626de9602abc6df72bcc5e869a29c7111e956034f321436e7c50ea36ed5ec5b6f93a639ae0f7aea93953e91ae557bf423a749b036c7252a7b9
SSDEEP 384:Y/uXukudyvmB0fmkcdZKyQe1EyriJriurs8rsF9vVwFaFDJOeOtOEKFzUxRkj1r:Y/ApEwmafmkcdZbQe1EyriJriurs8rsR
TLSH
T15E92AD243BCA5FA21772031D9E1AF1C9EE21957B308CA84134DC6C7377ADDEA4A7B560
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Runtime.CompilerServices.Unsafe.6.0.0/lib/netcoreapp3.1/System.Runtime.CompilerServices.Unsafe.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a533a809b4bb8b0272c7338fa2d455eaa75eb38d8a094e9c3a6baf7e626f5c8f
MD5 6ea728751192bbaf25403424fd5634fe
SHA1 9b076e5f2d3869e3abf5422055ce8257255f1618
SHA512 774b940429a1f45ba2c7851f3ff105d112cb6f60c905b2969da685fc0eefa59a127ae15b46620b73c836fef194a10eb98e11e25e44631c85b081dfb99d3fe5fe
SSDEEP 192:n7dT9kMCwisyGkbUbbmVrxpBWB2WDWOL8/pCuPHnhWgN7aYWKVOCqqnajqVZ:AMC9FgbbWpBWB2WT/uPHRN79V+luVZ
TLSH
T1F5826B50CBD80247FD636B3456ACD543FD3CA3961D12A72A3985F57A1CC6BC9AE20A38
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

6f:19:91:7e:b4:83:0a:7a:ce:a7:23:02:78:f0:00:c3:43:78:27:94:d9:02:1d:31:6f:73:5c:a2:e2:c0:85:af

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 27, 2021

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2021 - Feb 10, 2022

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:E5A6-E27C-592E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:47:9d:8f:f1:e6:de:31:83:59:00:00:00:00:01:47

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 12, 2020 - Feb 11, 2022

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

13998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\netcoreapp3.1-Release\System.Runtime.CompilerServices.Unsafe.pdb

Divulge-Stealer/packages/System.Runtime.CompilerServices.Unsafe.6.0.0/lib/netcoreapp3.1/System.Runtime.CompilerServices.Unsafe.xml

SHA256 39c2d4a63a186d423e9c866f4d3e9a6acba0103398f20baf8b92a38744894215
MD5 c782e92abbfc0531226f735c6ac56498
SHA1 2586fdbeb6d1e11d4cecd5b3e8387a18c7b4d350
SHA512 a12b6807695c9c626de9602abc6df72bcc5e869a29c7111e956034f321436e7c50ea36ed5ec5b6f93a639ae0f7aea93953e91ae557bf423a749b036c7252a7b9
SSDEEP 384:Y/uXukudyvmB0fmkcdZKyQe1EyriJriurs8rsF9vVwFaFDJOeOtOEKFzUxRkj1r:Y/ApEwmafmkcdZbQe1EyriJriurs8rsR
TLSH
T15E92AD243BCA5FA21772031D9E1AF1C9EE21957B308CA84134DC6C7377ADDEA4A7B560
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Runtime.CompilerServices.Unsafe.6.0.0/lib/netstandard2.0/System.Runtime.CompilerServices.Unsafe.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 01748200f2400c742aa689f1f5101bd6298efdfd92c00c18f4fa473847235ba9
MD5 93ae20e877512f420abb5b2d8ebe1446
SHA1 802bce64836f3efd2f74ebd0e767ce341cb021a8
SHA512 2c8b7cdad056d03b51356ad3361b431600c8674e49a182274fdc481ba817042e7a3be85e6a23c7f2052561f22c81e91f33f992a31c5e48e1e31029132f3efbe1
SSDEEP 192:6fwP+RIb2m0XysErFbbfVrx9lWB2WhWOL8/pCuPHnhWgN7aYWHkW/5qnajOBQ84:0dyb2mg8bbr9lWB2W9/uPHRN7UFhlsQt
TLSH
T1C08249198BD84617FC237F34467CE506FE3CA3966813A32B2545F27A1CD73C66A21A2D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

f8:b9:f5:f3:55:0d:87:88:da:c4:89:55:f0:ed:b2:bd:6f:52:75:ab:a9:01:77:1f:14:f0:81:ca:65:b5:ca:96

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 27, 2021

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2021 - Feb 10, 2022

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:48:a2:88:45:56:bc:2f:80:bf:00:00:00:00:01:48

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 12, 2020 - Feb 11, 2022

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

14046

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Runtime.CompilerServices.Unsafe\netstandard2.0-Release\System.Runtime.CompilerServices.Unsafe.pdb

Divulge-Stealer/packages/System.Runtime.CompilerServices.Unsafe.6.0.0/lib/netstandard2.0/System.Runtime.CompilerServices.Unsafe.xml

SHA256 39c2d4a63a186d423e9c866f4d3e9a6acba0103398f20baf8b92a38744894215
MD5 c782e92abbfc0531226f735c6ac56498
SHA1 2586fdbeb6d1e11d4cecd5b3e8387a18c7b4d350
SHA512 a12b6807695c9c626de9602abc6df72bcc5e869a29c7111e956034f321436e7c50ea36ed5ec5b6f93a639ae0f7aea93953e91ae557bf423a749b036c7252a7b9
SSDEEP 384:Y/uXukudyvmB0fmkcdZKyQe1EyriJriurs8rsF9vVwFaFDJOeOtOEKFzUxRkj1r:Y/ApEwmafmkcdZbQe1EyriJriurs8rsR
TLSH
T15E92AD243BCA5FA21772031D9E1AF1C9EE21957B308CA84134DC6C7377ADDEA4A7B560
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/.signature.p7s

SHA256 3a9d8cde0fc821b0de36d972d69715469fecb731add0c12585969be02bc9f0a9
MD5 1e13301eee237a090a0ecc9a4965fc8f
SHA1 854b6e2e700fb65d01f1cf4035c5beea75557f08
SHA512 f5d1a830fce511e3b0dec2b5f9dbbbfba767a6745ffe160658352fbd8eca9f80c829274e5b3f80ad4a264e15d2b292139ae4373d7ffa86b66aa661ac6cc6f84e
SSDEEP 384:IIvDG6w0HQIYiKDrC5IkJNyb8E9VF3AM+o5ooMJNyb8E9VF3AM+oi2/:I2DG65YiKvl+ENAMxKoWENAMx3/
TLSH
T1E6B239B2C9546C01EE9B8C4671C8DA3B6E7577876AD0C4E3136DC1908B827837AED1BD
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/Icon.png

SHA256 3356b59b6d9c24db3a22398c0fb3430724052fe75ae5e8430ee8ede2fb713356
MD5 09e1aea3b3b37c1d1df0cac1526db117
SHA1 62e90259673547dcd6f96724457102bce993a21d
SHA512 12d5aa8bea27ad6a1118bee3b1185dbb952197dfa4465e141d3b51090364db7d7ab7c2add6463a0adc318410faf1c3783c69b35e08cba0285571c59c0c7aab25
SSDEEP 96:663c45/CUP/tGCokZHaRNDDxzlmOgJ5T0bI645pjXxHwLW+ditsML:XZ5qUHtGUwfDNhgvX5pjTIy
TLSH
T1E1E1B1E0C79151FBC4B8A7F086DB4D999ACAC5B8B3371B0A6F0814AC392FBA55114F46
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/LICENSE.TXT

SHA256 d7a68596ab69b06f51ca278a6545148e4269a9381c26d597c13df5d88e08cf5b
MD5 ba2bed45d99b13d4c31485d0631ae675
SHA1 26c7c096ac257154020a07532c5edeba91ee97e0
SHA512 430f0a57ff6be9cb03316eb7312b70f5a2eb44175edacac242a9fd329257ae52c03de8add8a957cd3a336f99fd638eb89d8d3d1338525d5be21d8f4e22f86f97
TLSH
T15221C61E73560363186203614168ECC1F12BB14A3E6F0985306EF309132A018C6FF868
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/System.Text.Encodings.Web.8.0.0.nupkg

SHA256 21442442457da68d4b0b442caab8a5ab03733ef9dcfb8795beafa10afabc7ef1
MD5 d28c2f0335e973c3df4ee5aad1b1d6a1
SHA1 d67c2e5b14efa455f525df6985434b873d9b421f
SHA512 ba0822c38c3b658aba9495642d269e882b827e3be4ad2dc1426d8a97d3cbc5a2277c5f80847d0cb9381078af01523328c4992caa058146d5d8ee6b8a08609c32
SSDEEP 6144:xzC9OyfGtWqykU8+2rKjCUYWPZ02qYB/7v6D6PJJfczIXd+Cn09BL5JNaU5l7:xzC9QWqyh8j4CUYWh02q4zv6D6Yzo+33
TLSH
T12F84122182C59991DA1BDE3AF2C8DF277136431129A8ECF21316C5C145C7FCA6E7CA9E
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/THIRD-PARTY-NOTICES.TXT

SHA256 19c19dcac9f3ee6302cfbc6745bb8e79f08efc4c933eb8dc5509bf14b88347ec
MD5 bb0d94085c74c0c1ab94ff3451e5ed6e
SHA1 545f9b60da6e83fd233d283f30520f07ec05ba43
SHA512 e179c051afd2308803f2019c49230d1321294838f263cf38eb8fdebb6d08835ddfc38b52c1faf237cc9312314e7e9c962fb93862a8d9661fc5661d4172719643
SSDEEP 1536:HA4jHwLvGfgg39/zwgAVkguQqQhrDjuglN8g+eCJwk3WvrpX7anu6Y9LSFhUJXJL:HA47wyogz1AVxu9MjHlNZ+fJw9rB9Lw6
TLSH
T1C563C55F7E450B7319E2C3956569A8C4F22FA02E3B6B2944346EE248233F42DD6FF458
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/buildTransitive/net461/System.Text.Encodings.Web.targets

SHA256 79b63a5c48e6d8e65356e2b776962051de988b4de15a54383acfa4ba772f2dc4
MD5 845c4f4a8ae60416da693aca41aca4da
SHA1 4a091f2029d04ddf4b9f67623baab56d56232056
SHA512 98999d49aef251d0d43004a88255e2cf8f8b28ca75d747ab19fee9900136c7c72820e4224a5abb36b49985bc4b05f9b6ea707ff8694c39ec01f82fb5588e4710
TLSH
T109F0023AF350A3D0517010906A728991E3FFA2DC3351A5D4754CD7CE4722B94CD7359B
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/buildTransitive/netcoreapp2.0/System.Text.Encodings.Web.targets

SHA256 cf3a0d3c019da1a28a184fe55d97a313f4bb89f113f72731d9edcf3056b939ad
MD5 c233a648c1c5814cb2d387fc24311fe6
SHA1 8f40bbaedc3129cbc4f977c64aa934ba0b4765f2
SHA512 93885acaed41e3c0bd0b89717f9e6ef45c24b4203163e66ac7acc67b86d066c79074d213dd4b7be599cc5ba2d368d411a4ca790de85023c1236ed5b617bf733c
TLSH
T1FCF0023AF790D7C011B414916A718893E3BF92D83361A5D0750CD78E4722A94CDB759B
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/lib/net462/System.Text.Encodings.Web.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e9c4f5eed186cb129c527c4b8d67d163ea2f2396e9d8b96e30b5e7c12203ce84
MD5 fa9d0d182c63c49a4c567f7c1652b6e6
SHA1 55ddfbe80762c02f9a9c65809f9ec3ef8f7f2ccc
SHA512 58f468c982ab66930ff37efb5a941db116e8c1aed66ebc23720a7b18f71bebe1e929bea76680294edb25f430c23d520b8a87e3a22064c5993d0396819a21cbe7
SSDEEP 1536:AOOgOOOc2yQDmBkKQh39thfavqcdUIUdu4OzfocSWnO73TT+zo:KyEmXQh39HfavqEUTjOzfo5WnMO0
TLSH
T198735E12A748C75AC75E153256A085619BF0DF6F2313F782585CB81E2B733C9EA0E2A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

93:c5:bf:87:63:20:6f:3f:df:14:8c:e6:1c:77:82:fb:5e:85:38:db:da:14:9d:a9:bd:23:e6:f9:c1:84:58:09

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 31, 2023

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 11, 2023 - May 8, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:86DF-4BBC-9335,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b7:21:27:1a:07:a2:2a:86:46:00:01:00:00:01:b7

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

64978

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Text.Encodings.Web/Release/net462/System.Text.Encodings.Web.pdb

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/lib/net462/System.Text.Encodings.Web.xml

SHA256 8e96160dd96e742f859587a710bbcfa2f11813bfe560ca823da00d3557520d3d
MD5 85be27287d715b2aac6d2671b66334f0
SHA1 9016ec56870827a3d8aeaef8fe9e63af8a59ef83
SHA512 140ca7169f64be7ab926cb95d898f02dd5495a2875057ad8fcd0e97117aef7ae34be911e4155452a192180ebbdab14ade2fb6b599d35fa10f7a3321b272e75ff
SSDEEP 384:Yc32SgYGYofQhYLJkiBkN3/Ky7pkG05HaTw3IIMZpq/YbTbBnRE1Cd8PBdl+Y0TE:Y9fJvkNxw3IIMZxE1Cr0Md3wh7te4
TLSH
T19853DC69AAC6EE410AB212011C1CF4C0FD1E1C53F25D1861BDEC5F5B6F2E4BA96FB858
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/lib/net6.0/System.Text.Encodings.Web.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9b422eb98889f81d8ab10cbbacd2aa33a5db88f40e8aa2a1066e11a65d6473dd
MD5 47b647312ec9a2f6f8d2871b8de71a1e
SHA1 f86a5a15fb0a2cd5937f8cabf8b936332c2452d6
SHA512 13de04b7db5969fbe7f93c89db83f9129e31b56e1383e7f7400caf8ef64ba3e1092f1d68795281780bf88d9c5df36b32ef2ff4fee9161674bc90978d933bced1
SSDEEP 1536:oQuedlunqpC9yGxC9X7o5ge5BGlFEtoPDiyQzSO:j3KICtxC9cCe5oFFPBQmO
TLSH
T1EB636C04E7C8C6AFCA5E1E7238B0C071A7B09F9B5165F6834CA4388957B33C9660F1A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

cb:b3:bd:dc:11:c2:38:35:f0:f5:4e:4c:82:5b:1e:a6:fb:b2:c9:dd:99:39:c7:07:6e:03:dc:7d:32:67:71:65

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 31, 2023

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 11, 2023 - May 8, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:ce:0f:18:f7:45:97:e7:c6:ff:00:01:00:00:01:ce

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 25, 2023 - Feb 1, 2024

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

65774

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Text.Encodings.Web\Release\net6.0\System.Text.Encodings.Web.pdb

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/lib/net6.0/System.Text.Encodings.Web.xml

SHA256 8e96160dd96e742f859587a710bbcfa2f11813bfe560ca823da00d3557520d3d
MD5 85be27287d715b2aac6d2671b66334f0
SHA1 9016ec56870827a3d8aeaef8fe9e63af8a59ef83
SHA512 140ca7169f64be7ab926cb95d898f02dd5495a2875057ad8fcd0e97117aef7ae34be911e4155452a192180ebbdab14ade2fb6b599d35fa10f7a3321b272e75ff
SSDEEP 384:Yc32SgYGYofQhYLJkiBkN3/Ky7pkG05HaTw3IIMZpq/YbTbBnRE1Cd8PBdl+Y0TE:Y9fJvkNxw3IIMZxE1Cr0Md3wh7te4
TLSH
T19853DC69AAC6EE410AB212011C1CF4C0FD1E1C53F25D1861BDEC5F5B6F2E4BA96FB858
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/lib/net7.0/System.Text.Encodings.Web.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 6ba46c1989be0429b44c294168e39844155799c0864a796e4916d46842aab54a
MD5 97fd3753cb8a8a455947ba69645221be
SHA1 160e94665290e48ddf79d65b84633bae83b04cc2
SHA512 e6fb40cc9acc0fe4e6617523fd5112a3b1482522a183dc23475b2cd005e03965cfa8e562390723807133c589ad5edb993e51c7689a89e75edf06fe7d27cf25d7
SSDEEP 1536:LJyJeSj0PWpFKbpiX7b4d58kLBdxIXB2PB+z4:D648AbpifkLBdxIx2ss
TLSH
T14B636B25E789C66DCE5E0AB02470807CB7B49F9B1626BE873885794917733CA720D2E7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

b1:86:a8:d1:b0:3d:68:d2:f8:52:51:34:9b:5d:a0:88:4d:e7:59:78:2c:4c:2d:55:ae:1f:9d:84:70:fc:b9:19

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 31, 2023

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 11, 2023 - May 8, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:86DF-4BBC-9335,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b7:21:27:1a:07:a2:2a:86:46:00:01:00:00:01:b7

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

65566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Text.Encodings.Web\Release\net7.0\System.Text.Encodings.Web.pdb

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/lib/net7.0/System.Text.Encodings.Web.xml

SHA256 8e96160dd96e742f859587a710bbcfa2f11813bfe560ca823da00d3557520d3d
MD5 85be27287d715b2aac6d2671b66334f0
SHA1 9016ec56870827a3d8aeaef8fe9e63af8a59ef83
SHA512 140ca7169f64be7ab926cb95d898f02dd5495a2875057ad8fcd0e97117aef7ae34be911e4155452a192180ebbdab14ade2fb6b599d35fa10f7a3321b272e75ff
SSDEEP 384:Yc32SgYGYofQhYLJkiBkN3/Ky7pkG05HaTw3IIMZpq/YbTbBnRE1Cd8PBdl+Y0TE:Y9fJvkNxw3IIMZxE1Cr0Md3wh7te4
TLSH
T19853DC69AAC6EE410AB212011C1CF4C0FD1E1C53F25D1861BDEC5F5B6F2E4BA96FB858
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/lib/net8.0/System.Text.Encodings.Web.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b39ed102d8e348241638ab73ff8789667e9a207882b0c482c313c3196a0bfeb5
MD5 da6aed43deb72a90eabfc23dc1b2a575
SHA1 04e2eb2a8101f7b1490c3038832641be95cea924
SHA512 eb4be29cdc13ffc66b9dda14d33eacf81644bbcf593785b026615a98442fbfd8fd87983e578d4e031ba9864fcae858759cbdb6b245919b6434baf1dcd7ed1812
SSDEEP 1536:QXl/XjhPTpgKnJEX7ACXJgodyFNX+qjS+zYy:sTtN/n2DZENuq/8y
TLSH
T133633A11E788C65EDA5E5F30387090B1A2F86FEF062AA6C62C55784957F33C9620D2F7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

8a:99:1b:4e:c5:5f:08:a2:d7:45:45:56:0e:af:8e:c3:bf:65:ab:c0:fa:e1:53:66:6c:4d:41:b0:ad:fe:5d:ce

