SecHex-Spoofy V1.5.8 (testing).zip
- SHA256 4568f2b89c48898ea7bbaad1e98e0db0a2aa3026a82a3ffd6c732c8e2de5a81f
Behavioral task
behavioral1
Sample
SecHex-Spoofy V1.5.8 (testing).zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
SecHex-Spoofy V1.5.8 (testing).zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
300 seconds
General
- Target SecHex-Spoofy V1.5.8 (testing).zip
- Size 2.1MB
- Sample260730-e5vxpabg48
- SHA256 4568f2b89c48898ea7bbaad1e98e0db0a2aa3026a82a3ffd6c732c8e2de5a81f
- MD5 21d315bcf7c143e9f1793d91586243d3
- SHA1 63103043470f6a53a80df980bfadeb329855d6b7
- SHA512 1dde25051a27b768d94ab382f2b7e91b9eeb9da34ce65b44c0dce7ccb48de081d1975ff23bb660ba42f15cfcb7ce46e241f78dbe1582e3de8b5d81d5f4987679
- SSDEEP 49152:yZ9aujFs8tsB+lEDgzDXTBf0Nnof8++9KeW24LwZKO9lT:yPa6SdcEDWpeof8+9LLwsOXT
- TLSH T1A2A53384968B11CAF898E33360A10B5F5771CD7D6200181E889FBBE36DB715BAE243DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- ConfuserEx .NET packer 1 IoCs
Detects ConfuserEx .NET packer.
resource yara_rule static1/unpack002/siticone.desktop.ui.dll ConfuserEx - Costura .NET executable packer 1 IoCs
Costura packer aka Costura Fody, is an add-in for the .NET framework that embeds all external dependency .dll files as resources inside main executable.
resource yara_rule static1/unpack001/SecHex-Spoofy V1.5.8 (testing)/SecHex-GUI.dll costura - Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
resource unpack001/SecHex-Spoofy V1.5.8 (testing)/SecHex-GUI.dll unpack002/costura.dll unpack002/metroframework.design.dll unpack002/metroframework.dll unpack002/metroframework.fonts.dll unpack001/SecHex-Spoofy V1.5.8 (testing)/SecHex-GUI.exe - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack002/siticone.desktop.ui.dll
File Explorer
-
SecHex-Spoofy V1.5.8 (testing).zip.zip 2.1MB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2016-03-15_01-53-50.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-10-18_23-48-51.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-11-06_00-09-12.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-11-06_00-27-58.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-11-06_00-31-39.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-11-06_00-53-53.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-11-11_20-17-45.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-11-11_23-39-46.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-11-11_23-39-51.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-01-01_01-55-46.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-01-25_13-47-44.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-03-15_01-05-20.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-03-15_04-33-01.txt1KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-03-15_04-33-02.txt1KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-03-23_18-54-05.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-03-31_17-32-38.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-06_01-01-37.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-08_01-08-08.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-08_17-43-05.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-08_18-03-15.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-08_18-03-51.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-11_22-30-35.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-23_19-33-54.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-24_18-43-44.txt918B