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 31, 2023

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 11, 2023 - May 8, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b4:fb:80:08:44:05:d2:2d:fa:00:01:00:00:01:b4

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

64862

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Text.Encodings.Web\Release\net8.0\System.Text.Encodings.Web.pdb

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/lib/net8.0/System.Text.Encodings.Web.xml

SHA256 8e96160dd96e742f859587a710bbcfa2f11813bfe560ca823da00d3557520d3d
MD5 85be27287d715b2aac6d2671b66334f0
SHA1 9016ec56870827a3d8aeaef8fe9e63af8a59ef83
SHA512 140ca7169f64be7ab926cb95d898f02dd5495a2875057ad8fcd0e97117aef7ae34be911e4155452a192180ebbdab14ade2fb6b599d35fa10f7a3321b272e75ff
SSDEEP 384:Yc32SgYGYofQhYLJkiBkN3/Ky7pkG05HaTw3IIMZpq/YbTbBnRE1Cd8PBdl+Y0TE:Y9fJvkNxw3IIMZxE1Cr0Md3wh7te4
TLSH
T19853DC69AAC6EE410AB212011C1CF4C0FD1E1C53F25D1861BDEC5F5B6F2E4BA96FB858
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/lib/netstandard2.0/System.Text.Encodings.Web.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5ad1f348223f281c34b9b857445a1c3412a430026ef049aeac641c53a92408be
MD5 a54bfcaad28bc997e64046832838d9c7
SHA1 1ac78ad4b7a2799f5e63cb705815b2a79b738e93
SHA512 581e9acbdbbc010005396e13ec19205a288334db63b135ade7cc3b4ca8b5ce3d6766e629428433d6bb3f55aa4eba25563c5d50a22e0ebaee1b7e76407b24d044
SSDEEP 1536:JOOgOOOc2yQDmBkKQh39trThrhVZW8igOM8K4RhrYoc9R5P73XiEqzO:FyEmXQh39xfTIRhrYoMR5Lsq
TLSH
T16B735D116789C71EC75E053057A08165D7F4AF6A2323E78A2859B82E1B733CDB70E6E3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

02:b5:ea:54:5b:8a:e2:1f:2a:86:07:69:73:e4:b8:3f:24:38:1a:8b:9a:37:83:b1:8d:9b:d0:0d:3d:55:02:0b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 31, 2023

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 11, 2023 - May 8, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A935-03E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:d1:b2:5b:40:28:6c:2e:d2:45:00:01:00:00:01:d1

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 25, 2023 - Feb 1, 2024

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

64938

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Text.Encodings.Web/Release/netstandard2.0/System.Text.Encodings.Web.pdb

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/lib/netstandard2.0/System.Text.Encodings.Web.xml

SHA256 8e96160dd96e742f859587a710bbcfa2f11813bfe560ca823da00d3557520d3d
MD5 85be27287d715b2aac6d2671b66334f0
SHA1 9016ec56870827a3d8aeaef8fe9e63af8a59ef83
SHA512 140ca7169f64be7ab926cb95d898f02dd5495a2875057ad8fcd0e97117aef7ae34be911e4155452a192180ebbdab14ade2fb6b599d35fa10f7a3321b272e75ff
SSDEEP 384:Yc32SgYGYofQhYLJkiBkN3/Ky7pkG05HaTw3IIMZpq/YbTbBnRE1Cd8PBdl+Y0TE:Y9fJvkNxw3IIMZxE1Cr0Md3wh7te4
TLSH
T19853DC69AAC6EE410AB212011C1CF4C0FD1E1C53F25D1861BDEC5F5B6F2E4BA96FB858
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/runtimes/browser/lib/net6.0/System.Text.Encodings.Web.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ef9810f0a4ce5ebe98a5448847b56d6ca3f31ad51f5e405cd99e1aad858f0005
MD5 48591d83db07feb428445be9f161fc53
SHA1 aaeb2ea8ff1746aad3e27b6cc0c3c75067750a76
SHA512 b2a2be8fdd6b7562e77279c1d0ae07769097129b98feaa137ed05ad8bbdc4c22a0ebb8b45b03d025490fe44d9a3263b521a6231b0df530d963b10fc286db381b
SSDEEP 1536:pxuAEP6SrduX7NnEowblsQD6w0OlLr7YVczS:fEP6Srdux9Wl/0grEcu
TLSH
T195636C10E788C6AFCA5E0E7228B18070A7B49F9B5166F6839C94744A57733CD760F1E7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

29:6c:50:72:e7:61:54:a5:39:d6:0b:6b:fe:51:b6:65:d6:84:cd:f5:8c:3e:4c:3f:3f:25:36:4e:3d:57:40:31

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 31, 2023

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 11, 2023 - May 8, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3303-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:cc:86:a5:dc:37:eb:d9:61:2d:00:01:00:00:01:cc

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 25, 2023 - Feb 1, 2024

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

65950

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Text.Encodings.Web\Release\net6.0-browser\System.Text.Encodings.Web.pdb

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/runtimes/browser/lib/net6.0/System.Text.Encodings.Web.xml

SHA256 a14b52587901f28c64f28277ddb4f4561e8c52a7e67fe05394979a518299fb59
MD5 e21f21fafd7ecf660cf42e798a462250
SHA1 0bddcfe60c9fe44ecde66297d742173291427709
SHA512 f7b4204636e09405f4f9a6154b8ba80b52c1dca3576857c80764234edf409d884fdf290d3f2502a0ba3dbba2104908e0119b50aa93f9620970d14052be1d5df0
SSDEEP 384:Vq9bjSbrWybx+5GYYJUpaaa1paaaa9paaaaaZiUHRRpomBllGdAJsefofrft37J6:Vgi33t+LYJeLJIr8ANZ9eKkpriWuTw
TLSH
T192B3FC25E6C4CE5207B251125D0DF884FE1E06A3B24A5C193CCD5F135F2EAB662FF86A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/runtimes/browser/lib/net7.0/System.Text.Encodings.Web.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 72e5c908033159c67611a06f9bdbc501532d04fcda3eb12967bba24bd92350f4
MD5 eb05838cc7b1fc0e22798b00d172c04f
SHA1 67b8963baf07d0d507f9c3b49725fca614585419
SHA512 423c439f57d06305041bea0c0e1672c5670d469a0ae45f535da5b4d3fdb42cc43c7649cee04314dd35c77f73dfaee850490245c951a10db79484a67834bf0514
SSDEEP 1536:FJ1Js7ZWUkKTFEnX7B+xr1ZoizZdCKrwzo4:wVzkKTFEnar1Zoiz/CUwV
TLSH
T156637D24EB8AC26DCA5E06B53870807CBBB45F9B1526BE872885794817733CE760D1E7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

6b:61:cb:a7:36:a9:e3:67:76:7e:61:1e:95:ef:34:9f:c9:99:7a:73:a6:83:77:2b:5e:71:03:bf:2c:d4:38:69

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 31, 2023

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 11, 2023 - May 8, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:0842-4BE6-C29A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:b2:6e:40:03:7f:6e:a9:94:92:00:01:00:00:01:b2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 20, 2022 - Dec 14, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

65742

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Text.Encodings.Web\Release\net7.0-browser\System.Text.Encodings.Web.pdb

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/runtimes/browser/lib/net7.0/System.Text.Encodings.Web.xml

SHA256 9920ded8dc75aa8d8fc315cb70ebe05946c5c6031c042ae04e22e44f51adab89
MD5 ca4921d75a4cd099f1f00cbfe64e7b0e
SHA1 b6e3868037fafe01456e830b0964888a82662617
SHA512 6e240903d3af90fcf0b06dea17a43178e58ec9bd6b0c115655326124f3cef52c881e9a61423dac4957b5ad5545047b428c66d69f011cd8d8662339643c5efd78
SSDEEP 384:Vq9bjSbrWybx+5GYYJUpaaa1paaaa9paaaaaZiUHRRpomBllGdAJsefofrft37JN:Vgi33t+LYJeLJIr8ANZ9eKkpriWuTn
TLSH
T1B9B3FC25E6C4CE5207B291115D0DF884FE1E06A3B24A5C193CCD5F135F2EAB662FF86A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/runtimes/browser/lib/net8.0/System.Text.Encodings.Web.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d864d2557e0e2271412a98d2f3dc47f349cb931fa4d79275fd1e845e496f34bf
MD5 b6e7fb08f5dcd0df90e9746d27bbc469
SHA1 24c5afd594fc9e55e2cb78b2943410843e841ac8
SHA512 c716f5ef8335baf03885e9746e1b3039ae0c29cdf87d6771053abbe666699d22087206a2a1860ebadcb0e493bfb1effc74da0001c05c2bd2821c1dcf9fee583b
SSDEEP 1536:Jwld3ZYU2ETZnX7oB/bO+eq8v6UQIBe1KimzZ:SpN2EtnMcQIY1Ed
TLSH
T1E0634A11FB88C69EDA5E5F3028709071A6B86FEF0626B687189539495BB33C8730D1F7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

20:ad:36:cd:6e:77:2e:16:92:9e:23:e9:e5:7d:1a:93:19:8e:7b:89:5a:a4:3b:6a:52:aa:b0:fa:5f:07:f2:3f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 31, 2023

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:7c:c9:f6:bc:ed:07:59:ae:08:00:00:00:00:03:7c

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 11, 2023 - May 8, 2024

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:d0:77:08:aa:ef:a3:17:c6:dd:00:01:00:00:01:d0

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 25, 2023 - Feb 1, 2024

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

65038

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Text.Encodings.Web\Release\net8.0-browser\System.Text.Encodings.Web.pdb

Divulge-Stealer/packages/System.Text.Encodings.Web.8.0.0/runtimes/browser/lib/net8.0/System.Text.Encodings.Web.xml

SHA256 9920ded8dc75aa8d8fc315cb70ebe05946c5c6031c042ae04e22e44f51adab89
MD5 ca4921d75a4cd099f1f00cbfe64e7b0e
SHA1 b6e3868037fafe01456e830b0964888a82662617
SHA512 6e240903d3af90fcf0b06dea17a43178e58ec9bd6b0c115655326124f3cef52c881e9a61423dac4957b5ad5545047b428c66d69f011cd8d8662339643c5efd78
SSDEEP 384:Vq9bjSbrWybx+5GYYJUpaaa1paaaa9paaaaaZiUHRRpomBllGdAJsefofrft37JN:Vgi33t+LYJeLJIr8ANZ9eKkpriWuTn
TLSH
T1B9B3FC25E6C4CE5207B291115D0DF884FE1E06A3B24A5C193CCD5F135F2EAB662FF86A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/.signature.p7s

SHA256 9b90c482d05c7acd62ce0c2c32be0ff5d414b06fff43b32a492fc86a06de5c44
MD5 71d132f468576255f732d503cb699981
SHA1 ac355fd7bd95026445e90e1eaf8b8859f11ffb24
SHA512 287bcd8ba5fc695d62520116e73cbd16743c4b7061f115aa6412f432d3d9b83313cb203baf05c0cedee2879968c8d04b68f6aeda216fcf019d06b19de9665dcc
SSDEEP 384:zRH8HQIYiqIYiKDrroDEhwZJNyb8E9VF3AM+oQZjYsJNyb8E9VF3AM+o+q5:z1G5YiXYiKvEACENAMxQLENAMx15
TLSH
T15BB24AA389546C04DE4B8C4675C89D3AAE757BC76E90C0D3226EC1908B917837BED1FD
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/Icon.png

SHA256 3356b59b6d9c24db3a22398c0fb3430724052fe75ae5e8430ee8ede2fb713356
MD5 09e1aea3b3b37c1d1df0cac1526db117
SHA1 62e90259673547dcd6f96724457102bce993a21d
SHA512 12d5aa8bea27ad6a1118bee3b1185dbb952197dfa4465e141d3b51090364db7d7ab7c2add6463a0adc318410faf1c3783c69b35e08cba0285571c59c0c7aab25
SSDEEP 96:663c45/CUP/tGCokZHaRNDDxzlmOgJ5T0bI645pjXxHwLW+ditsML:XZ5qUHtGUwfDNhgvX5pjTIy
TLSH
T1E1E1B1E0C79151FBC4B8A7F086DB4D999ACAC5B8B3371B0A6F0814AC392FBA55114F46
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/LICENSE.TXT

SHA256 d7a68596ab69b06f51ca278a6545148e4269a9381c26d597c13df5d88e08cf5b
MD5 ba2bed45d99b13d4c31485d0631ae675
SHA1 26c7c096ac257154020a07532c5edeba91ee97e0
SHA512 430f0a57ff6be9cb03316eb7312b70f5a2eb44175edacac242a9fd329257ae52c03de8add8a957cd3a336f99fd638eb89d8d3d1338525d5be21d8f4e22f86f97
TLSH
T15221C61E73560363186203614168ECC1F12BB14A3E6F0985306EF309132A018C6FF868
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/PACKAGE.md

SHA256 9c1d77fcb66a8c74ea53aa7bc13302c7231bb5898f896d03647a76dabdc178a7
MD5 97e7030f8149eb6b8f77c84743f160b8
SHA1 d3aee9a9b0c91bbfa36a9841137bc7fd293168a3
SHA512 d86a4cac9302a9f03cf6f7ca16c1f31d22347f20292ae0ee294e9f2b0fa387c4c50c910375ce670162cb603ebfe5e02814e94c8e5aa9b8be25ebae603d211bc0
SSDEEP 96:CfcssorOgV9EoVDqReU2oDI1Pxw/LxVKZbwRWSvLa214aXoUXR5T3uJKt2B5IrGu:5ssoRV9L1EL40LswTeJKtnf0w9
TLSH
T1FC02A62D76528B37141D01AA6808D040AA358397DF61DCF13FCD89E9D79286C8BBFE9D
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/System.Text.Json.8.0.4.nupkg

SHA256 839a13edf6d7c50f486a1d67302af85145ff6b697e1158c9c93af0dc54db21a2
MD5 09c9ef2c8a76637ae17052f8a4e08519
SHA1 c7ada2ee36ae42c5b86044b501c07ba27f5423df
SHA512 9f87ee2a39ba4f602a2b3ec7584b8aa2c03a7f6db1e303f48224dbc139ddbf3cb10190be04efe1d1592b0bf5b2fd97f6d8f88fd492a45f778b84fd3e613acb00
SSDEEP 49152:VI/FeSVA96xdga4SValUKSVLJ/6qSVSplSVUNhecIZ5IF0c19DAhcn:aAy1dD4yalLyLJpyelyUNhw7IFxDAk
TLSH
T109953301E758F84CF44B9D3586DA923F38316AEEE2C5D8E7549021D6F0C2B221BF95A7
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/THIRD-PARTY-NOTICES.TXT

SHA256 b60b2912da28eaa6518593c9e2efb5334ee062d3c42e80d8fdfa806b3dc52977
MD5 2383c080a8e2bc7bb0c129a365076a18
SHA1 f88981c5351e9cd841d9ecfecc8b58ba1ce88cea
SHA512 258996bd4325860fd1c35d4815b934c248e0d6da926e9dd8bf7644752be141199b6d380c60cef0173ce9ec4b0242d20e559c2916d574e4dc1715726284238403
SSDEEP 1536:HA4jHwLjGfgg39/zwgAVkguQqQhrDjuglN8g+eCJwk3WvrpX7anu6Y9LSFhUJXJL:HA47wuogz1AVxu9MjHlNZ+fJw9rB9Lw6
TLSH
T1DB63C55F7E450B7319E2C3956569A8C4F22FA02E3B6B2944346EE248233F42DD6FF458
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn3.11/cs/System.Text.Json.SourceGeneration.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 63e40dfda1255aa74defea1a9077a759e224450e96e8f8c3fd4b85d03a51c857
MD5 8854cc8ea08737ecc4911284c1e504b7
SHA1 cea4c3c7cb76846e2a6b6c08ccb2ab455e5ff80f
SHA512 8f1b510e1eb352c6f8fa644817d8ea3061b6cd187eb2ae92a8906cf430ee43bec33a791e35f47630f2843ee831b2a9309245785a992182658e7965b44f10a2a5
SSDEEP 3072:Nk5Lbdvm+Fd/LgAPjY5T2H56+XVdQcbplS2NZ4z1VxmuvIGKJs+gCQ:Gvm+Fd/LgIjY5SHrXVdQcbJ4zlmuvRKG
TLSH
T15504B522B7FC1769FBFF1E34F83894514AB6BD65A832C39C1A00259E45637809A71B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

95:5f:91:f9:f0:2d:89:b3:3d:da:6c:0a:9e:75:5e:c5:5b:45:e3:fe:ec:b2:86:0e:5a:46:09:da:6a:95:2a:95

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:7F00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f0:2a:7c:1d:59:3b:e6:1f:ad:00:01:00:00:01:f0

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

180090

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Text.Json.SourceGeneration.Roslyn3.11/Release/netstandard2.0/System.Text.Json.SourceGeneration.pdb

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn3.11/cs/cs/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e7b6ba79e6064f2bafeb0cd107769f1f39b236a2f03294fef9e91738646903ec
MD5 cd0740333c5dbe4ee83b5681439e918b
SHA1 369e788b1eccb232aab01e17fd1a08ccf233be3b
SHA512 737c949681d805f729155fa03b76a843f51b412c93811a0286f741816cb51944b127a43b7d93ced089b3616c672d75e2e50e2975bf855cdb81f9518b0d757529
SSDEEP 384:yHInJ7P8L8GabzBMkhcW+UWJYA6VFHRN7CMqHR9z9o/F:FnJ7P8L8GMzBBIzFClno9z2/F
TLSH
T1B892F962A7F95106FDFB1EB0B638E4422D3E7B926D11C52E0649E68D04B37949F3073A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

3d:50:ed:f9:a1:6b:f7:fe:71:7f:d2:d0:04:2d:3d:c6:9d:99:f0:15:5e:1a:7f:95:6b:46:7a:3d:9b:20:90:27

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:de:9e:48:9e:96:9f:28:44:3d:00:01:00:00:01:de

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn3.11/cs/de/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 67cb967cda43084e4381880f836530fe86b531fc1141585d55170ab4466b25c4
MD5 81094e098d5366dc36440c4e93bb82fe
SHA1 ea57192a2afc979d8557f088b21a37b0ad2c34af
SHA512 b36d0cc5cd94f10280214fa951cb8f686a7b85a25393d7e89de68cbcbfc4edf34bd62950275140644ad91cc150dc3491e422fa038013327b809f13f0985aef66
SSDEEP 384:FHI/Ny1m8x8+wWW+UWoX6HRN7PvHR9z9ik:W/Ny1m8x8kuWPJ9zYk
TLSH
T1DDA2F711ABF92106FABB6E707A78D4532D3EBA936D11D11E0249D59D08A3B91CF3033B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

1b:6e:87:62:74:71:00:38:33:59:ea:71:7c:26:90:ed:0e:ed:a1:85:44:32:46:a0:ba:16:d8:aa:bd:5a:db:aa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:de:9e:48:9e:96:9f:28:44:3d:00:01:00:00:01:de

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16394

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn3.11/cs/es/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 33641049bb6e3ed5d38a53653b3c12fcd22550e8432dff13e333b7f1879410f3
MD5 4fcd9d21b6f728f6677c55dd9a7f830a
SHA1 b6f83bb8b6aa10d98d2e5422a97cdd3fa2aa9ef7
SHA512 bee84e059979393dc50be02c522f46de28651b387af245a24b309e356f7090e69a6fc80df58659830c75e4bb15e3ff1e29abf031e36fe20193b3b98f1fff23d1
SSDEEP 384:1HIzJ2t8y8NbHW+UWaYA6VFHRN7ltHNsAR9zNW:GzJ2t8y8PIFClLts89z4
TLSH
T190921952A7FC1252F8B72E70AA7AD8076D3E7A92BD10C16E0589D54D08A2784CF3177F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

e5:42:57:2b:cf:32:6a:f1:a5:b3:06:58:69:bf:69:08:c2:06:68:36:4f:fa:cf:26:f1:91:45:16:9c:d6:30:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e2:99:99:95:f1:dc:e3:20:eb:00:01:00:00:01:e2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn3.11/cs/fr/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 04f34a7aa338e3f1bd57d0071ff7c6c272a52f342a768e3b5d59e55c508e195b
MD5 50c1cfec2ecbf0ee758800dc5f5e0321
SHA1 e33963ac46e76a026713519b82184fed0b7bc4a7
SHA512 bcb5c6664779083eeecd641ff5c126bc242e8094fd78ea3af0c0fec20d657d26b3a4913a280b943cbe91790511f76437becb12451f6b28adc33fcae10736ffaa
SSDEEP 384:cHIe7BP8B8ptCh7WctPOoayWW+UWcYA6VFHRN7XpYBmo8R9zBYsO7Xt:He7BP8B8ptCh7WcRJd2iFCl5+moQ9zFm
TLSH
T1A8A2095797F86142F9F71E70BA39D8035C3E7A92AE00D96E0689D94D05B3384CB31B7A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

8e:cb:41:52:52:52:e8:e1:cb:46:a4:b1:cd:74:f5:af:db:87:7a:0b:3f:6c:18:a3:3f:23:62:a6:35:fd:85:f1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:179E-4BB0-8246,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e0:d4:fc:1f:13:15:1f:7e:5d:00:01:00:00:01:e0

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16442

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn3.11/cs/it/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ff98099da166fde3ff2f50d72bd90e093d799f3931074920831b421551ef709a
MD5 06d8556e718539c4dffb30988cef66a8
SHA1 fea020e99bca53b3761968b6761cf8df47f4c8ea
SHA512 62a76dfa5842b5b949713983b2872032bcdc40e987eeab3d19d23ac8768fad0e3fdf8d0e5f812daa3d7e66c91cdf819f1e254763ab848e0dab3b9c092adf37de
SSDEEP 384:RHI3Gq38u8km+YjU4xuQTcJW+UWoRYA6VFHRN7TZR9zgJO8:K3Gq38u8L+YjUyuQT0aFClTT9zQO8
TLSH
T13B921863A7F85112FCB71E30AA3AE803AD3A7996AE10D26E0185D54D14A3784DF3473F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

07:ce:15:a9:1f:fa:8c:40:e1:68:6d:b8:92:65:4c:33:54:b1:51:02:e5:27:b1:f3:99:3f:26:86:79:d3:38:8e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dc:c1:e0:8c:c2:5f:58:5e:8e:00:01:00:00:01:dc

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16242

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn3.11/cs/ja/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d4e9eec839167e5bf652cf79cfd23dacab6c87a9bb00c1a03d945be53c52ce7c
MD5 72b3ee41c590f6d41f221427a4031605
SHA1 b099c4738a6e0c2f1e2b693a0df335b5e1ed76e4
SHA512 dba164edf1c07579c9113fccaa516564c35eb00b453b7ebcf7b5f813ac7bad87afa2e5db7b4162d99e5c86fc91233b759be5a93ec6d3bdcdc5f1b6eddf1e0ee3
SSDEEP 384:8HINeKA898aCL4W+UWxYA6VFHRN7eR9zgiolY:nNeKA898ayUHFClC9zolY
TLSH
T181A2E66EA7F91116FDB36E702A7DD0826D3A7D97EC11E23E010DD55D18A2788CA3073A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

4e:a4:29:54:a0:f5:91:c8:09:1b:a2:78:c4:db:14:0b:2f:c4:57:cf:34:38:1c:b1:9d:fd:4f:7e:35:25:31:94

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dc:c1:e0:8c:c2:5f:58:5e:8e:00:01:00:00:01:dc

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

17194

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn3.11/cs/ko/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f572b11f923a3dec139656b8dbaf1cc84aa7899b13240da4045771b0ac381865
MD5 b19bc5d0b0b6225fc3d3ea3d6198acfa
SHA1 1bfd8f9e120c939f8d0c047612a79e58243b2a54
SHA512 62562facd3077409f76e3c57d2705a13839cd59b5d1e91af2954b140db4e02b65ea9574f5c35d47522e012c8e3829069b8c71c1d7268d18e46b997a377c0fba8
SSDEEP 384:FHIfyf4Q8/8LyZcP7etW+UWyYA6VFHRN7dR9zgk:Wfyf78/8uZcP7ezUFClf9zl
TLSH
T1EFA20892A7F91205FDB76E706A78E442197AB9966E12C12D4985CC4D0CB2B80CF31B3F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

34:63:88:70:65:3f:f8:45:b9:08:3e:ca:c8:5a:33:74:db:5f:81:9e:60:e2:04:cf:27:39:4a:ad:e2:1c:ab:97

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dc:c1:e0:8c:c2:5f:58:5e:8e:00:01:00:00:01:dc

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn3.11/cs/pl/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a44f533d685c9183b6a32505d9b4937afb7460cf8c6c8c89e9ff98704df11cc3
MD5 319d1af2557fe48c4b8cc373f0e9b98f
SHA1 ba6519a224312638e62d4ef09c7e0288951d74ed
SHA512 f4a91b39de3520790aad5cdd64dc5cd36ac16e2f114b3e194c84961b5ed99a4070623b43110ed5b4cb06b560fc1a2d4c71b775508450185879e83dd59bf0bdde
SSDEEP 384:GHIFVmH838kxFdRoqW+UWLX6HRN7YlHR9z9z:xFVmH838uBWYf9zt
TLSH
T1DEA2095267F95102F9F75E70AAB9D9422C3E3A966D10C56E014AE98D19F2380DF3073F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

ae:24:d4:c0:9c:b4:56:be:49:cc:32:f2:08:27:1b:ba:42:fb:78:d0:d7:b8:d2:b8:d4:22:38:21:6e:68:ed:d8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:de:9e:48:9e:96:9f:28:44:3d:00:01:00:00:01:de

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16522

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn3.11/cs/pt-BR/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 59299cabfd661c369c1cd2ea2f0f62627cc716e9f4851417f2bc2f5eb9532563
MD5 c5ed09675dff71d99c0a4ce0ca125721
SHA1 8ff5906fe7771e20eec19c9ea63ff0d9a0a6401f
SHA512 d7914c316ed715ae2b4bf1c9446f5f380dd6d0110d159eff00a39b1052dce1f0aa3f50f8b62d8c3a2bf7de5446bc3460d231ac8c699a105332fe1a5401c1d484
SSDEEP 384:xHI9fut8s88Ep6W+UW6X6HRN7pQkk6R9z05:q9fut8s88EpKEWpQkk29zu
TLSH
T1C292086667F91212F9B71B70BA39D9032D3D7A56AD10C66E0189EA4D04B3784CF3173E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

68:74:49:a7:e1:20:3f:38:4b:4d:8c:52:26:1e:2a:ab:23:ba:bc:ef:af:8e:10:f2:e5:20:fb:c1:c5:2e:fc:4b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e3:df:bd:9b:9a:1c:68:83:22:00:01:00:00:01:e3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn3.11/cs/ru/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 777c525b26d90a8cf787141f1bc134065adb314eae16d95f531c12728b7003c7
MD5 0bdd4b230adb6fa75904f25682e43a5b
SHA1 b36a4cbd3bbe9414837dad1a52b29660d5015044
SHA512 7b36a3de33eccd94f382b406ce1514a201a576dea3a63ac63c56f4ab930825dee01097789b9c5cc74892cfd702ce819614be86e97513e2becf40f56a07bf76b6
SSDEEP 384:8HIgSZ0L8V8yiinNhFgxCn+BZQ8W+UWjYA6VFHRN7gmUntHNsAR9zNpP:ngSZ0L8V85inNhFgxCn+BZQoZFClUttb
TLSH
T1E1A2B45256FD514AE5A27931EA38E9063C3E79FE2F15C32E0144BA9E18F2354CB3472E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

37:32:5e:46:02:a1:42:1e:da:07:9e:da:57:b2:3e:2f:9c:12:2b:61:b8:40:3c:21:a1:98:eb:58:24:19:dc:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e2:99:99:95:f1:dc:e3:20:eb:00:01:00:00:01:e2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

18362

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn3.11/cs/tr/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2d81712b282cf91537c10c6159d49334c4ffac17585f133b4887460fce69db1d
MD5 7d2c7fed92514813c8c733d1152d6998
SHA1 89a2e9c5360cae0f359ae8f6681a57b0e312ed00
SHA512 8c549fd57c129e6fee181cb4ccd5068256b34640be8bfd413a95e4cdc47721234ca180ed3923c170a52089dc188faa6c71b4f363876ae8d4ce212f2a1bfed1b9
SSDEEP 384:MHI87ZM8N8pAbLKrSW+UWVYA6VFHRN76w3DX+iR9zTo+:387ZM8N8p1riHFCl6+DuO9zk+
TLSH
T1D79218929BFC5145FAB71FB0BA79D8126C3E7A976D20D16D4246C64E08A33818B3173E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

2e:c3:ff:02:7c:38:d8:63:e7:8a:a0:f1:76:a5:57:50:a7:47:ce:5e:d2:6e:74:f8:86:eb:59:df:d8:6c:17:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e5:8f:6a:c0:f3:3d:b4:0b:a3:00:01:00:00:01:e5

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16266

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn3.11/cs/zh-Hans/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0b3638d42ae643785ef9f964e425e0405200111a228c1d357a641d9e623ba0e3
MD5 d326303dc5125035e983fb04515fc04d
SHA1 d741f87381ded9f68ca768a057626ed0338e15c6
SHA512 a39c8ad6bf348b1eba548767a2fd7ff231d2193ae0f58e4ad6d6f16b41c1c808a2e450ef65d6cd5f163f76df24554368d9d3a5d9f951e1bc3112387f393d4c30
SSDEEP 384:XzHIlsPd8n8Nz3lW+UWAYA6VFHRN78AA49R9zBK:slsPd8n8p3raFCl8/69z4
TLSH
T11392F65297FC5146F9B76EB0A779D4436D3E7EA26E10C12E0689E59D08A2344CF30B3B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

33:97:74:74:76:9b:9f:0c:80:27:ac:bc:0c:09:9d:8d:eb:61:3a:5d:9d:99:d6:2c:8b:f1:95:ee:de:ec:47:ac

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:86DF-4BBC-9335,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dd:5d:57:1d:95:d4:ad:aa:1b:00:01:00:00:01:dd

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

15710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn3.11/cs/zh-Hant/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ede47910bfc5950c4c98b37e8822f50bd1c271b1878f61685ae2b15d7c8e3820
MD5 8a7cc8da2c2bd4829b21415f6dc44a54
SHA1 820a30f000664cac08c7667479101fba9253da4e
SHA512 2710938557b82bc508b84809db725e454d270ef8dc587c7e95f1a39d1e6ed302ae5fb5bb2c3fe135e75ce217c5e9c80e4e4829e67e32bbd86eb9f09d3abaeb49
SSDEEP 384:mHIfPB/L8J8GaOpLKW+UW5YA6VFHRN7GR9zgBG/:RfPB/L8J8GaOpGjFCl69zqG/
TLSH
T124920856A7F85116F9B72E706B39E443AC3E3E966D11C62E0689E54D0973380CF3172E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

9f:47:8c:cb:f7:ba:0f:c5:e4:df:e7:53:1c:26:9f:aa:d8:f3:4f:75:51:ad:49:e3:ea:93:a5:71:76:b5:50:39

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dc:c1:e0:8c:c2:5f:58:5e:8e:00:01:00:00:01:dc

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

15662

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.0/cs/System.Text.Json.SourceGeneration.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a50826b14c66214bd8e10a04cebb62dd91001556d199b9c313fe73ff5cc30c10
MD5 da253f1098dafc41f0158945bf2999de
SHA1 3b81e14c43990f706d55ba92ad4a6c6bce75edfd
SHA512 2b9a077475cb06c26d58478b7794f99ecc48a44b13c18979e50525bf78d8cdcac7b249c094ad00b72ba258b64db0a49b4f8c714bdaea97322cc2844790c901e1
SSDEEP 6144:37gyr+dFjBaMrG2zWwPnm8d8jKS9HFmY1oCDwthGAMXVdQcbJ4zUaYKJs/XL:37oWkpzPCXL
TLSH
T1E214E52177FC5B19F6FF1F38F43894614AB6BD29E822D3AD1A44259E01A33408A61F77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

a7:09:db:d2:a5:b3:07:b2:86:ed:9b:25:00:f1:8b:a7:62:77:f7:fa:ec:71:83:f1:8a:07:ac:12:39:23:bc:70

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:E002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:ee:05:d3:02:30:b2:9a:9d:a7:00:01:00:00:01:ee

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

197502

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Text.Json.SourceGeneration.Roslyn4.0/Release/netstandard2.0/System.Text.Json.SourceGeneration.pdb

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.0/cs/cs/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e7b6ba79e6064f2bafeb0cd107769f1f39b236a2f03294fef9e91738646903ec
MD5 cd0740333c5dbe4ee83b5681439e918b
SHA1 369e788b1eccb232aab01e17fd1a08ccf233be3b
SHA512 737c949681d805f729155fa03b76a843f51b412c93811a0286f741816cb51944b127a43b7d93ced089b3616c672d75e2e50e2975bf855cdb81f9518b0d757529
SSDEEP 384:yHInJ7P8L8GabzBMkhcW+UWJYA6VFHRN7CMqHR9z9o/F:FnJ7P8L8GMzBBIzFClno9z2/F
TLSH
T1B892F962A7F95106FDFB1EB0B638E4422D3E7B926D11C52E0649E68D04B37949F3073A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

3d:50:ed:f9:a1:6b:f7:fe:71:7f:d2:d0:04:2d:3d:c6:9d:99:f0:15:5e:1a:7f:95:6b:46:7a:3d:9b:20:90:27

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:de:9e:48:9e:96:9f:28:44:3d:00:01:00:00:01:de

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.0/cs/de/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 67cb967cda43084e4381880f836530fe86b531fc1141585d55170ab4466b25c4
MD5 81094e098d5366dc36440c4e93bb82fe
SHA1 ea57192a2afc979d8557f088b21a37b0ad2c34af
SHA512 b36d0cc5cd94f10280214fa951cb8f686a7b85a25393d7e89de68cbcbfc4edf34bd62950275140644ad91cc150dc3491e422fa038013327b809f13f0985aef66
SSDEEP 384:FHI/Ny1m8x8+wWW+UWoX6HRN7PvHR9z9ik:W/Ny1m8x8kuWPJ9zYk
TLSH
T1DDA2F711ABF92106FABB6E707A78D4532D3EBA936D11D11E0249D59D08A3B91CF3033B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

1b:6e:87:62:74:71:00:38:33:59:ea:71:7c:26:90:ed:0e:ed:a1:85:44:32:46:a0:ba:16:d8:aa:bd:5a:db:aa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:de:9e:48:9e:96:9f:28:44:3d:00:01:00:00:01:de

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16394

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.0/cs/es/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 33641049bb6e3ed5d38a53653b3c12fcd22550e8432dff13e333b7f1879410f3
MD5 4fcd9d21b6f728f6677c55dd9a7f830a
SHA1 b6f83bb8b6aa10d98d2e5422a97cdd3fa2aa9ef7
SHA512 bee84e059979393dc50be02c522f46de28651b387af245a24b309e356f7090e69a6fc80df58659830c75e4bb15e3ff1e29abf031e36fe20193b3b98f1fff23d1
SSDEEP 384:1HIzJ2t8y8NbHW+UWaYA6VFHRN7ltHNsAR9zNW:GzJ2t8y8PIFClLts89z4
TLSH
T190921952A7FC1252F8B72E70AA7AD8076D3E7A92BD10C16E0589D54D08A2784CF3177F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

e5:42:57:2b:cf:32:6a:f1:a5:b3:06:58:69:bf:69:08:c2:06:68:36:4f:fa:cf:26:f1:91:45:16:9c:d6:30:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e2:99:99:95:f1:dc:e3:20:eb:00:01:00:00:01:e2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.0/cs/fr/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 04f34a7aa338e3f1bd57d0071ff7c6c272a52f342a768e3b5d59e55c508e195b
MD5 50c1cfec2ecbf0ee758800dc5f5e0321
SHA1 e33963ac46e76a026713519b82184fed0b7bc4a7
SHA512 bcb5c6664779083eeecd641ff5c126bc242e8094fd78ea3af0c0fec20d657d26b3a4913a280b943cbe91790511f76437becb12451f6b28adc33fcae10736ffaa
SSDEEP 384:cHIe7BP8B8ptCh7WctPOoayWW+UWcYA6VFHRN7XpYBmo8R9zBYsO7Xt:He7BP8B8ptCh7WcRJd2iFCl5+moQ9zFm
TLSH
T1A8A2095797F86142F9F71E70BA39D8035C3E7A92AE00D96E0689D94D05B3384CB31B7A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

8e:cb:41:52:52:52:e8:e1:cb:46:a4:b1:cd:74:f5:af:db:87:7a:0b:3f:6c:18:a3:3f:23:62:a6:35:fd:85:f1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:179E-4BB0-8246,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e0:d4:fc:1f:13:15:1f:7e:5d:00:01:00:00:01:e0

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16442

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.0/cs/it/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ff98099da166fde3ff2f50d72bd90e093d799f3931074920831b421551ef709a
MD5 06d8556e718539c4dffb30988cef66a8
SHA1 fea020e99bca53b3761968b6761cf8df47f4c8ea
SHA512 62a76dfa5842b5b949713983b2872032bcdc40e987eeab3d19d23ac8768fad0e3fdf8d0e5f812daa3d7e66c91cdf819f1e254763ab848e0dab3b9c092adf37de
SSDEEP 384:RHI3Gq38u8km+YjU4xuQTcJW+UWoRYA6VFHRN7TZR9zgJO8:K3Gq38u8L+YjUyuQT0aFClTT9zQO8
TLSH
T13B921863A7F85112FCB71E30AA3AE803AD3A7996AE10D26E0185D54D14A3784DF3473F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

07:ce:15:a9:1f:fa:8c:40:e1:68:6d:b8:92:65:4c:33:54:b1:51:02:e5:27:b1:f3:99:3f:26:86:79:d3:38:8e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dc:c1:e0:8c:c2:5f:58:5e:8e:00:01:00:00:01:dc