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-24_18-43-45.txt1KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-26_01-49-33.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-27_18-24-21.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-29_12-33-21.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-01_01-30-28.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-03_00-07-41.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-03_10-00-02.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-03_10-04-28.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-03_10-06-38.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-08_17-34-06.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-08_17-43-39.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-09_00-17-16.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-24_00-37-37.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-30_21-32-53.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-06-16_11-28-55.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-06-21_13-17-57.txt297B
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-06-21_13-17-58.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-02_21-23-25.txt914B
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-02_21-23-26.txt1KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-02_21-31-07.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-02_21-32-04.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-12_03-29-21.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-12_03-32-38.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-15_22-48-39.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-16_05-40-05.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-16_05-41-01.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-17_11-46-31.txt914B
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-17_11-46-32.txt1KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-18_23-53-17.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-20_01-58-49.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-20_02-00-04.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-26_09-35-33.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-26_09-37-18.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-08-27_09-52-57.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-09-29_15-32-08.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-09-29_15-34-17.txt2KB
-
SecHex-Spoofy V1.5.8 (testing)/SecHex-GUI.deps.json61KB
-
SecHex-Spoofy V1.5.8 (testing)/SecHex-GUI.dll.exe 1.8MB
-
costura.dll.dll 4KB
-
costura.pdb2KB
-
metroframework.design.dll.dll 15KB
-
metroframework.dll.dll 149KB
-
metroframework.fonts.dll.dll 656KB
-
microsoft.toolkit.uwp.notifications.dll.dll 130KB