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16242

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.0/cs/ja/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d4e9eec839167e5bf652cf79cfd23dacab6c87a9bb00c1a03d945be53c52ce7c
MD5 72b3ee41c590f6d41f221427a4031605
SHA1 b099c4738a6e0c2f1e2b693a0df335b5e1ed76e4
SHA512 dba164edf1c07579c9113fccaa516564c35eb00b453b7ebcf7b5f813ac7bad87afa2e5db7b4162d99e5c86fc91233b759be5a93ec6d3bdcdc5f1b6eddf1e0ee3
SSDEEP 384:8HINeKA898aCL4W+UWxYA6VFHRN7eR9zgiolY:nNeKA898ayUHFClC9zolY
TLSH
T181A2E66EA7F91116FDB36E702A7DD0826D3A7D97EC11E23E010DD55D18A2788CA3073A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

4e:a4:29:54:a0:f5:91:c8:09:1b:a2:78:c4:db:14:0b:2f:c4:57:cf:34:38:1c:b1:9d:fd:4f:7e:35:25:31:94

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dc:c1:e0:8c:c2:5f:58:5e:8e:00:01:00:00:01:dc

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

17194

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.0/cs/ko/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f572b11f923a3dec139656b8dbaf1cc84aa7899b13240da4045771b0ac381865
MD5 b19bc5d0b0b6225fc3d3ea3d6198acfa
SHA1 1bfd8f9e120c939f8d0c047612a79e58243b2a54
SHA512 62562facd3077409f76e3c57d2705a13839cd59b5d1e91af2954b140db4e02b65ea9574f5c35d47522e012c8e3829069b8c71c1d7268d18e46b997a377c0fba8
SSDEEP 384:FHIfyf4Q8/8LyZcP7etW+UWyYA6VFHRN7dR9zgk:Wfyf78/8uZcP7ezUFClf9zl
TLSH
T1EFA20892A7F91205FDB76E706A78E442197AB9966E12C12D4985CC4D0CB2B80CF31B3F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

34:63:88:70:65:3f:f8:45:b9:08:3e:ca:c8:5a:33:74:db:5f:81:9e:60:e2:04:cf:27:39:4a:ad:e2:1c:ab:97

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dc:c1:e0:8c:c2:5f:58:5e:8e:00:01:00:00:01:dc

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.0/cs/pl/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a44f533d685c9183b6a32505d9b4937afb7460cf8c6c8c89e9ff98704df11cc3
MD5 319d1af2557fe48c4b8cc373f0e9b98f
SHA1 ba6519a224312638e62d4ef09c7e0288951d74ed
SHA512 f4a91b39de3520790aad5cdd64dc5cd36ac16e2f114b3e194c84961b5ed99a4070623b43110ed5b4cb06b560fc1a2d4c71b775508450185879e83dd59bf0bdde
SSDEEP 384:GHIFVmH838kxFdRoqW+UWLX6HRN7YlHR9z9z:xFVmH838uBWYf9zt
TLSH
T1DEA2095267F95102F9F75E70AAB9D9422C3E3A966D10C56E014AE98D19F2380DF3073F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

ae:24:d4:c0:9c:b4:56:be:49:cc:32:f2:08:27:1b:ba:42:fb:78:d0:d7:b8:d2:b8:d4:22:38:21:6e:68:ed:d8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:de:9e:48:9e:96:9f:28:44:3d:00:01:00:00:01:de

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16522

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.0/cs/pt-BR/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 59299cabfd661c369c1cd2ea2f0f62627cc716e9f4851417f2bc2f5eb9532563
MD5 c5ed09675dff71d99c0a4ce0ca125721
SHA1 8ff5906fe7771e20eec19c9ea63ff0d9a0a6401f
SHA512 d7914c316ed715ae2b4bf1c9446f5f380dd6d0110d159eff00a39b1052dce1f0aa3f50f8b62d8c3a2bf7de5446bc3460d231ac8c699a105332fe1a5401c1d484
SSDEEP 384:xHI9fut8s88Ep6W+UW6X6HRN7pQkk6R9z05:q9fut8s88EpKEWpQkk29zu
TLSH
T1C292086667F91212F9B71B70BA39D9032D3D7A56AD10C66E0189EA4D04B3784CF3173E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

68:74:49:a7:e1:20:3f:38:4b:4d:8c:52:26:1e:2a:ab:23:ba:bc:ef:af:8e:10:f2:e5:20:fb:c1:c5:2e:fc:4b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e3:df:bd:9b:9a:1c:68:83:22:00:01:00:00:01:e3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.0/cs/ru/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 777c525b26d90a8cf787141f1bc134065adb314eae16d95f531c12728b7003c7
MD5 0bdd4b230adb6fa75904f25682e43a5b
SHA1 b36a4cbd3bbe9414837dad1a52b29660d5015044
SHA512 7b36a3de33eccd94f382b406ce1514a201a576dea3a63ac63c56f4ab930825dee01097789b9c5cc74892cfd702ce819614be86e97513e2becf40f56a07bf76b6
SSDEEP 384:8HIgSZ0L8V8yiinNhFgxCn+BZQ8W+UWjYA6VFHRN7gmUntHNsAR9zNpP:ngSZ0L8V85inNhFgxCn+BZQoZFClUttb
TLSH
T1E1A2B45256FD514AE5A27931EA38E9063C3E79FE2F15C32E0144BA9E18F2354CB3472E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

37:32:5e:46:02:a1:42:1e:da:07:9e:da:57:b2:3e:2f:9c:12:2b:61:b8:40:3c:21:a1:98:eb:58:24:19:dc:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e2:99:99:95:f1:dc:e3:20:eb:00:01:00:00:01:e2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

18362

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.0/cs/tr/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2d81712b282cf91537c10c6159d49334c4ffac17585f133b4887460fce69db1d
MD5 7d2c7fed92514813c8c733d1152d6998
SHA1 89a2e9c5360cae0f359ae8f6681a57b0e312ed00
SHA512 8c549fd57c129e6fee181cb4ccd5068256b34640be8bfd413a95e4cdc47721234ca180ed3923c170a52089dc188faa6c71b4f363876ae8d4ce212f2a1bfed1b9
SSDEEP 384:MHI87ZM8N8pAbLKrSW+UWVYA6VFHRN76w3DX+iR9zTo+:387ZM8N8p1riHFCl6+DuO9zk+
TLSH
T1D79218929BFC5145FAB71FB0BA79D8126C3E7A976D20D16D4246C64E08A33818B3173E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

2e:c3:ff:02:7c:38:d8:63:e7:8a:a0:f1:76:a5:57:50:a7:47:ce:5e:d2:6e:74:f8:86:eb:59:df:d8:6c:17:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e5:8f:6a:c0:f3:3d:b4:0b:a3:00:01:00:00:01:e5

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16266

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.0/cs/zh-Hans/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0b3638d42ae643785ef9f964e425e0405200111a228c1d357a641d9e623ba0e3
MD5 d326303dc5125035e983fb04515fc04d
SHA1 d741f87381ded9f68ca768a057626ed0338e15c6
SHA512 a39c8ad6bf348b1eba548767a2fd7ff231d2193ae0f58e4ad6d6f16b41c1c808a2e450ef65d6cd5f163f76df24554368d9d3a5d9f951e1bc3112387f393d4c30
SSDEEP 384:XzHIlsPd8n8Nz3lW+UWAYA6VFHRN78AA49R9zBK:slsPd8n8p3raFCl8/69z4
TLSH
T11392F65297FC5146F9B76EB0A779D4436D3E7EA26E10C12E0689E59D08A2344CF30B3B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

33:97:74:74:76:9b:9f:0c:80:27:ac:bc:0c:09:9d:8d:eb:61:3a:5d:9d:99:d6:2c:8b:f1:95:ee:de:ec:47:ac

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:86DF-4BBC-9335,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dd:5d:57:1d:95:d4:ad:aa:1b:00:01:00:00:01:dd

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

15710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.0/cs/zh-Hant/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ede47910bfc5950c4c98b37e8822f50bd1c271b1878f61685ae2b15d7c8e3820
MD5 8a7cc8da2c2bd4829b21415f6dc44a54
SHA1 820a30f000664cac08c7667479101fba9253da4e
SHA512 2710938557b82bc508b84809db725e454d270ef8dc587c7e95f1a39d1e6ed302ae5fb5bb2c3fe135e75ce217c5e9c80e4e4829e67e32bbd86eb9f09d3abaeb49
SSDEEP 384:mHIfPB/L8J8GaOpLKW+UW5YA6VFHRN7GR9zgBG/:RfPB/L8J8GaOpGjFCl69zqG/
TLSH
T124920856A7F85116F9B72E706B39E443AC3E3E966D11C62E0689E54D0973380CF3172E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

9f:47:8c:cb:f7:ba:0f:c5:e4:df:e7:53:1c:26:9f:aa:d8:f3:4f:75:51:ad:49:e3:ea:93:a5:71:76:b5:50:39

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dc:c1:e0:8c:c2:5f:58:5e:8e:00:01:00:00:01:dc

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

15662

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.4/cs/System.Text.Json.SourceGeneration.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fc60ca026e7a3ece0ba829d1e39dd145d570352c82f4b8a3d76a1a22ca5d457a
MD5 ab26f5f17b04246d5bdc07c8f77fb45c
SHA1 78b2834ad06b83d78f58bbef065ce22b25de4856
SHA512 e403e47a2e290f355911c28cde7d44aeeaf3c56402e91a600ff8af584ac7e848f796a8756bf0420b8bd03da8697a177e50836d63af05f8a64f04e04ae4947a2a
SSDEEP 3072:9eKOdNccnfkSohNOWP+fGnJ6XVddcbplS2NZ4z1GVS3i5bKJsmdk4:5hNOK+fXXVddcbJ4zIT5bKJs+P
TLSH
T16C04B22277F81719F6FF1B34E83998514AB77D1AB831C3AC1A04749E51A3380DA21BB7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

e6:65:e0:9f:26:96:48:55:ce:9f:84:a0:8f:86:ff:54:82:78:eb:85:95:86:f0:a9:06:f0:17:c0:c0:c3:90:49

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:179E-4BB0-8246,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e0:d4:fc:1f:13:15:1f:7e:5d:00:01:00:00:01:e0

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

182322

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Text.Json.SourceGeneration.Roslyn4.4/Release/netstandard2.0/System.Text.Json.SourceGeneration.pdb

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.4/cs/cs/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e7b6ba79e6064f2bafeb0cd107769f1f39b236a2f03294fef9e91738646903ec
MD5 cd0740333c5dbe4ee83b5681439e918b
SHA1 369e788b1eccb232aab01e17fd1a08ccf233be3b
SHA512 737c949681d805f729155fa03b76a843f51b412c93811a0286f741816cb51944b127a43b7d93ced089b3616c672d75e2e50e2975bf855cdb81f9518b0d757529
SSDEEP 384:yHInJ7P8L8GabzBMkhcW+UWJYA6VFHRN7CMqHR9z9o/F:FnJ7P8L8GMzBBIzFClno9z2/F
TLSH
T1B892F962A7F95106FDFB1EB0B638E4422D3E7B926D11C52E0649E68D04B37949F3073A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

3d:50:ed:f9:a1:6b:f7:fe:71:7f:d2:d0:04:2d:3d:c6:9d:99:f0:15:5e:1a:7f:95:6b:46:7a:3d:9b:20:90:27

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:de:9e:48:9e:96:9f:28:44:3d:00:01:00:00:01:de

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.4/cs/de/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 67cb967cda43084e4381880f836530fe86b531fc1141585d55170ab4466b25c4
MD5 81094e098d5366dc36440c4e93bb82fe
SHA1 ea57192a2afc979d8557f088b21a37b0ad2c34af
SHA512 b36d0cc5cd94f10280214fa951cb8f686a7b85a25393d7e89de68cbcbfc4edf34bd62950275140644ad91cc150dc3491e422fa038013327b809f13f0985aef66
SSDEEP 384:FHI/Ny1m8x8+wWW+UWoX6HRN7PvHR9z9ik:W/Ny1m8x8kuWPJ9zYk
TLSH
T1DDA2F711ABF92106FABB6E707A78D4532D3EBA936D11D11E0249D59D08A3B91CF3033B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

1b:6e:87:62:74:71:00:38:33:59:ea:71:7c:26:90:ed:0e:ed:a1:85:44:32:46:a0:ba:16:d8:aa:bd:5a:db:aa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:de:9e:48:9e:96:9f:28:44:3d:00:01:00:00:01:de

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16394

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.4/cs/es/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 33641049bb6e3ed5d38a53653b3c12fcd22550e8432dff13e333b7f1879410f3
MD5 4fcd9d21b6f728f6677c55dd9a7f830a
SHA1 b6f83bb8b6aa10d98d2e5422a97cdd3fa2aa9ef7
SHA512 bee84e059979393dc50be02c522f46de28651b387af245a24b309e356f7090e69a6fc80df58659830c75e4bb15e3ff1e29abf031e36fe20193b3b98f1fff23d1
SSDEEP 384:1HIzJ2t8y8NbHW+UWaYA6VFHRN7ltHNsAR9zNW:GzJ2t8y8PIFClLts89z4
TLSH
T190921952A7FC1252F8B72E70AA7AD8076D3E7A92BD10C16E0589D54D08A2784CF3177F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

e5:42:57:2b:cf:32:6a:f1:a5:b3:06:58:69:bf:69:08:c2:06:68:36:4f:fa:cf:26:f1:91:45:16:9c:d6:30:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e2:99:99:95:f1:dc:e3:20:eb:00:01:00:00:01:e2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16150

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.4/cs/fr/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 04f34a7aa338e3f1bd57d0071ff7c6c272a52f342a768e3b5d59e55c508e195b
MD5 50c1cfec2ecbf0ee758800dc5f5e0321
SHA1 e33963ac46e76a026713519b82184fed0b7bc4a7
SHA512 bcb5c6664779083eeecd641ff5c126bc242e8094fd78ea3af0c0fec20d657d26b3a4913a280b943cbe91790511f76437becb12451f6b28adc33fcae10736ffaa
SSDEEP 384:cHIe7BP8B8ptCh7WctPOoayWW+UWcYA6VFHRN7XpYBmo8R9zBYsO7Xt:He7BP8B8ptCh7WcRJd2iFCl5+moQ9zFm
TLSH
T1A8A2095797F86142F9F71E70BA39D8035C3E7A92AE00D96E0689D94D05B3384CB31B7A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

8e:cb:41:52:52:52:e8:e1:cb:46:a4:b1:cd:74:f5:af:db:87:7a:0b:3f:6c:18:a3:3f:23:62:a6:35:fd:85:f1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:179E-4BB0-8246,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e0:d4:fc:1f:13:15:1f:7e:5d:00:01:00:00:01:e0

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16442

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.4/cs/it/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ff98099da166fde3ff2f50d72bd90e093d799f3931074920831b421551ef709a
MD5 06d8556e718539c4dffb30988cef66a8
SHA1 fea020e99bca53b3761968b6761cf8df47f4c8ea
SHA512 62a76dfa5842b5b949713983b2872032bcdc40e987eeab3d19d23ac8768fad0e3fdf8d0e5f812daa3d7e66c91cdf819f1e254763ab848e0dab3b9c092adf37de
SSDEEP 384:RHI3Gq38u8km+YjU4xuQTcJW+UWoRYA6VFHRN7TZR9zgJO8:K3Gq38u8L+YjUyuQT0aFClTT9zQO8
TLSH
T13B921863A7F85112FCB71E30AA3AE803AD3A7996AE10D26E0185D54D14A3784DF3473F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

07:ce:15:a9:1f:fa:8c:40:e1:68:6d:b8:92:65:4c:33:54:b1:51:02:e5:27:b1:f3:99:3f:26:86:79:d3:38:8e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dc:c1:e0:8c:c2:5f:58:5e:8e:00:01:00:00:01:dc

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16242

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.4/cs/ja/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d4e9eec839167e5bf652cf79cfd23dacab6c87a9bb00c1a03d945be53c52ce7c
MD5 72b3ee41c590f6d41f221427a4031605
SHA1 b099c4738a6e0c2f1e2b693a0df335b5e1ed76e4
SHA512 dba164edf1c07579c9113fccaa516564c35eb00b453b7ebcf7b5f813ac7bad87afa2e5db7b4162d99e5c86fc91233b759be5a93ec6d3bdcdc5f1b6eddf1e0ee3
SSDEEP 384:8HINeKA898aCL4W+UWxYA6VFHRN7eR9zgiolY:nNeKA898ayUHFClC9zolY
TLSH
T181A2E66EA7F91116FDB36E702A7DD0826D3A7D97EC11E23E010DD55D18A2788CA3073A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

4e:a4:29:54:a0:f5:91:c8:09:1b:a2:78:c4:db:14:0b:2f:c4:57:cf:34:38:1c:b1:9d:fd:4f:7e:35:25:31:94

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dc:c1:e0:8c:c2:5f:58:5e:8e:00:01:00:00:01:dc

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

17194

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.4/cs/ko/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f572b11f923a3dec139656b8dbaf1cc84aa7899b13240da4045771b0ac381865
MD5 b19bc5d0b0b6225fc3d3ea3d6198acfa
SHA1 1bfd8f9e120c939f8d0c047612a79e58243b2a54
SHA512 62562facd3077409f76e3c57d2705a13839cd59b5d1e91af2954b140db4e02b65ea9574f5c35d47522e012c8e3829069b8c71c1d7268d18e46b997a377c0fba8
SSDEEP 384:FHIfyf4Q8/8LyZcP7etW+UWyYA6VFHRN7dR9zgk:Wfyf78/8uZcP7ezUFClf9zl
TLSH
T1EFA20892A7F91205FDB76E706A78E442197AB9966E12C12D4985CC4D0CB2B80CF31B3F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

34:63:88:70:65:3f:f8:45:b9:08:3e:ca:c8:5a:33:74:db:5f:81:9e:60:e2:04:cf:27:39:4a:ad:e2:1c:ab:97

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dc:c1:e0:8c:c2:5f:58:5e:8e:00:01:00:00:01:dc

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.4/cs/pl/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 a44f533d685c9183b6a32505d9b4937afb7460cf8c6c8c89e9ff98704df11cc3
MD5 319d1af2557fe48c4b8cc373f0e9b98f
SHA1 ba6519a224312638e62d4ef09c7e0288951d74ed
SHA512 f4a91b39de3520790aad5cdd64dc5cd36ac16e2f114b3e194c84961b5ed99a4070623b43110ed5b4cb06b560fc1a2d4c71b775508450185879e83dd59bf0bdde
SSDEEP 384:GHIFVmH838kxFdRoqW+UWLX6HRN7YlHR9z9z:xFVmH838uBWYf9zt
TLSH
T1DEA2095267F95102F9F75E70AAB9D9422C3E3A966D10C56E014AE98D19F2380DF3073F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

ae:24:d4:c0:9c:b4:56:be:49:cc:32:f2:08:27:1b:ba:42:fb:78:d0:d7:b8:d2:b8:d4:22:38:21:6e:68:ed:d8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:de:9e:48:9e:96:9f:28:44:3d:00:01:00:00:01:de