-
microsoft.toolkit.uwp.notifications.pdb54KB
-
siticone.desktop.ui.dll.dll 4.0MB
-
system.diagnostics.eventlog.dll.dll 52KB
-
system.runtime.windowsruntime.dll.dll 50KB
-
system.runtime.windowsruntime.ui.xaml.dll.dll 27KB
-
system.serviceprocess.servicecontroller.dll.dll 34KB
-
SecHex-Spoofy V1.5.8 (testing)/SecHex-GUI.exe.exe 183KB
-
SecHex-Spoofy V1.5.8 (testing)/SecHex-GUI.pdb36KB
-
SecHex-Spoofy V1.5.8 (testing)/SecHex-GUI.runtimeconfig.json266B
-
SecHex-Spoofy V1.5.8 (testing)/runtimes/win/lib/net6.0/System.Diagnostics.EventLog.Messages.dll.dll 782KB
-
SecHex-Spoofy V1.5.8 (testing)/runtimes/win/lib/net6.0/System.Diagnostics.EventLog.dll.dll 139KB
-
SecHex-Spoofy V1.5.8 (testing)/runtimes/win/lib/net6.0/System.ServiceProcess.ServiceController.dll.dll 66KB
-
SecHex-Spoofy V1.5.8 (testing)/runtimes/win/lib/netcoreapp3.0/System.Runtime.WindowsRuntime.UI.Xaml.dll.dll 39KB
-
SecHex-Spoofy V1.5.8 (testing)/runtimes/win/lib/netcoreapp3.0/System.Runtime.WindowsRuntime.dll.dll 130KB
SecHex-Spoofy V1.5.8 (testing)/Logs/2016-03-15_01-53-50.txt
- SHA256 565531e78ef817132a48927e25dbfde7bac061ed4e39eee7d501841f8e539b9f
- MD5 f55ea9c40f054f42fae7673c33724d40
- SHA1 b8a0e79300b40246ade1524e2f19aaefc5351e48
- SHA512 aeeb72da261c7f2fec4e53f94467f1276a9c01abf3dd84e7ab71fc54cd49af1ae8b9a679d731fadcf05c8789eefb4557e1f24fc5cd2a31e95e4649c92ee05a5b
- TLSH T15051DF3003A72C6477E27328C0BB7715AA1A10A7C7B4249D7DCF414B9AA674616D2BF7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-10-18_23-48-51.txt
- SHA256 6e936793f950a48c6296d5a3567cbd840bd5e89f2ee765da69823c0ea0f637b1
- MD5 de430aada711f70011822fa2cbe1c91b
- SHA1 ab9ba5eb5ddede4643391e291cb744e98ac65749
- SHA512 8a795993b1d399da5629d84ec6bb28cc295c0d33d04acffad2d24010c3213aa84d15fa4d516d209af3f75812dcd340c2a1c465266b4d6ce9064fb81d1dd8c148
- TLSH T19751EEB312B0206A7A7F4325C0F21F215A0020AFDDB434E97D5ED14699E3727D6669F7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-11-06_00-09-12.txt
- SHA256 7eccc9a4b8851c9737abe52f753fce092e91c19bc1526aba1b8abe878fdc0d4b
- MD5 e1c30a6e4adc803814940ec0b27e2a30
- SHA1 b7be9b19476c4542b5e9e3277e7c6a85a52a4591
- SHA512 ec1e216d70a509d08887617fb140c50721a68aae6402a5981edf43abcea469ae6464751ba6a38802720eb043807cd67e4d81c9720e8878137391ae0abbc9b66f
- TLSH T1AF51DD3097B42CE4FA624166C0B517231A1C20ABC7BC24B1BD8B51C59BB37449F57BC7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-11-06_00-27-58.txt
- SHA256 c54d6e8042bca8e2a35a174bc91bba55932c4655e16bf21d246804363c9c273a
- MD5 d60584b242dd2d1a653f45319095b074
- SHA1 b8655104b793b73036f76706c075282d1b09c23a
- SHA512 9bf45831a3ad1d4115a06f96e36033bf9b881c3ada03121fc9f878200503824be0d71327d64ce697ecf01657ec9c9f6611e4960fca5929f97d577e1d5936185f
- TLSH T1A6519E3033E414A87AE251B6C0B717635A0C10ABC67538F56D8A5287D8A3FC61AD6AF7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-11-06_00-31-39.txt
- SHA256 231729ddc24aeea1258287913b63a5e6e7bd39925283828354d49989421f2dc5
- MD5 de97be5081eef231699c5c2ad453c2d3
- SHA1 28fa585fb04a07099edbfc8d4de3730265b66634
- SHA512 af7c4776a8dc9c056e7f1735f458ce749efcfec6ceb0037259619ee22303ba9a99da80ff4af3a26e553ecd13d60d93f6157101dae86009a4d088191338837bdc
- TLSH T133510F3013A094E43A6241A6C0FD1721DE8C52EFCA75E8F5AA8E9E4188A374411D79F7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-11-06_00-53-53.txt
- SHA256 dd56bba083d4c529b334b0aaee83abf63526d1d9dba3c8ba9a4e6ffdefb347ed
- MD5 c87e71a5996a0a97bb494eca35df5bb8
- SHA1 7704fcf2893621fc53d63517e6d884a822ee23ea
- SHA512 8520f3cef1c324855f9a0f4f3e2c1dffe6776a56c6afc4874ad2460aa7435066da5fc5c99fed33509392f88026fa7dd691e6cdddcc8f20b678e0c56ab9768c79
- TLSH T1F351BC3003BC28743A6243EDF0BA77699A1C70A7CB7124B16DCA814E94A3706325A9D7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-11-11_20-17-45.txt
- SHA256 e6d383695a013056a9e03cd316e5a6f6bb46e73b99325e415b7529f05d1f9b15
- MD5 1b6ca4e20ff68b696584c907bf2ff7b1
- SHA1 1561f84e05ccada52e67d2d9fc15e6674bf983d0
- SHA512 039927d4b24934c7d258cfe8c9c4180a4fa04affa375b3acf9c49abe6a8daf4277aced60207182863f70c27e73f5af45680e07435c3bc37f055d14d8dd26e78a
- TLSH T1A051DD3403842464BABF512BC4B413275B0422ABD5B7B8B5BF4F714C9A73B0497969F7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-11-11_23-39-46.txt
- SHA256 bdd8cfbc1f7d2db6283feda9c46f3ec56dd7fde0b0a0ab73ba05dfea457b0860
- MD5 4314d5ecb5e2c7a534a05568201a940d
- SHA1 8af2da6782a0b4749e1bea937851ddb01955c3ba
- SHA512 d4040791fc6e81b83ed81b03f2b19b1eb832eca9b4acf7873d9943291de002effbde843496d75e6b1852658a065896f7231fbfe6a76c56804208135ccc191914
- TLSH T11551893C12F424663A773129C0F42F215B0420BBCA79A8A5BDCB51449AA374693F7EF7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2024-11-11_23-39-51.txt
- SHA256 da7d76d6ae8914e0b0bc2b6c2b2d1c8aeddc57695d259814eebd50e94e2c9e0d
- MD5 c4c6c4392185b2036733aa14a1b401f3
- SHA1 2a3437bddc3a10e0cd83dc4747a67f969f4c4af5
- SHA512 b6fd105e1ca6d68fb4b5ab800b06f2016edf97af5441d061a08212c0471757bccbf8e161cdf00ad76aba3936d60a045d3d2dda33d9c908140694dbd9ddf993a0
- TLSH T178519C7642B12C6639730325C0B627715B04B0BFD6B4D460BFCB81C69AE370A91479B7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-01-01_01-55-46.txt
- SHA256 ce677d8546f0adcd991b8639621e7accfa25b4f3f7047a48dbcea33a1ace3e8e
- MD5 4012934f8806a7e7ab56ea5e18bd6911
- SHA1 5c66754ecdfc0c107a36c6d4dde8176d0488b2f8
- SHA512 69756e58c384b3a64107a137ea51b270260cad2d3b969a307e2faf809847b62d2ed58e60061851c963033fe5e9a4eb63fdee640c92fd11de8f20ed8b346a50a8
- TLSH T1C351AC3803862CE4B7627329C0B95B201A0830A7C7B115E5BDFE514485EAB2E57E7DB7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-01-25_13-47-44.txt
- SHA256 f630382611b64bc45773075a9421324a0eb6fc9bbe8aff592044632e4e6a4f3e
- MD5 15836b88cb9bf1b02c7e8bcfbed69148
- SHA1 6d5a687cea92f75922fa090107b873e2f866245f
- SHA512 7c80088b67587934033da82de3b265d821e1c7dc5b9a1950db01e2c9bc307222e13e0f2f280def45bd635d4580242b61bf80a0bc3aa4b2679bc14f7c65ce931f
- TLSH T11951AD3003B8A4A7F9B35129C0F793291A0038ABCEF565B5FD4B51849A22F05975F9DF
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-03-15_01-05-20.txt
- SHA256 7b60f750831989fc60f59db0a8d3cce82ab7a1f2cec2a762865c60d93c34782b
- MD5 f81656b687193936f3d02dcb7c6798e1
- SHA1 7d9d6d5eb7f75a5d775ff5020e815988257140ed