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16522

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.4/cs/pt-BR/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 59299cabfd661c369c1cd2ea2f0f62627cc716e9f4851417f2bc2f5eb9532563
MD5 c5ed09675dff71d99c0a4ce0ca125721
SHA1 8ff5906fe7771e20eec19c9ea63ff0d9a0a6401f
SHA512 d7914c316ed715ae2b4bf1c9446f5f380dd6d0110d159eff00a39b1052dce1f0aa3f50f8b62d8c3a2bf7de5446bc3460d231ac8c699a105332fe1a5401c1d484
SSDEEP 384:xHI9fut8s88Ep6W+UW6X6HRN7pQkk6R9z05:q9fut8s88EpKEWpQkk29zu
TLSH
T1C292086667F91212F9B71B70BA39D9032D3D7A56AD10C66E0189EA4D04B3784CF3173E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

68:74:49:a7:e1:20:3f:38:4b:4d:8c:52:26:1e:2a:ab:23:ba:bc:ef:af:8e:10:f2:e5:20:fb:c1:c5:2e:fc:4b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e3:df:bd:9b:9a:1c:68:83:22:00:01:00:00:01:e3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.4/cs/ru/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 777c525b26d90a8cf787141f1bc134065adb314eae16d95f531c12728b7003c7
MD5 0bdd4b230adb6fa75904f25682e43a5b
SHA1 b36a4cbd3bbe9414837dad1a52b29660d5015044
SHA512 7b36a3de33eccd94f382b406ce1514a201a576dea3a63ac63c56f4ab930825dee01097789b9c5cc74892cfd702ce819614be86e97513e2becf40f56a07bf76b6
SSDEEP 384:8HIgSZ0L8V8yiinNhFgxCn+BZQ8W+UWjYA6VFHRN7gmUntHNsAR9zNpP:ngSZ0L8V85inNhFgxCn+BZQoZFClUttb
TLSH
T1E1A2B45256FD514AE5A27931EA38E9063C3E79FE2F15C32E0144BA9E18F2354CB3472E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

37:32:5e:46:02:a1:42:1e:da:07:9e:da:57:b2:3e:2f:9c:12:2b:61:b8:40:3c:21:a1:98:eb:58:24:19:dc:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e2:99:99:95:f1:dc:e3:20:eb:00:01:00:00:01:e2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

18362

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.4/cs/tr/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2d81712b282cf91537c10c6159d49334c4ffac17585f133b4887460fce69db1d
MD5 7d2c7fed92514813c8c733d1152d6998
SHA1 89a2e9c5360cae0f359ae8f6681a57b0e312ed00
SHA512 8c549fd57c129e6fee181cb4ccd5068256b34640be8bfd413a95e4cdc47721234ca180ed3923c170a52089dc188faa6c71b4f363876ae8d4ce212f2a1bfed1b9
SSDEEP 384:MHI87ZM8N8pAbLKrSW+UWVYA6VFHRN76w3DX+iR9zTo+:387ZM8N8p1riHFCl6+DuO9zk+
TLSH
T1D79218929BFC5145FAB71FB0BA79D8126C3E7A976D20D16D4246C64E08A33818B3173E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

2e:c3:ff:02:7c:38:d8:63:e7:8a:a0:f1:76:a5:57:50:a7:47:ce:5e:d2:6e:74:f8:86:eb:59:df:d8:6c:17:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:e5:8f:6a:c0:f3:3d:b4:0b:a3:00:01:00:00:01:e5

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

16266

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.4/cs/zh-Hans/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0b3638d42ae643785ef9f964e425e0405200111a228c1d357a641d9e623ba0e3
MD5 d326303dc5125035e983fb04515fc04d
SHA1 d741f87381ded9f68ca768a057626ed0338e15c6
SHA512 a39c8ad6bf348b1eba548767a2fd7ff231d2193ae0f58e4ad6d6f16b41c1c808a2e450ef65d6cd5f163f76df24554368d9d3a5d9f951e1bc3112387f393d4c30
SSDEEP 384:XzHIlsPd8n8Nz3lW+UWAYA6VFHRN78AA49R9zBK:slsPd8n8p3raFCl8/69z4
TLSH
T11392F65297FC5146F9B76EB0A779D4436D3E7EA26E10C12E0689E59D08A2344CF30B3B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

33:97:74:74:76:9b:9f:0c:80:27:ac:bc:0c:09:9d:8d:eb:61:3a:5d:9d:99:d6:2c:8b:f1:95:ee:de:ec:47:ac

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:86DF-4BBC-9335,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dd:5d:57:1d:95:d4:ad:aa:1b:00:01:00:00:01:dd

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

15710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/analyzers/dotnet/roslyn4.4/cs/zh-Hant/System.Text.Json.SourceGeneration.resources.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ede47910bfc5950c4c98b37e8822f50bd1c271b1878f61685ae2b15d7c8e3820
MD5 8a7cc8da2c2bd4829b21415f6dc44a54
SHA1 820a30f000664cac08c7667479101fba9253da4e
SHA512 2710938557b82bc508b84809db725e454d270ef8dc587c7e95f1a39d1e6ed302ae5fb5bb2c3fe135e75ce217c5e9c80e4e4829e67e32bbd86eb9f09d3abaeb49
SSDEEP 384:mHIfPB/L8J8GaOpLKW+UW5YA6VFHRN7GR9zgBG/:RfPB/L8J8GaOpGjFCl69zqG/
TLSH
T124920856A7F85116F9B72E706B39E443AC3E3E966D11C62E0689E54D0973380CF3172E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

9f:47:8c:cb:f7:ba:0f:c5:e4:df:e7:53:1c:26:9f:aa:d8:f3:4f:75:51:ad:49:e3:ea:93:a5:71:76:b5:50:39

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:dc:c1:e0:8c:c2:5f:58:5e:8e:00:01:00:00:01:dc

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 12, 2023 - Jan 10, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

15662

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Divulge-Stealer/packages/System.Text.Json.8.0.4/buildTransitive/net461/System.Text.Json.targets

SHA256 a9dbf69026819defcc97a258bef4b632577f5ba1be29e954791eae37362c90b7
MD5 fd7eab0eafa9fbec723ec763262d021c
SHA1 1c420e79f502439824e1ecea0d9c00dff6811234
SHA512 8e3f30809ae4d8044d84c1b7b0ae87981146464d401629a446b5c03c6912ca84b6c4e76f58ed966d4e856d756b75cb8890a60a4cdafdf98d9b8c8fde4cdbb503
TLSH
T14BF0023AB36027D0806410606A760912E37BD2DC638181D4B54CD3CD4732590CE7359B
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/buildTransitive/net462/System.Text.Json.targets

SHA256 1446b9f9ee3b49ee84abd7f1ed2dd4e3f38e11466fc84a48f54cc7f4f5b39ebe
MD5 cf74ac233176397b2da5eddf193d1ea7
SHA1 b1ad6341f88414fc1006a6332d83a7416848ed32
SHA512 318445e9c8338837e843922a0dd768fe3bb0d8f319b23bd0b2d41de6709f65b6828ef3f4e6e6f9f969db8cbad29c1c90d7140809158072bf7d690c018653e27a
TLSH
T166214820A182755480BCE12D5DA7CBA9C32182E7D641CC44FF8FE61B6FB3B461A3745A
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/buildTransitive/net6.0/System.Text.Json.targets

SHA256 1446b9f9ee3b49ee84abd7f1ed2dd4e3f38e11466fc84a48f54cc7f4f5b39ebe
MD5 cf74ac233176397b2da5eddf193d1ea7
SHA1 b1ad6341f88414fc1006a6332d83a7416848ed32
SHA512 318445e9c8338837e843922a0dd768fe3bb0d8f319b23bd0b2d41de6709f65b6828ef3f4e6e6f9f969db8cbad29c1c90d7140809158072bf7d690c018653e27a
TLSH
T166214820A182755480BCE12D5DA7CBA9C32182E7D641CC44FF8FE61B6FB3B461A3745A
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/buildTransitive/netcoreapp2.0/System.Text.Json.targets

SHA256 7017cc198fcd3679d1966e1478e88bed7bfd387a03fda758cf8217c98dcc6cd4
MD5 a287ec45de2bbcfeb2e316cefdc7952d
SHA1 d883d2a12a4cea4965bbbef2736dea9820cd17b0
SHA512 14e82e7a4e42e0abc266062b4e8dc59552da51c97b617d1c64e46448ab40bfbed2d1d393f0c550d33b00721c472da38cf1f9e57a5c457a684104d53e2c43a3cb
TLSH
T1C5F0022AB7A01B8040A814616A754913E37BD2D8239181D0B50CD3CD4732990CE7759B
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/buildTransitive/netstandard2.0/System.Text.Json.targets

SHA256 1446b9f9ee3b49ee84abd7f1ed2dd4e3f38e11466fc84a48f54cc7f4f5b39ebe
MD5 cf74ac233176397b2da5eddf193d1ea7
SHA1 b1ad6341f88414fc1006a6332d83a7416848ed32
SHA512 318445e9c8338837e843922a0dd768fe3bb0d8f319b23bd0b2d41de6709f65b6828ef3f4e6e6f9f969db8cbad29c1c90d7140809158072bf7d690c018653e27a
TLSH
T166214820A182755480BCE12D5DA7CBA9C32182E7D641CC44FF8FE61B6FB3B461A3745A
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/lib/net462/System.Text.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7eb217f0a0b9fe681de288511cb230708bb1c66e0c4a8553b9c0058632cfd20f
MD5 d88a6b04fdbc82c396db5a301e6bfdde
SHA1 d9201cfb07496f44ada3350f04c09cde5622ba4c
SHA512 64d4fd48c6f9adf2c9e19a858393416549bd17a7d61ba82c63fe28685f72af07edfba14e64e8885e877136c071ed5bcc95b6fd357e3d002a8b70f1d8dfe31497
SSDEEP 6144:9M/44zRvSmawz23Ou3wi4mUfimb7MVM8iHtoqurICVLeV+kctaX+byRcU8sxQiiR:2/Mm43GJObtYi5aJABj3fJVte1ReF8q
TLSH
T1C4D44B01A3E89B2BC99F4735B47602249BB5F82E6379E74B211458FD2C937D18C927F2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

2a:f5:53:51:45:6f:72:db:a1:74:7d:dc:bc:15:ad:ba:bc:17:9a:58:e3:21:5f:1d:a2:ac:dd:7c:ed:81:7c:b1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d2:da:19:16:5d:6d:c7:49:af:00:00:00:00:03:d2

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3703-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:ea:9a:24:72:d5:59:3f:61:63:00:01:00:00:01:ea

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

636882

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Text.Json/Release/net462/System.Text.Json.pdb

Divulge-Stealer/packages/System.Text.Json.8.0.4/lib/net462/System.Text.Json.xml

SHA256 2ce568cc3584f2c68e3037a4d2529e4467bf955d5b433790291e914d7a95366a
MD5 da51e86f5248eb112a9f02afa1d66138
SHA1 9b386a42dd46f398ca6ec103b9f40080668ccbda
SHA512 b3ddd23ea1bf411d643aebc955964474f0fbf0a176d3713e9c67f203795cf832ce25242d510554e6fcb273d913ef1f674456d1c1f3c295d957ff802fe2c8b45e
SSDEEP 6144:1Sb93UX5vMv9qJWxFqXjlovif6+zGUUloQQojxJ+ogSoCIM8tfKfR3v3JgP4aqKV:u9sXjl0iRtH
TLSH
T18EB4DE3477C8CE13049B022D0C5CF080BD36976396199CA776CC5CAA6BDAD62A3FB5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/lib/net6.0/System.Text.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 96fba7cca639a68ed756e051024decdf240655c3500f4bb9e6ccd9f9e04d545e
MD5 8c64c0c1b4b92a448e7afc1fb44e921b
SHA1 78688784bc6afcaffba6e5355369e54e2df28471
SHA512 7c1f4e7fab7ec4d4d901aedc246d71428ee2d4255d348ca9ce51752d7bac5505792ec453869efe561b4ba4dcbac6eaa80b170e31d1e167acf57d0ad939933e56
SSDEEP 6144:WZwj7MP93Q/tr0p6o+yNiFcBNlm2qgX2sXwlo0ArS5tzAtVmWQlEQf8Krt:W+O3Q/JLYa2qblo0WS5SVmWQlE8t
TLSH
T192C46D94B3EC9F2FC6CF4B36A07400198B79E526775AE79B145894F91C83BC09C826E7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

19:13:c7:3d:c1:4a:38:c2:d2:2b:16:f3:2b:e6:61:9c:4b:cc:54:d1:6a:dd:5e:13:2f:a3:c9:86:8a:c8:bf:33

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:eb:e0:18:6c:b5:b6:ef:38:ed:00:01:00:00:01:eb

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

573710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Text.Json\Release\net6.0\System.Text.Json.pdb

Divulge-Stealer/packages/System.Text.Json.8.0.4/lib/net6.0/System.Text.Json.xml

SHA256 2ce568cc3584f2c68e3037a4d2529e4467bf955d5b433790291e914d7a95366a
MD5 da51e86f5248eb112a9f02afa1d66138
SHA1 9b386a42dd46f398ca6ec103b9f40080668ccbda
SHA512 b3ddd23ea1bf411d643aebc955964474f0fbf0a176d3713e9c67f203795cf832ce25242d510554e6fcb273d913ef1f674456d1c1f3c295d957ff802fe2c8b45e
SSDEEP 6144:1Sb93UX5vMv9qJWxFqXjlovif6+zGUUloQQojxJ+ogSoCIM8tfKfR3v3JgP4aqKV:u9sXjl0iRtH
TLSH
T18EB4DE3477C8CE13049B022D0C5CF080BD36976396199CA776CC5CAA6BDAD62A3FB5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/lib/net7.0/System.Text.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 78cc1ac8f6696adcc41087d78ff9958e978785251b87051e0aecc011c750731a
MD5 09b2d67048fc168497b567db9bf11c0e
SHA1 c2b0390ea6f5cc56ccdce77dd690574a06d18ed2
SHA512 7bb06a2e162942f493169abcc48050d409181eda75e894656033becd2f831a0df0511d7eeebae4e567051f87e084c4fa4e770d106f6b41149c059786c6933604
SSDEEP 6144:2MfgRFrKFbIfxh1Q5i7oNBw6JYjV7O3fmt2o6pziH8ETCEVmMMlcCv+BCPDOqv:27MFbI+wuYjVaq2T5gVmMMlcAV
TLSH
T1CAC45C2473DC8E1BC6CF4736E07048298BF6E45B77A6D38B298056F91853BC89C552EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

c8:37:85:0b:40:3f:85:80:5d:17:1a:a2:ef:9c:fa:8f:e1:ed:b2:0d:a7:d8:76:fe:bb:04:71:4a:f8:91:7e:d1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f2:3e:32:d7:64:ac:70:91:94:00:01:00:00:01:f2

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

575502

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Text.Json\Release\net7.0\System.Text.Json.pdb

Divulge-Stealer/packages/System.Text.Json.8.0.4/lib/net7.0/System.Text.Json.xml

SHA256 2ce568cc3584f2c68e3037a4d2529e4467bf955d5b433790291e914d7a95366a
MD5 da51e86f5248eb112a9f02afa1d66138
SHA1 9b386a42dd46f398ca6ec103b9f40080668ccbda
SHA512 b3ddd23ea1bf411d643aebc955964474f0fbf0a176d3713e9c67f203795cf832ce25242d510554e6fcb273d913ef1f674456d1c1f3c295d957ff802fe2c8b45e
SSDEEP 6144:1Sb93UX5vMv9qJWxFqXjlovif6+zGUUloQQojxJ+ogSoCIM8tfKfR3v3JgP4aqKV:u9sXjl0iRtH
TLSH
T18EB4DE3477C8CE13049B022D0C5CF080BD36976396199CA776CC5CAA6BDAD62A3FB5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/lib/net8.0/System.Text.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3c63e708c75c253df68359850a631ae443d8bd5924df5d02d08bc9e751c4fdcb
MD5 430a31c81871435201a194263f811c3a
SHA1 979542f10779174121fb2eaaa04d159f3488f9a0
SHA512 c55e625777e129552c428b2e8968b086795396889eba8a606b785a44b1bb2c7e03b9ac5119a56cbf7ae42bc0d53fb9cbb15e959cf26aa6ee998e2a62f3880fda
SSDEEP 12288:/Hcax9LJKosJAb6GnnHXjcrVmGMErSVAJv:/px9dKkVTcmVAJv
TLSH
T168C45B10A3E85F2BD5CF4371E074512ACFB8F427A79AE38B541475F91892780DE826EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

85:3b:4f:32:3e:8f:cc:c3:06:c9:bd:9c:2f:91:96:9a:8a:8a:c4:a7:ab:fd:71:87:95:6f:1c:77:03:f1:9b:7c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:f1:b3:45:f5:27:e8:c0:16:d6:00:01:00:00:01:f1

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

573566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\artifacts\obj\System.Text.Json\Release\net8.0\System.Text.Json.pdb

Divulge-Stealer/packages/System.Text.Json.8.0.4/lib/net8.0/System.Text.Json.xml

SHA256 2ce568cc3584f2c68e3037a4d2529e4467bf955d5b433790291e914d7a95366a
MD5 da51e86f5248eb112a9f02afa1d66138
SHA1 9b386a42dd46f398ca6ec103b9f40080668ccbda
SHA512 b3ddd23ea1bf411d643aebc955964474f0fbf0a176d3713e9c67f203795cf832ce25242d510554e6fcb273d913ef1f674456d1c1f3c295d957ff802fe2c8b45e
SSDEEP 6144:1Sb93UX5vMv9qJWxFqXjlovif6+zGUUloQQojxJ+ogSoCIM8tfKfR3v3JgP4aqKV:u9sXjl0iRtH
TLSH
T18EB4DE3477C8CE13049B022D0C5CF080BD36976396199CA776CC5CAA6BDAD62A3FB5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Text.Json.8.0.4/lib/netstandard2.0/System.Text.Json.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 3c72ab0eb905aee982fa7dc86bd1f29e8a404263a8fb251b172833c87f6877a3
MD5 07fe1237294cea8e60eef80c5645593b
SHA1 13af4c2fdcb3c939f0e39192e6eeee1111cd2952
SHA512 c89f228ca6f932b981ad30fe03b30b0672e38ddfa1fa76ae34679975a8872ef0362d66d857d3acf3650759599d4214dcc28281e18892cb50f436673bd0ab45d4
SSDEEP 12288:LBmUxOwIx30c2jWnHvUY4H6ylVDb1Zhe9FZ/:txBIx3sR6X5/
TLSH
T1E5D44911F3E8AF1BD7EF1B30A03440149FB5F95A636AD74E404889FA1C92B929D167B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