- SHA512 0547474cc107028bf45260f8529e819772d18fcfcc59591274b0487b84a31e204665028c8b75cbc27b872e0122581c641b13e4e5d6463d4825439e497a14db3c
- TLSH T16551BD3007AAAC617553712BC1BE57232A38D0A7C7B554FDBDAB41409AB274412D2FB7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-03-15_04-33-01.txt
- SHA256 46dd5a0e1332129eef5756efd1703688415471d37d9855e25f448695412a37b9
- MD5 9f386ec6b9da9604ddf529aa9996478e
- SHA1 2c775f65c2cdb7711649eba2caaa7397a1e37484
- SHA512 6b976b99c8a6f90337f0c3cff37c627e5efd6982086db81f67e6debb79308dce49e943863b6c1159ab9e03c6d507ab2b2ad0744af89dfc3431db658e2b7550ed
- TLSH T14821F77B13E10CA8F6C6922240BE37135A0421DBEAE0E4A97CCD514496A334D1A4B9DA
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-03-15_04-33-02.txt
- SHA256 3178c094e6d4bc332ee2b8c9e910c02cd008685989e157835df6023d198807eb
- MD5 3831aa7037643b20d811ab685361b04b
- SHA1 101a12a0e068e11dfdbe9b24a7559e36a26745fa
- SHA512 b0094b9c2b12a057085b477bb93703cc423ffbb491526e2c4f0862ce4f3ad755a0d7fc74a87694ca58cab108969fabf8327a3263fa5922ae1e285f16fd3e13ce
- TLSH T1F02179B0137934153BB1F11BC0BE53634E1D526BDBBED475B6CF55C42813B0909666A3
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-03-23_18-54-05.txt
- SHA256 24c94af931e350d9e597a00e95520056f5f1ad8442c1b115f55893b0ed6b9876
- MD5 94c2fecbb7c11a568b6d81b8b262b14e
- SHA1 38a806a515eb618610dbec5e1ea5378368866fb4
- SHA512 26ce5dd678c5dd3ccb23237a61fc34f12a8fa04280fb36322b2667c2087c29fa984a5795382dbd886d36ec60880aef684b443a0ca1d80ed88ce5852e27af31da
- TLSH T125510E7236B8A4F47F6AD124C0FC17136E00A3D7C5B1A4ADBD4ED2449AF2785129A8DF
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-03-31_17-32-38.txt
- SHA256 f2bc6c792f9a748c6087c8fb431e520098589ebde6c703171c99c24fbf3a93d8
- MD5 dcd6eb4efefe2f8cd6b51a56d46a57c1
- SHA1 e4ab3c0dcd6c2b90771020d37fcb89efaf86a5c4
- SHA512 2237be87f2a5b66ff5dbe8f93726640d8fe629b12be61dab9f894a41dc29099e5e643df6b8b1660b22fc7edae119d6dc0eb738767074af46d1ecf4388417a531
- TLSH T17851EC3002C834EE7A525126E2B53311DE0830DBE5B1F4B7BBAE52549A637850E5FDDB
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-06_01-01-37.txt
- SHA256 ba85c9bb17edff4a7a0e755f1bffc0e1c641c213948d42b3b85091b29bbbc861
- MD5 2f7e6073796ff4614eed5d315809013c
- SHA1 bff464a2358275e236f4294aa31e8bc4c52810f8
- SHA512 e545ae8de040203baa522264589d0370b19ee485d5ec5ce6ade8f15da214044f120444cf7930ecd430e2f59f9cc5820ea9f90cf830566d866689a9a9a270ce3b
- TLSH T1E3519AB8238F1C7476537125D0B917138A1822AFC7F1A0B5794E524699E37481287FF7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-08_01-08-08.txt
- SHA256 359e718962e573113b2ee69e8de96af7066b6f7e5cf5be532ca0646f2f5aa862
- MD5 c7a1da366cbf33ad2aed8c5e7218f457
- SHA1 8d0b5ba993383b7f92d1e423818d8a24744c5a65
- SHA512 8c4c660b7182ae07ebbd857bb4fb9a492e2f75e8a72b3af27bf455fa2c550d13b47d388646c6bf39872023f6f1094fdccbc5630131f52865ecac2e46ad83c711
- TLSH T1DE51CB3083862C6CB753B125D8BD47238A1860ABC7B130B779CA97448AE27C112C6FF7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-08_17-43-05.txt
- SHA256 94bac2150cebfb9291891f3e319244a20fd5e89592c294954c51d34f3b922fc6
- MD5 62d5819aac50d152dc67233705e615b9