33:64:45:b7:3a:3c:c3:6d:c2:9c:f2:67:31:95:43:e0:41:f5:03:12:9c:23:ac:50:9c:8f:4a:6d:0e:ff:b1:56

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 13, 2024

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:03:d3:76:69:dc:80:ec:01:a2:43:00:00:00:00:03:d3

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2024 - Feb 19, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9600-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:ef:89:3f:56:a1:58:cc:a8:da:00:01:00:00:01:ef

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 6, 2023 - Mar 5, 2025

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

4

Entry point

600662

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/_/artifacts/obj/System.Text.Json/Release/netstandard2.0/System.Text.Json.pdb

Divulge-Stealer/packages/System.Text.Json.8.0.4/lib/netstandard2.0/System.Text.Json.xml

SHA256 2ce568cc3584f2c68e3037a4d2529e4467bf955d5b433790291e914d7a95366a
MD5 da51e86f5248eb112a9f02afa1d66138
SHA1 9b386a42dd46f398ca6ec103b9f40080668ccbda
SHA512 b3ddd23ea1bf411d643aebc955964474f0fbf0a176d3713e9c67f203795cf832ce25242d510554e6fcb273d913ef1f674456d1c1f3c295d957ff802fe2c8b45e
SSDEEP 6144:1Sb93UX5vMv9qJWxFqXjlovif6+zGUUloQQojxJ+ogSoCIM8tfKfR3v3JgP4aqKV:u9sXjl0iRtH
TLSH
T18EB4DE3477C8CE13049B022D0C5CF080BD36976396199CA776CC5CAA6BDAD62A3FB5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Threading.Tasks.Extensions.4.5.4/.signature.p7s

SHA256 d689f2e5a2aaa8cfe3b56cfaf0611a5184ae9eef26c76b75c9c8ccd66f2f802b
MD5 24e4988f1583bb356fcb78c40ec70277
SHA1 2bbfd5a2cb80957c9f00ae4123c2fb2f54455bff
SHA512 e3f477bb4040a6a87b67cd6c2bbac3c6ec462f3ad43e0a3c5ddd82b2fc5dc77a8cafb79d1725c7a071bfea67e55ac1331889fa7d2a35c3a513f00e8f512d00a4
SSDEEP 384:UdCvDGrDGmvVpmdNGoJN77hhceJo4u2GoJN77hhzz:USDGrDG4I3hOqoLI3hlz
TLSH
T1968219E78E246C12FFC78E45B1D4D62B6E34B3956AD584D381BCC0829FC3B962A9C05D
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Threading.Tasks.Extensions.4.5.4/LICENSE.TXT

SHA256 d7a68596ab69b06f51ca278a6545148e4269a9381c26d597c13df5d88e08cf5b
MD5 ba2bed45d99b13d4c31485d0631ae675
SHA1 26c7c096ac257154020a07532c5edeba91ee97e0
SHA512 430f0a57ff6be9cb03316eb7312b70f5a2eb44175edacac242a9fd329257ae52c03de8add8a957cd3a336f99fd638eb89d8d3d1338525d5be21d8f4e22f86f97
TLSH
T15221C61E73560363186203614168ECC1F12BB14A3E6F0985306EF309132A018C6FF868
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.Threading.Tasks.Extensions.4.5.4/System.Threading.Tasks.Extensions.4.5.4.nupkg

SHA256 a304a963cc0796c5179f9c6b7d8022bbce3b2fa7c029eb6196f631f7b462d678
MD5 c0d8da76dfdc9159b0a47c36d099d4c3
SHA1 5ca708480099eeeace094f25df1b16614da2aac1
SHA512 68052086e77d3c7198737a3da163d67740b7c44f93250c39659b3bf21b6547a9abf64cbf40481f5c78f24361af3aaf47d52d188b371554a0928a7f7665c1fc14
SSDEEP 1536:24cZW008yQ106EoCgjwhUDQo1eDRyQ106EoCgC143hOY3hlW:24U3yM0SljwCQo1eyM0SlC1deW
TLSH
T14A93D1F98D2C6C01EFD78E3871C0C5669D3573967BE068A794BCC1864F9ABCA2B9401D
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Threading.Tasks.Extensions.4.5.4/THIRD-PARTY-NOTICES.TXT

SHA256 7864a01e2fdef7e8fdf81b906efb1466f083206affea7ba7e6dadea429754765
MD5 0bf833f1b32b1cdefbed5e860457d1dc
SHA1 91ea4bdac6268da316ff578ef4a4996052636ef2
SHA512 b022b1a2b0eb5001f49066ec1326567536e2bd92108b873c024824836a05d268e7727166bfa03073e564039ccfa1f5b3074c6c922f476b683dac19affc367963
SSDEEP 384:FU3qNdKkjHrEjsELvyv4a0rB2kSK5gDTYCYbWq/TbOy/rsUrsESOzYgArsErseSi:FU3qvKkjHwjsEuv4a0yK5gDc3aq/T//c
TLSH
T16062C65F7E4547B218E2C7917598E8C8F22FA02D7F6B2940346EE248237742D95FF498
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Threading.Tasks.Extensions.4.5.4/lib/net461/System.Threading.Tasks.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
MD5 e1e9d7d46e5cd9525c5927dc98d9ecc7
SHA1 2242627282f9e07e37b274ea36fac2d3cd9c9110
SHA512 da7ab8c0100e7d074f0e680b28d241940733860dfbdc5b8c78428b76e807f27e44d1c5ec95ee80c0b5098e8c5d5da4d48bce86800164f9734a05035220c3ff11
SSDEEP 384:1R973o62/KqcAnb05J3w0I5eUGef8s72XBWdvVW2JW8aJcyHRN7WEimpplex:1RZ4nNxnYTb6Blha
TLSH
T1C0C27D0987AC5567DFBB4F74A6A6D9069F30E7476E02F3291D8CF2E40C533892A6113A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:8A82-E34F-9DDA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:19:8c:bb:54:08:0a:5d:fe:65:00:00:00:00:01:19

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Feb 11, 2021

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

22234

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netfx\System.Threading.Tasks.Extensions.pdb

Divulge-Stealer/packages/System.Threading.Tasks.Extensions.4.5.4/lib/net461/System.Threading.Tasks.Extensions.xml

SHA256 975a9555f561b363c3e02fd533f6bf7083aa11bbc7cbf2b46c31df3d3696b97b
MD5 c89e735fcf37e76e4c3d7903d2111c04
SHA1 3c0f1f09c188d8c74b42041004ece59bbd6f0f56
SHA512 debdd8d0ed2ff6ad7b175acfeb1681b1a68eeedd6d717e20e6ac5e0d11c13a1219b4d60f9319939c63bf4b53456328531369f4a9fff5b201475858310e385007
SSDEEP 192:1/elWY3f207pbNcYDLna8MMOOXzHMfHuHoLob+OoMuJkfYSiffiWje0seJme0seM:1/2d207pbNc2na8MMOOXzHMfHQoLob+N
TLSH
T1E322AC283BCD5D521427011B8E1AF4C8FF55AB3B644D392974CE6C57EFAA84792BF820
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Threading.Tasks.Extensions.4.5.4/lib/netstandard1.0/System.Threading.Tasks.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bb890d79b384cd094eb6fdf992d51b4ed1a0666d29d49772f7685a3bcbc9e11c
MD5 831b113234e83af799b87eae5adbdcea
SHA1 4dde8d2e2ea991eed04a9668cd8bae58708a58ef
SHA512 ec172631408c782e6bdbcd1e3f480210f500e489f3ba05a69b032999690ec567c3e1a1e79b64154ad6bab338fdd6cebff65b768501b8a699e373e41361749d60
SSDEEP 384:HR9PERyZoGhjJAb05M3w0x5eUGefzYW72uBl0EMYTW2JW8aycyHRN7WELly0:HRFMy6GheYQbrbZhN
TLSH
T142C27D0987EC1267DFB74A79D6A7D906AF30E3465A02E3691D8CF3E00C0338A5A65239
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

07:e8:7b:ad:2d:ad:7d:34:00:f4:5f:75:b7:f6:2f:34:0f:97:1b:46:06:f2:73:96:a6:b7:f7:fc:58:9b:57:84

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:1e:0e:bc:e5:4b:16:a2:03:1b:00:00:00:00:01:1e

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Feb 11, 2021

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

22426

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netstandard1.0\System.Threading.Tasks.Extensions.pdb

Divulge-Stealer/packages/System.Threading.Tasks.Extensions.4.5.4/lib/netstandard1.0/System.Threading.Tasks.Extensions.xml

SHA256 975a9555f561b363c3e02fd533f6bf7083aa11bbc7cbf2b46c31df3d3696b97b
MD5 c89e735fcf37e76e4c3d7903d2111c04
SHA1 3c0f1f09c188d8c74b42041004ece59bbd6f0f56
SHA512 debdd8d0ed2ff6ad7b175acfeb1681b1a68eeedd6d717e20e6ac5e0d11c13a1219b4d60f9319939c63bf4b53456328531369f4a9fff5b201475858310e385007
SSDEEP 192:1/elWY3f207pbNcYDLna8MMOOXzHMfHuHoLob+OoMuJkfYSiffiWje0seJme0seM:1/2d207pbNc2na8MMOOXzHMfHQoLob+N
TLSH
T1E322AC283BCD5D521427011B8E1AF4C8FF55AB3B644D392974CE6C57EFAA84792BF820
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Threading.Tasks.Extensions.4.5.4/lib/netstandard2.0/System.Threading.Tasks.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 09901f63ebc4b8f0897b0128fb230c146529aee5c5cc90d7a7872e66a976bb5f
MD5 b2ed9123b13df49f4e271b6a485d56d1
SHA1 850849aa6723733e661f3bfe6da805f4657a2fcb
SHA512 a409e606b0faf2a029f90c4d23dfcd184118851f6ea3eb474bb550ffcbef10568c853ed9eec004712fd45befc0df220703266e36c717413d9695e80fd1412c80
SSDEEP 384:i2R9PE8XHrMzTGavb05Mlw065eUGef8t72tBfauW2JW8aAcyHRN7WEypt4JeRlwj:nRF1XAvGUYSbdEhzqgxj
TLSH
T197C25E0947AC2167DFFB5E7496B3D906AF34EB4A5902E3686A8CF2E40C533C65E2113D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

13:df:b4:83:9e:71:e8:4f:fd:50:eb:42:26:18:5c:1b:98:9b:a2:d1:29:9f:05:7a:14:f4:72:d9:9f:a5:ad:91

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3BBD-E338-E9A1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:1d:c2:c2:08:ae:3e:ba:ae:48:00:00:00:00:01:1d

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Feb 11, 2021

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

22374

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netstandard\System.Threading.Tasks.Extensions.pdb

Divulge-Stealer/packages/System.Threading.Tasks.Extensions.4.5.4/lib/netstandard2.0/System.Threading.Tasks.Extensions.xml

SHA256 975a9555f561b363c3e02fd533f6bf7083aa11bbc7cbf2b46c31df3d3696b97b
MD5 c89e735fcf37e76e4c3d7903d2111c04
SHA1 3c0f1f09c188d8c74b42041004ece59bbd6f0f56
SHA512 debdd8d0ed2ff6ad7b175acfeb1681b1a68eeedd6d717e20e6ac5e0d11c13a1219b4d60f9319939c63bf4b53456328531369f4a9fff5b201475858310e385007
SSDEEP 192:1/elWY3f207pbNcYDLna8MMOOXzHMfHuHoLob+OoMuJkfYSiffiWje0seJme0seM:1/2d207pbNc2na8MMOOXzHMfHQoLob+N
TLSH
T1E322AC283BCD5D521427011B8E1AF4C8FF55AB3B644D392974CE6C57EFAA84792BF820
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Threading.Tasks.Extensions.4.5.4/lib/portable-net45+win8+wp8+wpa81/System.Threading.Tasks.Extensions.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 bb890d79b384cd094eb6fdf992d51b4ed1a0666d29d49772f7685a3bcbc9e11c
MD5 831b113234e83af799b87eae5adbdcea
SHA1 4dde8d2e2ea991eed04a9668cd8bae58708a58ef
SHA512 ec172631408c782e6bdbcd1e3f480210f500e489f3ba05a69b032999690ec567c3e1a1e79b64154ad6bab338fdd6cebff65b768501b8a699e373e41361749d60
SSDEEP 384:HR9PERyZoGhjJAb05M3w0x5eUGefzYW72uBl0EMYTW2JW8aycyHRN7WELly0:HRFMy6GheYQbrbZhN
TLSH
T142C27D0987EC1267DFB74A79D6A7D906AF30E3465A02E3691D8CF3E00C0338A5A65239
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

07:e8:7b:ad:2d:ad:7d:34:00:f4:5f:75:b7:f6:2f:34:0f:97:1b:46:06:f2:73:96:a6:b7:f7:fc:58:9b:57:84

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Feb 19, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:1e:0e:bc:e5:4b:16:a2:03:1b:00:00:00:00:01:1e

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Feb 11, 2021

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

4

Entry point

22426

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netstandard1.0\System.Threading.Tasks.Extensions.pdb

Divulge-Stealer/packages/System.Threading.Tasks.Extensions.4.5.4/lib/portable-net45+win8+wp8+wpa81/System.Threading.Tasks.Extensions.xml

SHA256 975a9555f561b363c3e02fd533f6bf7083aa11bbc7cbf2b46c31df3d3696b97b
MD5 c89e735fcf37e76e4c3d7903d2111c04
SHA1 3c0f1f09c188d8c74b42041004ece59bbd6f0f56
SHA512 debdd8d0ed2ff6ad7b175acfeb1681b1a68eeedd6d717e20e6ac5e0d11c13a1219b4d60f9319939c63bf4b53456328531369f4a9fff5b201475858310e385007
SSDEEP 192:1/elWY3f207pbNcYDLna8MMOOXzHMfHuHoLob+OoMuJkfYSiffiWje0seJme0seM:1/2d207pbNc2na8MMOOXzHMfHQoLob+N
TLSH
T1E322AC283BCD5D521427011B8E1AF4C8FF55AB3B644D392974CE6C57EFAA84792BF820
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.Threading.Tasks.Extensions.4.5.4/version.txt

SHA256 e950b4d39b83b7e7b7a5e8e91af7e3969cdee703f8c8b95eb7a5060950620301
MD5 34add15221df4bee5ff9be38a23cab0d
SHA1 8e423ea8c395023d76249a35aa375980678109c5
SHA512 29884f8b8172f343caba0fd7db0303a401b45ca96b050c7d200c31d3e927abd02d1043fef50a147cab25c096e364a30c7249691d5262e5920e666d240e0b89d1
MD5 SHA1 SHA512

Divulge-Stealer/packages/System.ValueTuple.4.5.0/.signature.p7s

SHA256 829a803a8f25c2be6fad484e80220461801a495d09eef44cacfc6c791fa687cb
MD5 8b953c1d7d4f4fb9f6583cf4b75aecc3
SHA1 1927addd1896963aab647200a1e2522f9b1745e2
SHA512 7e4f406d100c3dff10f8babce637d8c5a76cb97fb1544e7ba55aa2693c209cda6ddb37a666576bd302ac0428ba6fdb86fb6e2167e979a71ebae6b7a11917043d
SSDEEP 384:ZICCvDGrDGrDGmvVpsVpNYKoGoJN77hhwsUrGoJN77hhDsf:ZgDGrDGrDGe0I3hyxyI3h9sf
TLSH
T1EDA2E8978A242C12FFC7CD55B1D4D62B2E34B3966BE584E7817CC0919FC2BD226AC06D
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.ValueTuple.4.5.0/LICENSE.TXT

SHA256 d7a68596ab69b06f51ca278a6545148e4269a9381c26d597c13df5d88e08cf5b
MD5 ba2bed45d99b13d4c31485d0631ae675
SHA1 26c7c096ac257154020a07532c5edeba91ee97e0
SHA512 430f0a57ff6be9cb03316eb7312b70f5a2eb44175edacac242a9fd329257ae52c03de8add8a957cd3a336f99fd638eb89d8d3d1338525d5be21d8f4e22f86f97
TLSH
T15221C61E73560363186203614168ECC1F12BB14A3E6F0985306EF309132A018C6FF868
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.ValueTuple.4.5.0/System.ValueTuple.4.5.0.nupkg

SHA256 9e21fa9767d4e76bc0cee065c1d40cc34384a114bfec4d70e6c981168a926802
MD5 54feb0ea3f3dfa8a85c8b8862685e2de
SHA1 f001a074be6f5c3a20940e88ac46f7c97a010d57
SHA512 fa00ebb5045d12c51274f64411c551981beceb1266a8606a4731063109b95ea1f15939197bf3d2ba899db61e593dc39bfce876908bba34286823525093ae3d8e
SSDEEP 6144:6PIY2TOL2MP8EitmMVNMOP79/65T78wM3FV:LRgEMakEr
TLSH
T1BB1402AB8A187C20EE976EB07294D96F6B34678517F584D341BFD0934F827C34AF8059
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.ValueTuple.4.5.0/THIRD-PARTY-NOTICES.TXT

SHA256 7864a01e2fdef7e8fdf81b906efb1466f083206affea7ba7e6dadea429754765
MD5 0bf833f1b32b1cdefbed5e860457d1dc
SHA1 91ea4bdac6268da316ff578ef4a4996052636ef2
SHA512 b022b1a2b0eb5001f49066ec1326567536e2bd92108b873c024824836a05d268e7727166bfa03073e564039ccfa1f5b3074c6c922f476b683dac19affc367963
SSDEEP 384:FU3qNdKkjHrEjsELvyv4a0rB2kSK5gDTYCYbWq/TbOy/rsUrsESOzYgArsErseSi:FU3qvKkjHwjsEuv4a0yK5gDc3aq/T//c
TLSH
T16062C65F7E4547B218E2C7917598E8C8F22FA02D7F6B2940346EE248237742D95FF498
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.ValueTuple.4.5.0/lib/net461/System.ValueTuple.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e4774aead2793f440e0ced6c097048423d118e0b6ed238c6fe5b456acb07817f
MD5 8c9424e37a28db7d70e7d52f0df33cf8
SHA1 81cd1acb53d493c54c8d56f379d790a901a355ac
SHA512 cb6364c136f9d07191cf89ea2d3b89e08db0cd5911bf835c32ae81e4d51e0789ddc92d47e80b7ff7e24985890ed29a00b0a391834b43cf11db303cd980d834f4
SSDEEP 1536:6784YWau8lqubx6WxXLA+o2SLFyEdux136ytgHo0AuresehSAPVGHMc:67NV8v36tI0XCKAt6
TLSH
T1CC73E92823583663C73E853318AA9AC75BB8D30BD746177B7DEAE5E818E1774B301274
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

b5:f7:dc:6e:a3:44:06:87:6b:2d:53:8d:56:b5:d6:e7:39:dd:cc:c3:a5:39:d3:a3:fe:47:82:a0:6d:68:65:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

0f:84:b3:92:ab:c7:bc:13:73:70:a1:ea:99:ad:92:f8:93:78:19:ac

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ba:6a:36:de:1a:ad:bd:3c:1f:00:00:00:00:00:ba