- SHA1 539e55f7a4b0fed3aab9f6299082b6ab7a28fc7b
- SHA512 948721dd598fcf9adc82058d2b68b2bb2f93da4ddd5c5a605d252aa246eef323c20d0f98a7159ba4c550b5d8ad24a02613786d26c8d75e0758f0f9daaddcccbd
- TLSH T14F51C9300BF42466BBEE512AC2FD37131B1470F7C5A1A4B6BD8E774889727011656EDB
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-08_18-03-15.txt
- SHA256 280fa54658717a4b1ca95441ac12693667e258c68cd0fc386a380f4455ddbce5
- MD5 8698ebbe09c88fc11752dcfb637d3428
- SHA1 b4d53a3aa1b545d0be1ade05ff526afbdd2583ed
- SHA512 20edccad5353730edcacce00bb32c20c0a7d07809dd7e13b1aff8028cf17277e9e780e87f502eb5b464f171fc9e427000a4b2bda36299ccc3a08aa79c00e6b4c
- TLSH T18051BB351AA624E47E6A5228C0F92773DE8478FBC7B1A4A4BCCF5214887370417D69EF
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-08_18-03-51.txt
- SHA256 d297c5ae430455f164ded910f500f648b041fd5710c3b55e43a6f5d8d9b60317
- MD5 b3250b608a4e8246283a7d6bf6643fe9
- SHA1 f4a118c15bfe484149a7b60158f58f18b7bb785c
- SHA512 801035aa8ff3d164cd67f499865c72727c1d415d0a3df4e9c9c447933134f182ec6608e7594ee250e98059c096edd8ed98edab1af3b166165b70c4f4325db3e7
- TLSH T1A0518EB702B524E47E625334C0B637739A8430AFE6B124A578CB561D88F3706155E9EB
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-11_22-30-35.txt
- SHA256 92eb974d7fc858c7ba67659b8e1613a07364afc3157442671432b387e88fe6c6
- MD5 45d25848c8f90f61b22e8d829ab93f8f
- SHA1 e8ccbe7994e59be1e5f303ec6806e79173b32612
- SHA512 bb9ee2b93b0880490770de87a0c691bb208bbe586d697540bba9837c30aebedc274ac9e40f7caacab5174f0f4bcefd36f6e80d5989b51546c47c0dc35233f5eb
- TLSH T100516631828424E4BA7B9239C0B747119F0460BBC7A1E6BD7D8E4244FB73705964BDE7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-23_19-33-54.txt
- SHA256 d3ef4b564d7c226beaac19123829e6ea44cb767e20e184a53860e5c2392da70b
- MD5 95714636a3b0a5289dbf2f2b993181b5
- SHA1 09a2299a5d50f13bc8e905edf443056b6c7d702c
- SHA512 41ecf0192dea3436cf378d9c85a35a82ea58fb95c98a5d1e9eeff6847bb8c2e4d81d75aec33e9d4647bad831dff2a21cec1bf957b0786380983adebdbfac6189
- TLSH T17151BD3112A4647C7D6AB12BC0B727250E0028A7C6B99479F94E42CB95637072E57BEB
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-24_18-43-44.txt
- SHA256 9a251c7e8020f4c58c4bc07044016467f58a56545c44a01e9f75798280f146c7
- MD5 36bc4cf574d9b5c84a1b88ac37bd7cd7
- SHA1 80d030b355e1f204a08a6962f1254cc5af52a2df
- SHA512 19c72bea2721a0d76c55d8405ad057ba57d3ff2e8e92876cb55fd2a124de9e21b75fd3e862d84ae4acdbaea0886caf7c20e415053241e39f8fe286cd723cbb02
- TLSH T126115C3912A108E8FDC2613150BAB31ABA5035D7CCF13989FD8C6384D7567886B8799B
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-24_18-43-45.txt
- SHA256 1a1d891c200827f6d8c5693ff605e4775d62819be7cbf3229c7d57ce5da31a95
- MD5 54542f57eaa2cccafe73c2c611012089
- SHA1 c459c5e674755e7b00f7a1635221e44fa6b98821
- SHA512 698fd43b2a7a05b368fd47165a74fb73e27b21b561a1dafb7878d7d45432aa218edcdca7427931de4b4b91c13428ecc9797cda5f9a2847460a2d9882ca5fce9b
- TLSH T103315B3412AB30B03E7E915EC8F4A7200ED5777BC37980A5B94B95646873B064369EEB
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-26_01-49-33.txt
- SHA256 fcce7b8935b52f738bce888b430d1d42645bc805f64022a82e2455359c289780