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:aa:b7:a9:88:ff:ea:57:c3:0a:00:00:00:00:00:aa

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

68354

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.ValueTuple\netfx\System.ValueTuple.pdb

Divulge-Stealer/packages/System.ValueTuple.4.5.0/lib/net461/System.ValueTuple.xml

SHA256 b5c69cb0668b009900333ba825e11e70a5c0bef1d06f934f9cf60889a027aa73
MD5 4a8f5829752a0318a5ad38df9b18153d
SHA1 5512017e7f643ccbec19d5713afa350ba22e0a0b
SHA512 98897badef2e894de5f2a1029580dc44fee6fb98118f3dd5f477f99462c366c49d2345b277c02357703777bea04e5e5a6c109bed4bd0f7bc5fb861e1aef67a47
SSDEEP 1536:xAsWY2MqXflh1jBmumYGWIzHcG37XxYzdSgESL9UW6lJMI79mARgg59ae9Rice2L:zL
TLSH
T1EC839E3C7BC88A12447606015E24F585EB3A573BA85BED1034CE6EA31F77D9362FB885
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.ValueTuple.4.5.0/lib/net47/System.ValueTuple.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e905d102585b22c6df04f219af5cbdbfa7bc165979e9788b62df6dcc165e10f4
MD5 23ee4302e85013a1eb4324c414d561d5
SHA1 d1664731719e85aad7a2273685d77feb0204ec98
SHA512 6b223ce7f580a40a8864a762e3d5cccf1d34a554847787551e8a5d4d05d7f7a5f116f2de8a1c793f327a64d23570228c6e3648a541dd52f93d58f8f243591e32
SSDEEP 384:VyPa16oAL4D+wW9IWmDIW4IWYDMFm0GftpBjMIraQHRN7VlmTpF0:VWs6oqDjADKeDYViG+LN
TLSH
T1DBB23955DBFC5143EEA35E7066B4D6873C3EF7C35D21862E106AE14A1CA37C1AB20B29
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

d4:37:69:30:cf:c4:bf:17:93:07:4e:1a:10:f5:a8:79:e8:8f:5f:58:7c:25:a7:a1:5a:95:50:d7:24:03:73:42

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

78:b3:c4:5e:5b:a3:f6:32:6e:9b:44:3e:33:4f:0e:39:8c:1c:4a:00

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:a9:54:70:d9:79:c0:84:65:e2:00:00:00:00:00:a9

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

12898

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.ValueTuple/net47\System.ValueTuple.pdb

Divulge-Stealer/packages/System.ValueTuple.4.5.0/lib/net47/System.ValueTuple.xml

SHA256 c37e163fa76629c196460c7b4d54e95b1a46a4c66ab7b6f3311959c8137dc5f1
MD5 b6e60687ae5db6d011e21e6993620745
SHA1 b117c6bbddc72e7f4b590173992ee17bfdde4be1
SHA512 709212b6cb36f57b92a82def810f9c075a91b3e6a5fd330dcfb563d94a320783509441347d63bde97f530c6b10ce6aa769ca11f7fc39acf1b25d5c8f9dcbb389
TLSH
T141C09B0559D4E5155D3215172EB3F900FE15C75B14D11435745D0F036F354491367431
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/System.ValueTuple.4.5.0/lib/netstandard1.0/System.ValueTuple.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d6fb0dcfee1490a8168117ed1b55758f11db38475417b3668d19f89dcb55cbdd
MD5 99cec77dbee0ab10b9fc4d52a1d414be
SHA1 c83d024e80c36b663458d478dfdb067336e2d616
SHA512 988b0ff9ede87fe7538b2e0cdd684962965b4fc2a4f0fc92726248f249cacb7c5674f3978d2d7cbed68991c71e0b0339d6edda57384097a4da8efd7d77b43cd9
SSDEEP 1536:h784YWac+abptsy5VyYc/9n1RcGxzeeUVn9KyQgHo0JuresehaA1VUF:h7N1r9KGI04CCAP
TLSH
T1D173E82C23583653C73E843318A699C7AFB8D30BD74657BB7DDAE5E818D2374A302664
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

50:0b:9b:f8:2d:1f:dc:2c:85:5f:8d:44:8e:f0:06:34:42:5d:c4:9a:fc:6f:51:5e:c7:96:0d:06:3c:1b:20:16

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

e0:5a:d1:da:4b:60:60:fb:28:f2:b5:1c:59:6c:d7:66:96:16:eb:e0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c2:a0:09:c5:37:76:e9:f6:cd:00:00:00:00:00:c2

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:a5:48:17:72:27:f9:70:be:63:00:00:00:00:00:a5

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

68586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.ValueTuple\netstandard1.0\System.ValueTuple.pdb

Divulge-Stealer/packages/System.ValueTuple.4.5.0/lib/netstandard1.0/System.ValueTuple.xml

SHA256 b5c69cb0668b009900333ba825e11e70a5c0bef1d06f934f9cf60889a027aa73
MD5 4a8f5829752a0318a5ad38df9b18153d
SHA1 5512017e7f643ccbec19d5713afa350ba22e0a0b
SHA512 98897badef2e894de5f2a1029580dc44fee6fb98118f3dd5f477f99462c366c49d2345b277c02357703777bea04e5e5a6c109bed4bd0f7bc5fb861e1aef67a47
SSDEEP 1536:xAsWY2MqXflh1jBmumYGWIzHcG37XxYzdSgESL9UW6lJMI79mARgg59ae9Rice2L:zL
TLSH
T1EC839E3C7BC88A12447606015E24F585EB3A573BA85BED1034CE6EA31F77D9362FB885
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.ValueTuple.4.5.0/lib/portable-net40+sl4+win8+wp8/System.ValueTuple.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0b618a0840f17c94223282416a718bfdd4708b90b4e03997ce092f027e696b35
MD5 5bc0380d837273cfd37545d80db14c4e
SHA1 4b556d5a0340afa61058431d530fe9023f44074b
SHA512 a9c032bfccf0c22ba47b11a9b8e32eb89a2a751c783a9ebe94b2f65a1565f8b3d39f37ce54c46d94ecfd847cd70e8643b280d6f8343ee0541f21dc053a3c6848
SSDEEP 1536:YUOaBs6AVUYBrEgrtR2IeAcRv86nEXsOybMXdm01yUNrnucehPAqVusz:YzaBepsOAMNm01jNDu3AiT
TLSH
T18D73D61823497563C23E81331CA69ADB97BCD30BD75647AFACDED4E914D2378E302668
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

5e:b9:49:87:eb:60:9b:28:ef:4d:62:db:90:89:94:7c:d0:fc:0b:8f:89:99:c1:07:4d:d2:1b:45:4c:bc:16:22

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

91:82:06:43:4f:35:0c:0a:38:40:16:a2:5e:7e:d1:65:21:7f:c9:af

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c3:3b:b8:10:d6:ab:75:9c:84:00:00:00:00:00:c3

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:96FF-4BC5-A7DC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:b6:8b:47:43:b2:cc:ad:1f:04:00:00:00:00:00:b6

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 2, 2017 - Jan 2, 2019

Minor OS version

0

Major OS version

4

Entry point

68626

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.ValueTuple\portable_net40+sl4+win8+wp8\System.ValueTuple.pdb

Divulge-Stealer/packages/System.ValueTuple.4.5.0/lib/portable-net40+sl4+win8+wp8/System.ValueTuple.xml

SHA256 b5c69cb0668b009900333ba825e11e70a5c0bef1d06f934f9cf60889a027aa73
MD5 4a8f5829752a0318a5ad38df9b18153d
SHA1 5512017e7f643ccbec19d5713afa350ba22e0a0b
SHA512 98897badef2e894de5f2a1029580dc44fee6fb98118f3dd5f477f99462c366c49d2345b277c02357703777bea04e5e5a6c109bed4bd0f7bc5fb861e1aef67a47
SSDEEP 1536:xAsWY2MqXflh1jBmumYGWIzHcG37XxYzdSgESL9UW6lJMI79mARgg59ae9Rice2L:zL
TLSH
T1EC839E3C7BC88A12447606015E24F585EB3A573BA85BED1034CE6EA31F77D9362FB885
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/System.ValueTuple.4.5.0/ref/net461/System.ValueTuple.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 506f7f6aab57d9bde981d0b72abb3be82aa658330152b40bc911fab0727b7265
MD5 6bdee6ad3b29dfc247ca6c4a82c64d22
SHA1 12f20e083f2148de870e44ac14b6d88e1d8102bc
SHA512 970aae083228b74b0006df636fe9950f7a268f5a399c1eb63afdceeab28ec8cd6b674ff02c3edbb5aa577e7f4ea610022a665d3ef4e3a644856fc90358b8d349
SSDEEP 384:2HIEBrGGxzpFE18//sL3psk8FV9sstYaEogC22uSw2ygDHfPnDZPDR2WBySnOVPb:gMGRE1E/IaLV9skSzADuVieL8LA
TLSH
T16F03B668CB1AA863CA7ECB301CF3D6023B38C759A7530797918EA2583D427F9BF15564
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

a4:ca:66:6b:93:ec:a6:d9:27:59:51:6a:1c:9a:48:60:97:9e:84:0b:ac:5d:a3:15:1a:63:77:14:6f:34:22:36

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

11:b1:57:03:7a:67:98:6e:b3:f5:96:55:16:0d:9e:ee:82:81:aa:bb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c3:3b:b8:10:d6:ab:75:9c:84:00:00:00:00:00:c3

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:0DE8-2DC5-3CA9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:a6:fd:52:e0:8b:16:27:3f:00:00:00:00:00:00:a6

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

30018

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\39\s\corefx\bin\obj\ref\System.ValueTuple\4.0.3.0\netfx\System.ValueTuple.pdb

Divulge-Stealer/packages/System.ValueTuple.4.5.0/ref/net47/System.ValueTuple.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 48f394668836de87949c256467d826daa6f779f5d39f9158f0ac6cb8a7924c2d
MD5 5dda2de4879494de8f67dc22a5638b27
SHA1 eb8ab09d13a8d98ea7b79e5108dee57c053bcae7
SHA512 21d85bed95b9e458afc4c011b351df761a71ea1949e17790ad0a679e402448b751f497fd1576b72ce75cab18a294efe060ef8c2d86fb966230f92bffccb03509
SSDEEP 384:9yIJp8W9IWmDB1m0GftpBjIxoaQHRN7NTl3M6:sUnAD7VieoL86
TLSH
T1E8A24A95CBBC9143ED936D7062B4EAC77C3CE3C35D21952A106BF5991C833D4AB24A2D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

08:70:57:14:17:ea:eb:5e:1c:6b:e0:7e:87:5a:18:26:af:7e:05:39:f8:db:91:a2:52:77:ff:cc:dc:e7:fe:c1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

88:66:81:8e:a4:7e:3e:0d:b9:8e:dd:18:e4:68:e3:1c:a3:b9:d5:35

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ba:6a:36:de:1a:ad:bd:3c:1f:00:00:00:00:00:ba

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ac:8a:21:bc:7a:d2:9b:72:f4:00:00:00:00:00:ac

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

10878

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\39\s\corefx\bin\obj\ref\System.ValueTuple\4.0.3.0\net47\System.ValueTuple.pdb

Divulge-Stealer/packages/System.ValueTuple.4.5.0/ref/portable-net40+sl4+win8+wp8/System.ValueTuple.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 52629c9ebaa52ed79dfa636cc1a7888f7355ed1b4f58a75a883e894c9149d5e8
MD5 3ab5e24564083d9afeac61623dc9aad6
SHA1 40c468a514df22c7356b689bee13bc70bcd7f308
SHA512 4e3354e1e630f809798391ff8dccda9704aa05a5a1b5cc55374111f9c3fb8b806bec5e9f12f2ef05d78fc82e75c903e5f8738747a2746c21e77c74d7717cd3b7
SSDEEP 384:m35no1QmcgK29L3psk8FV9sstYeVo/c2AB2uJzT54OOE2oSPJLZP/B6uE6nnbFPw:8f2tpaLV9szu/AD/oViIQPLdlyV
TLSH
T15413C9688B0A78A3CA7ECB301CF3D9023B34D749B7530797919DA1942C827F9BF15969
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

96:c4:ea:74:e2:59:df:64:ce:14:60:17:20:44:fe:6e:e9:8b:e4:d3:66:7a:76:95:51:5a:52:e9:86:00:63:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

fb:02:0d:ed:ae:0d:5a:73:76:20:5a:17:cf:10:8f:37:70:3e:c5:64

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2018

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:96FF-4BC5-A7DC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:d7:78:5e:7e:ac:3f:2a:41:8b:00:00:00:00:00:d7

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 2, 2017 - Jan 2, 2019

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:33:26:1a:00:00:00:00:00:31

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 31, 2010 - Aug 31, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 11, 2017 - Aug 11, 2018

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:a7:64:5d:c5:28:0f:01:3d:44:00:00:00:00:00:a7

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

4

Entry point

30750

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\A\_work\39\s\corefx\bin\obj\ref\System.ValueTuple\4.0.3.0\portable_net40+sl4+win8+wp8\System.ValueTuple.pdb

Divulge-Stealer/packages/System.ValueTuple.4.5.0/version.txt

SHA256 c3267fe0adb0b855d1fa96901b0b1c297b9c5215fdd914151d31dbbd1d75ea05
MD5 81f65b4c28699a8aac1f571eba414da7
SHA1 8ca51d19c602cdc75ca75bdb943fe78c7bd4cd62
SHA512 d08a81aca32e2a8811deff9f97d01685df701b5801f1c04478c277575e7ae5d774816cc6b7ab7a3a6b7a9d958e1239912ec8204c4753865e9c1a70800b4b7835
MD5 SHA1 SHA512

Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/.signature.p7s

SHA256 ae670547a7f67ce9f980b175cda657db2eed868dd9b0ff3e2b83304e6b674163
MD5 e49bd41e885e0932c05581663b6a3fba
SHA1 378b11d125ff46f1dc8ca739c682b2cf4b6783a3
SHA512 9ca607852bc4a97242af1b8dc4defb4754f252e8a119b8b718d8d244000ac7dedd0ff4e945a77d2281e17abba89118b851bf057862ca535d53d58a99ed4c1189
SSDEEP 192:9dvDbnPIIYiYF8EX7oDEYCvFyl27z7x02Nyby2sE9jBF3A5K+o+aU2B:fvHQIYi+oDEh429JNyb8E9VF3AM+opr
TLSH
T160425CA38914AC10DE4B8D4675C8D93AAEB577C75E90C4E3225EC18087A13477BED1FE
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/README.md

SHA256 79ad815ab66bc6faa658fabeca842ab9bb63ddb2fa240105c4a0e6cc6f4975d0
MD5 26bae5fda85eed4340ac7bdb53ad74f8
SHA1 83789faedef2d8f1e619dd9e6b02101b087bc2a2
SHA512 2cd4d65bea8693a7e1e75e53127c816ee4624b078c96f195f12d8d2d8be0b4e6cc738662a772db963de824648ace3eb9445c286a8fd25bc2b997ac1ba0cba860
TLSH
T1AB810F970E188D79BFF2E4E1590A7448E627900EE5769C6DF88E50142BF37D903BDD0A
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/Vestris.ResourceLib.2.2.0.nupkg

SHA256 e6a829002405e558cdbc13392c25a49386f6575d0624587ea3276ad95b97a6d4
MD5 8a71ec31ec2786c844868b1c9c988c0d
SHA1 d003929030cb04520b9a6607b253ab6bcddf33f1
SHA512 c5f53093f650866b38b3a75b19f9bfadba13c3205209d06f89b9d36525b95e767dd54580ac69b19908e057a241fd990150fb91d411c7d14cc1480237bbddcd17
SSDEEP 6144:uVUZZOuDGSMjszDGSsCeXNYDGSWIlqVg0kDGSSFkcZIInuSPDGS/t:rOWNisHNs/NkNhoVgNNSFkQpXLN/t
TLSH
T1D17413429A26AE13D1F05C2A7658B07ABBFE4E0617BBCCB35DB98C995EC03507117E80
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/net20/Vestris.ResourceLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7daefb32b377812c1a8d9e68506dc819a75b6e4a6a0d0848139087bfae1717ad
MD5 c8a788cc5ab42c806c81cd1e8261997c
SHA1 a47829a24d338981e45eafdb7c4d499adc71d594
SHA512 8bc4c7c6d449074ae7613284acce70e04e98ad14331ddf13ea2855ced99dc671279cd399abd8ce86b7f9e470c2b120e07448d39c034ed07cc2f5b221f74a41a2
SSDEEP 1536:i/iFohIqBCf+2kxnTNeI8kU1MtM+otExy8p:4qqof+1xkjN1d+otET
TLSH
T16C732B15A7BC4A3BCAEE4379F126045A17B0CA17F32BE39E9DD8B4D565D27A003107A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

84806

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Thomas\source\repos\resourcelib\Source\ResourceLib\obj\Release\net20\Vestris.ResourceLib.pdb

Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/net20/Vestris.ResourceLib.xml

SHA256 a9d7444322acd5de845b31f8c28cede396779e6a2868ae9680c2a4c2bbc4602a
MD5 7d2140eb938cf702268e1e0fbaf2f7a0
SHA1 91887e264e4375f68ae86f5184acb9601e9ca456
SHA512 77fbf7a74e8e954abfd6cfe5cc25a23ab55a5f74401b1c4ff0d1513485ec462e0f7ec7f71628a1823311f0d0c0aa98a44dc9a84516cd7edea95d01fe79062626
SSDEEP 3072:uuaVKJ1AAlTNKLNWs/+Y4Y4d8yUa/jvGF:uC1AAlTgLNqljvGF
TLSH
T1AF54BC96BAD85E300D3201175E24F4C4FE564C276129682EB4CE2E3B1FB3DE652BF964
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/net35/Vestris.ResourceLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b4ac3cd296b9d1304fe8f4e5f446ee6a936375db4d0549016d882c1c5455393b
MD5 230403d964eadf53ee52ac47995094a2
SHA1 7ef2f95d5b9ea2f5b3e326761d05038b4e000f54
SHA512 e8aaf4481c9490c61542d7e680556d2f2a8b98eb001e841be1beeec0ce7a9442284f3529f17f2454cb5a7b372ad4172f67be24a43f3eefa0c6bc9120df1ec5b3
SSDEEP 1536:g/iFohIqBCf+2kxnTNeI8kU1MtM+otCxy8p:Cqqof+1xkjN1d+otCD
TLSH
T12F732B15A7BC4A3BCAEE4379F126045A17B0CA17F32BE39E9DD8B4D565D27A003107A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

84806

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Thomas\source\repos\resourcelib\Source\ResourceLib\obj\Release\net35\Vestris.ResourceLib.pdb

Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/net35/Vestris.ResourceLib.xml

SHA256 a9d7444322acd5de845b31f8c28cede396779e6a2868ae9680c2a4c2bbc4602a
MD5 7d2140eb938cf702268e1e0fbaf2f7a0
SHA1 91887e264e4375f68ae86f5184acb9601e9ca456
SHA512 77fbf7a74e8e954abfd6cfe5cc25a23ab55a5f74401b1c4ff0d1513485ec462e0f7ec7f71628a1823311f0d0c0aa98a44dc9a84516cd7edea95d01fe79062626
SSDEEP 3072:uuaVKJ1AAlTNKLNWs/+Y4Y4d8yUa/jvGF:uC1AAlTgLNqljvGF
TLSH
T1AF54BC96BAD85E300D3201175E24F4C4FE564C276129682EB4CE2E3B1FB3DE652BF964
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/net40/Vestris.ResourceLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 edcaf77d95ca18b9c79d0eba6d74e3f2fa41573d858ca92b960453d3f01f59d7
MD5 7c360e5fcd73a8806e7706a2c9b87511
SHA1 f957663ddccc133dc07a9cbb7a486e3a689fd8f5
SHA512 1c92a898f6d929c6892465c80a000fe6d4b01351f48cbe241df9a5f5bbccca5a8f8fbaeba5b1732f8419e742b723044c116b38bcef5e0fcbc2daa5be0a7a2c25
SSDEEP 1536:gSDBV/I4EMa43ncELNPf5dNPoCOp3s1MtMRotXJBtw:g2WMa4sE5Pf/uCOp3s1dRotXDu
TLSH
T18A733B6993BC4B7BC6FE437AF126085A67B0CA03F237E34D8CC8B9D5659379102516A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

84798

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Thomas\source\repos\resourcelib\Source\ResourceLib\obj\Release\net40\Vestris.ResourceLib.pdb

Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/net40/Vestris.ResourceLib.xml

SHA256 a9d7444322acd5de845b31f8c28cede396779e6a2868ae9680c2a4c2bbc4602a
MD5 7d2140eb938cf702268e1e0fbaf2f7a0
SHA1 91887e264e4375f68ae86f5184acb9601e9ca456
SHA512 77fbf7a74e8e954abfd6cfe5cc25a23ab55a5f74401b1c4ff0d1513485ec462e0f7ec7f71628a1823311f0d0c0aa98a44dc9a84516cd7edea95d01fe79062626
SSDEEP 3072:uuaVKJ1AAlTNKLNWs/+Y4Y4d8yUa/jvGF:uC1AAlTgLNqljvGF
TLSH
T1AF54BC96BAD85E300D3201175E24F4C4FE564C276129682EB4CE2E3B1FB3DE652BF964
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/net45/Vestris.ResourceLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 7a8c2ccede8eb154e20cf60bba517ea8e81485da2665362e724a279b597cedce
MD5 306365ad424bec21e2f0c229a4ac6b08
SHA1 432be30aa28bcd551d09cb0ed7d14e376638c5c6
SHA512 db31b42f716e6ba546a176509d5c16fdbb39cc0bced9256203ec4264c3ef85a18981f6cd868f6fc018cb79a03c2fa448a318d310a17bac5a271b74e5066b0516
SSDEEP 1536:qul14DC9Uf0a2T3Lip1q0GB7xxn0JL+1MtMKot25JYg:quvQ0a26p87Ln0x+1dKot2LT
TLSH
T1F8734B25A3BC4F3BC6FE467EF01704565BB0C907F227E34E8ED8B8DA65A67800915693
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

85026

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Thomas\source\repos\resourcelib\Source\ResourceLib\obj\Release\net45\Vestris.ResourceLib.pdb

Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/net45/Vestris.ResourceLib.xml

SHA256 a9d7444322acd5de845b31f8c28cede396779e6a2868ae9680c2a4c2bbc4602a
MD5 7d2140eb938cf702268e1e0fbaf2f7a0
SHA1 91887e264e4375f68ae86f5184acb9601e9ca456
SHA512 77fbf7a74e8e954abfd6cfe5cc25a23ab55a5f74401b1c4ff0d1513485ec462e0f7ec7f71628a1823311f0d0c0aa98a44dc9a84516cd7edea95d01fe79062626
SSDEEP 3072:uuaVKJ1AAlTNKLNWs/+Y4Y4d8yUa/jvGF:uC1AAlTgLNqljvGF
TLSH
T1AF54BC96BAD85E300D3201175E24F4C4FE564C276129682EB4CE2E3B1FB3DE652BF964
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/netstandard2.0/Vestris.ResourceLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ab016af030fd5698eda88b7bd4083b06f2670df218290209d1f40c492e781ea8
MD5 97c95c10a3cde4529e990d9a54508b5e
SHA1 9c534ddaf630b692e174edd447ff175da55674ff
SHA512 9e29fb811fdcc11748f079dc03cdf962a982fbd5454d3bab4793969418adb7991f0b1af25b271145953e2e58ddc53dd09cc6d9e5fd6704b22535de4e8f180a81
SSDEEP 1536:VjJXs7CpOC0aEm3WYTVLC2YEWnQxpVRGP1MttAodXEJYb:VjBH0aE4522YXQxpiP1WAodXsG
TLSH
T1E6733A5897BC8B36DAFE47BEF022445953B0D502F36BF38E8D9CF8D6659239006142A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

85034

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Thomas\source\repos\resourcelib\Source\ResourceLib\obj\Release\netstandard2.0\Vestris.ResourceLib.pdb

Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/lib/netstandard2.0/Vestris.ResourceLib.xml

SHA256 a9d7444322acd5de845b31f8c28cede396779e6a2868ae9680c2a4c2bbc4602a
MD5 7d2140eb938cf702268e1e0fbaf2f7a0
SHA1 91887e264e4375f68ae86f5184acb9601e9ca456
SHA512 77fbf7a74e8e954abfd6cfe5cc25a23ab55a5f74401b1c4ff0d1513485ec462e0f7ec7f71628a1823311f0d0c0aa98a44dc9a84516cd7edea95d01fe79062626
SSDEEP 3072:uuaVKJ1AAlTNKLNWs/+Y4Y4d8yUa/jvGF:uC1AAlTgLNqljvGF
TLSH
T1AF54BC96BAD85E300D3201175E24F4C4FE564C276129682EB4CE2E3B1FB3DE652BF964
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/Vestris.ResourceLib.2.2.0/resourcelib-logo.png

SHA256 de10f2620252c8f4d7649573b68cca4755cb39ffa03f9531b6d28f596d8adab8
MD5 45b3327723c75aad014504427f66a91a
SHA1 d6f610d3afb60e5549d564eb3721ab82fcd4b0a0
SHA512 656948183adb85db20567e2316eae9ed4b65264577fa3d2bd4ec8ee901715e57898b76a95f2e4e9cdb41171770c03e74a1c5836e226292c2290d2ba8eafc3116
TLSH
T1C911B3EB4384E83CD62800302D21A254BE93E0CFC9E8DA45B92C833A943C786DF74084
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/jose-jwt.5.0.0/.signature.p7s

SHA256 4f6a901f35ea3fc06ceb70a231a5cc8c138ee7f3e12ff6b2e6cb786cd6e28ac8
MD5 0817b7961093ae469f31132bd84be9ae
SHA1 08f418959e10a2670054fab1cb7f3126a73b8965
SHA512 5cac9146eb02fd4414e385443fab2611ed8b42d9a277ccebc078965bc3a3e2b8b449bcb0adac54ad741eafdca50188b3e651845a0b0bc826b630d4c587081cc3
SSDEEP 192:Jda7x0KDWpHiX1x3ige7x02Nyby2sE9jBF3A5K+o0ayjjb8:bAvDG6wg8JNyb8E9VF3AM+ofyPY
TLSH
T180321AB6CA15AC11EE9B8C5271C8DE2B6E7577476BE0C4F3436DC1508B8178276FC0AA
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/jose-jwt.5.0.0/LICENSE

SHA256 5f133aa450f4a40f60e67ce4df0682b6e2bb2e63fa3f4e47702cbf71a0eb6d13
MD5 f2643924cc848366fd4a7d3acd5586fd
SHA1 74a066478a7921a317c97f48af4f9682db2bf06d
SHA512 07edc1f1f66d8c26d9a7900ed7943991a098e21409802246f609f765d42f80d9174fa82c046a8684b43e5a553e50eb452dd1203c9b75f54c3674c6576f6335bd
TLSH
T16011822E726447B22C9613A06569B8D5F22BB24F7A6F1B88146EF345232A46CD0FB844
MD5 SHA1 SHA512 TLSH

Divulge-Stealer/packages/jose-jwt.5.0.0/README.md

SHA256 cd2e02ca84450ac142d05da86ae5a6aef2fb157c0e607301ede6aa7a89f0e4f5
MD5 c0ed48d6ec3239600f882f768238e355
SHA1 840a2a012b6dbd93509845e95cbcea619a42c4e2
SHA512 b2e7f90830bcc4b5f6cafd41d224216bf9fdf2111f030bbdd6475d713212eb6b3da594565e198eb94cd8a9c45a187c2b365a57a909700f59891dbc49f16ce627
SSDEEP 1536:fVBjCFBjCO27BUGaqzeaOXZ5OmWQ3HaPZrFdh:m27BZaqzlWZEQ36PZrFdh
TLSH
T190833C828B4351744EE26452D642CD51F33B600D2729DA60B9EDCAEC2F67CA9D33B5CE
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/jose-jwt.5.0.0/jose-jwt.5.0.0.nupkg

SHA256 e8a59f747a358036b658d91bdf3669f403fd0e6b5470f871227037758ce451dd
MD5 4236246cbfa22b01a1a8df4e08f726ae
SHA1 fe512b8f70a1de2415bbce911f9b40cb4e667e90
SHA512 6d74b99b6a11897b933eb61896722cf1fc07033c31841319d6a358808ebd2c8aa7b3ec5c61d6f97b502d53e501520d012837ae8b70ad45e2435f9de3d005cf38
SSDEEP 6144:luKDLwP3kTnlZuH5OMadpLIXj4zI3rqlRWDoqz5avOm:lu0EPUbGHfODzMjkqzcH
TLSH
T16824137AA742FC70EFC67635F09DDE3E48F076499BD188B181DC5880C34A38B627965A
MD5 SHA1 SHA512 SSDEEP TLSH

Divulge-Stealer/packages/jose-jwt.5.0.0/lib/net40/jose-jwt.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5783e8ee909c0fb7c46ae4bc14ebd4843ae56b5e5a3971bff6ffae0b3495e89f
MD5 636161cd5525834ee824c38d70a9ceca
SHA1 370b1e945639e86b07e00efec7f3b1bdc25f406e
SHA512 448272be98f7052ad52264a0155dc58e53ec910ba3ec97089e081860d917fb553e15623b69aefe1662882ea97ebf731905de23b60ea54cd152ac29de59ee4696
SSDEEP 1536:ZFM/F3vXN6L2ZIW6i6y/ATDbty259P5/3+6fbN:Q/lV6CZ0i6iObty2jP93+gbN
TLSH
T1AB8329397BEC4605E2FF2F3964B152244BB1F8667533E75D6D8065EF1A32B8089207A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

89270

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\jose-jwt\jose-jwt\obj\Release\net40\jose-jwt.pdb

Divulge-Stealer/packages/jose-jwt.5.0.0/lib/net461/jose-jwt.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 ec4715c08a91286e84935e6b3233355897ffb257ae40e699e802dde7f50f5079
MD5 377f27dd808b6cf08d6f9b8160577c13
SHA1 1fc7a50c62cbf1827aa60b4259589930cdec7aa7
SHA512 46f0575d7cd26a3df965fe937e39e4f30d418001b7174e282911f94e51919d309b2defd00c6a0947fae4f0797f19940c5344ce7e82b657d1beb81f999dbb3181
SSDEEP 1536:fOaZqw718EouRtm8wSDSUesY5YJ5U259P5l3+1rt0Xc:maAwJfo8wXsDJ5U2jPr3+1rt0Xc
TLSH
T13B833B297BEC4616F6FE6F7864B152080BB5F8367432F74D2D84B9EE1832B818911763
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

90646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\jose-jwt\jose-jwt\obj\Release\net461\jose-jwt.pdb

Divulge-Stealer/packages/jose-jwt.5.0.0/lib/net472/jose-jwt.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1ccaea49f01e232ad5f7b5f58f315e11292f0b5284da7e5c88364bfa70785121
MD5 a79835a797bc273640ae9836d7351d10
SHA1 003222380747bfd1c13aea07f446c192b5b1e891
SHA512 2da7052d8fa839fc91cd668271e00292df9030f25cf837d87803a08dabe482e98ce1b580d89a2200bc39f3d47301de8063faaa9e81708eaa7daff305309871b1
SSDEEP 1536:89W/leUEOPjcdSUEehV4PMsSBwRhtzzz66eXRF3bOfj259P563+DcXg:BeUEObm4PlSuzzz66e7ifj2jPQ3+DcXg
TLSH
T1DA931728B7EC4506E2FF6F3964B1411487B5FA267433F35D6D8469FE1922B818920BB3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

95542

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\jose-jwt\jose-jwt\obj\Release\net472\jose-jwt.pdb

Divulge-Stealer/packages/jose-jwt.5.0.0/lib/netstandard1.4/jose-jwt.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5458ccb796810b5611d035938a4108ca9214213bad80d44444c9c6ea3d25900e
MD5 3507d2ce3fa408b2fe22e17662c19f8d
SHA1 400122272173904ea729d094a234d54627e36fe2
SHA512 85840ff0cb6ed83ca7bb2e06e5fc751f650fb12a8c56b78ae3bc37ed3c9741e96e1efaeb23efd0eb848fa3f22f4ba36cd0736ddf00bec8dae3b7c427e3a7cb40
SSDEEP 1536:3Um64jf7XTRHdfNFUPM1Ky3JQN2PUDOgGEPOu259P5n3+w6duqw:9Njf7XTRHdfNFPK9UrgGaOu2jPp3+w+U
TLSH
T190833B397BEC4506F6FE6F7998B012100BB5F8257533E74D2A84A9FE1932F819920763
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

90194

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\jose-jwt\jose-jwt\obj\Release\netstandard1.4\jose-jwt.pdb

Divulge-Stealer/packages/jose-jwt.5.0.0/lib/netstandard2.1/jose-jwt.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 0739a837ff7190249bd02160f700aa58fa495da0fd0b15f74f094b2423fffd31
MD5 1a7bde394dd13f74ccce720cbede7434
SHA1 0e2e6bff296e0ac0aa3cbd6cfa04418d845b2e40
SHA512 65b3d538fd5e6078b6b0f2dfff12c36cfe385082abee18771251fb9884c294c8af6b9f5ecad936a259519ec04d4bc7f56e95121103932bef411f8c60b11dcb4d
SSDEEP 1536:Sv75tuf+Xekm9d3lRcCT0BKljISiJPF1x/N259P5M3+ubuh6:SCrkMRcQqcISiZFD12jP23+ubuh6
TLSH
T16C832A3977EC4902D6FE7B39A4B051644BF4F81A7533F78D298469BF0822B9189207B7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

93430

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\jose-jwt\jose-jwt\obj\Release\netstandard2.1\jose-jwt.pdb

Divulge-Stealer-main/LICENSE

SHA256 de68854f0de586fb20a9f6b03a9c270c6df73104e99bdaaad56827bf4ecf7bcd
MD5 bed5acfbad7ad344522cbe96f1798304
SHA1 4422075f54818e20c6d8c448a99f425b932145b5
SHA512 18ff8e1c9088cdd5086e5a4cc61c2368d127ba7269151b962f35d09ab2e8034de2a756f31bf9484dbb2c5ab9db7cdf8abf56d43fdba26d463b29680b38fa26b6
TLSH
T1FB11751EB2510776289B13605978ACD5F23BB25F7E5F2A84246DF345633A06CC5FF840
MD5 SHA1 SHA512 TLSH

Divulge-Stealer-main/README.md

SHA256 c27ec5604b8f1562d25a379ade8820a69eea27f630f29da6343dd23d6d3b1078
MD5 27bb61a032921c0882cf4433b335393c
SHA1 94538f63f0009f0c13cf654f6dd50af4afec6775
SHA512 f64ee8cad89f972f2b7e4d575966eb1d64cde71113e5eaf93453302bf47d9c7a3f1057ebf8e35a7f01ee75de80d4997962c40b9458addf5d6af48bd0349f4f59
SSDEEP 192:0yn+E/0VWMNT0JOY+j2y7u4e3+KOqIt6y8Uvz7EzYij:0xE/0UMN2OYenu48+KOqTYij
TLSH
T13DE1B81AF36523714BD203A3AA1A52FBF73A79782B5746A0309D401C2345D78437B6BE
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

Divulge-Stealer-main.zip

Divulge-Stealer-main/Divulge-Stealer.zip

Divulge-Stealer/Divulge Stealer.sln

Divulge-Stealer/Divulge.builder/.vs/Py.builder.csproj.dtbcache.json

Divulge-Stealer/Divulge.builder/App.config

Divulge-Stealer/Divulge.builder/Components/Build/Builder.cs

Divulge-Stealer/Divulge.builder/Components/Build/Renamer.cs

Divulge-Stealer/Divulge.builder/Components/Forms/AssemblyEditorForm.Designer.cs

Divulge-Stealer/Divulge.builder/Components/Forms/AssemblyEditorForm.cs

Divulge-Stealer/Divulge.builder/Components/Forms/AssemblyEditorForm.resx

Divulge-Stealer/Divulge.builder/Components/Forms/MainForm.Designer.cs

Divulge-Stealer/Divulge.builder/Components/Forms/MainForm.cs

Divulge-Stealer/Divulge.builder/Components/Forms/MainForm.resx

Divulge-Stealer/Divulge.builder/Components/Utilities/Common.cs

Divulge-Stealer/Divulge.builder/Divulge.builder.csproj

Divulge-Stealer/Divulge.builder/Program.cs

Divulge-Stealer/Divulge.builder/Properties/AssemblyInfo.cs

Divulge-Stealer/Divulge.builder/Properties/Resources.Designer.cs

Divulge-Stealer/Divulge.builder/Properties/Resources.resx

Divulge-Stealer/Divulge.builder/Properties/Settings.Designer.cs

Divulge-Stealer/Divulge.builder/Properties/Settings.settings

Divulge-Stealer/Divulge.builder/Properties/licenses.licx

Divulge-Stealer/Divulge.builder/Python_icon-icons.com_68975.ico

Divulge-Stealer/Divulge.builder/Resources/fluent-emoji-flat_red-circle.png

Divulge-Stealer/Divulge.builder/Resources/fluent-emoji-flat_yellow-circle.png

Divulge-Stealer/Divulge.builder/Scripts/sigthief.py

Divulge-Stealer/Divulge.builder/Settings.cs

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.Licensing.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.1.5.3.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuButton.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCheckBox.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCircleProgress.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuColorTransition.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDataGridView.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDatePicker.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDropdown.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuFormDock.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGauge.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGradientPanel.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGroupBox.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuImageButton.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuLabel.dll

mscoree

dotnet

Divulge-Stealer/Divulge.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPages.dll

mscoree

dotnet