- MD5 136f0150c3e39fc462d2ecf03dd10467
- SHA1 72cdc435ded70d93fbdcb817a119c10eb58995ce
- SHA512 a5a83e4a680a4d82d77f69fec1b62602b8871920af1a85c85d3b9bd91b85ab1101438f6a4d13d1bbb1252679a89b537e690e95928d37bef1df165b2e1272f8b2
- TLSH T1F7519C31038E246A7572712DE0FF33309E2CA8E7CFB854B5B94A9244B5A7741129B5F7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-27_18-24-21.txt
- SHA256 bdd3eddb49be60a68f51e4593c57b8a41f868cf6c68197cceb5907f90eb0b06e
- MD5 e1fc9c773c9e3f7a83767a36c88bb0c4
- SHA1 6a3267a00ff8ca6913802a67e9597ed3941e2e69
- SHA512 3c1c30c0cb8afb60848130b1fcfbd2ddf376d3601a60901dbb7a35c00fb035a7f6d9209cd2e39d689d69c7ac3a238c1d307c123b7c21ce2afde41d11db5ee134
- TLSH T1A651D97202A4A4E47D63C326C2FB47234B2020BFD5B124E9B94E525C99E370112D6DEF
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-04-29_12-33-21.txt
- SHA256 a42c390225b8fedc4c1d3e5305e57b932827d41031062ecf19b6308d2ba4c683
- MD5 2c4f4573d0737d8c92654b201e027653
- SHA1 51a23efd7ac893818de041a60f5455b72f983518
- SHA512 dba98f4dbea52971d14d8e327214e5a36ea72933edb085b31efdba3b63022e362ef1bc4fa11e3dedd8454fe0e8e2b93be81ae2a4f5fce8ee6e0fa8bf515397de
- TLSH T1CE51BB3392A81CE47552432EC2BB27215E0060BFDDA1A0E5798E5A42B5A370D1E7FDDB
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-01_01-30-28.txt
- SHA256 b43580c340f51be8ed62265ccf3d9e2f1bdac3074b019cd2537c581f632b755d
- MD5 507b5bf56f3eca051bd1d1293bf740c2
- SHA1 719ffc2349749161c4f1aa0abfd59da3728df394
- SHA512 35bd4ea80421659e617c158bf0417301f4561198c32a97da2ccea295a62cf8d76bc3d2e2fcd8f0975904af88201568718d3ff15866956cb1fea854bf080dcf18
- TLSH T1BC51CD3003AA24AEB6127127C2B703200B58E29FD7B0B0E57B4E7240D5E278116B75F7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-03_00-07-41.txt
- SHA256 4e88c4762b5a29f3c59cc9520742c4e72745d156168aa43c7942948e6157e2b1
- MD5 d0574fec97b2c6c0b59a682cf8aaaa90
- SHA1 ebaa7b47af21e6ec8c55af0da5629a0bcd83ff95
- SHA512 acc66af3ce8b1b98ed0cfd51eb22c7c25b5d8f94205f467a1bf09b22ede02767f22348d25e558d6ae6d1f26e3c4c9738a3488c10a83552be5221f3f62f219738
- TLSH T19A51BD3283E42CE4F67253A5C0F943134E08609FE6A124B9B94E5B4099E37439F569E7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-03_10-00-02.txt
- SHA256 db28fd0fa3d0a08a233308bad2b3bdf687b9f0d8fcf4c28217848add0499a292
- MD5 2afc854026793f6d29aad4de8ac78305
- SHA1 cca9ee6d1c7fc33b2c812c1c30b11d5b87e0c824
- SHA512 8d7c20121de7fc92f800f625254b9d0faefe6dbd66ae91481a5372da62b2468f1ea3053be08d60e01c84177164df1cf205fe45d4ed41e7458881fe4fafc7eeca
- TLSH T1D151CC3202A424E4F752B129C0BD67137F0024ABC6E914B5BBCF52C49D63705DA56BDF
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-03_10-04-28.txt
- SHA256 600c776633793abbc6668cf0436514286a806024ca33e2f73c503c6591a4c4f0
- MD5 5839d833d7ade8c70e6fa36373a79961
- SHA1 7c98eb68ae4ede4ca25c7aa9b077ba360ef153c1
- SHA512 b15d748ecb363b5ce89bdcabc0d72d7843e0743e5f69449abd97d87e3223263f7377b8a465042877527c57e362423e33371ee5f12e4dbc4136f8acc934b71883
- TLSH T1B951DD741285A4EC3663B12BC3BA07231F0018E7C67130F67D5B5A449C6B78192D7AEF
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-03_10-06-38.txt
- SHA256 ec8ff8997457a118449d47c103a1037812f17b199dcb1e294e0885c08c257866
- MD5 09a4a90038e75936ea7271cf06743839
- SHA1 90973e0c14f8049b5f61ea41783b7c08c1609f15
- SHA512 81e8522b643323722d2a2bb1fb18c991bb551c614087e67596843067619d74fa5f345594d857ed5d1bb03d9011211035f0fd6b563a0640557a4453cecc1809db
- TLSH T15951AE34128634EC3662512AC0B507A3CF045AEBC677B0B5BF4A52449C7378A965BADF
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-08_17-34-06.txt
- SHA256 358a2260a530496c2e53bfed599ad04bb6380289fde7d67afd2c3e25367620ba
- MD5 01b0535ba643c0f4c9cdc59c65bcacd7
- SHA1 f131db5cab14387f9b3f5cb817d49221201c84ac
- SHA512 050f69c68ef35e59579fb955ca980c553203c1399b5e1075a6c9a765d8a610d73a257acfde462efc34335a99d1fe5aa01e71ad9865217eb432a55dd3e215ea5f
- TLSH T1E251DD380284A4667B525117C6FC0F93CB00B2ABD6B0A0B7B98E5154B96B703027FDDB
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-08_17-43-39.txt
- SHA256 16e8f4588772bfa83669a2beb7200200285af5dd4d253ad553aa0c17a956ff10
- MD5 426863baf2946c826e0657978d7a2e3e
- SHA1 a0c283043bd03c1a5955097d0c79490ffdc913be
- SHA512 2cf2f4bdc70f6f2de3199619289ede8926a6b9b6484c6dfabead6f33d9b463e1f0b22c99ce331d11114e98141ead567b235e7c2e174ab1e103191f41dd9e877a
- TLSH T1AA51AB3013A824EA3A635127C2F97311CA8031FBCA71F4B7B98B674C98A3705424B5EF
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-09_00-17-16.txt
- SHA256 a9f7b8d7fb3791058e5fc7b3715be3b9af8312fe3a04d2122e6454839f8e9a35
- MD5 97da05f4259c74f0b5efe3993de14127
- SHA1 90c7b4963e1862325021f90b1f1d2c5b2f9e01ab
- SHA512 4a64e58eec6191ecfbb3bc7c43caf64b74b0dcaed93e5092b0acba7c3485cf4f08b41fc1dcc48a82fbebfe4cf23a3b0512e54e133abecf2ccb6285453c012f0e
- TLSH T15051CD311BE824743A6252E7C0F94F235B0830DBDB7124B9798B564498BB307037A9D7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-24_00-37-37.txt
- SHA256 bc17c5ace32edc18d3961f9611de056e5c4174634029cefcba5e486c968468d4
- MD5 a73604c10eca092790b3c728e27ec905
- SHA1 aa94269502b4bde126167dca0f6d6b3d1664b242
- SHA512 8cde805a5795de4fa43ef6c7afeda37cd3eb999e1cab8c4e26f3515b1a0a1d8ba64e94874d8be1386d17235219c82deff8315c7579ca3479ac9950614101713e
- TLSH T1C151EF7D33E424A47A72B2A9C0F94713DE0C2297C9F1E0B5F98E52429963704155BDF7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-05-30_21-32-53.txt
- SHA256 794a125376b78defd2d297d55485196af4dfea8a2e339f9f50fc191b7a0f7788
- MD5 5eb303f7bf09e173eb5cb60d6bb883c5
- SHA1 07b09b440269ef8b425044931cf4f7ef180fb13d
- SHA512 b386d89bf732b6fd5d835ad4b26ac249fab431d86c5e8aedbc38f7667ad30269b19e76bca6b699d16fe3029a4285f91c73551d70993531656108dcc5a23ebadc
- TLSH T1B151BD31128CA4E67556A52CF0FB73205E103097C5B3A4A5BA4E52C29B637039EC75F7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-06-16_11-28-55.txt
- SHA256 fe130d96586c46a799eaa1333bbc994eadc325bef3d8c31b03e1951ca475046f
- MD5 8e9bc88f52587d17fc522af665b814d8
- SHA1 ab3e3d4c2d1c511ddbee2d26951dfb27be44e9e5
- SHA512 a1ea6521ad59d96402d25c76ed2b064c451577cd6b9a6498bc82c2253b7a5dda7d4f5fce4daef67e623d06cc9adc0c9c51f9ce9576da4b4b189f618aa62d577f
- TLSH T18151AC7202842464B55F7225C0FB53215E1020A7C6B1F4F5BF4E5246997378356DAAFF
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-06-21_13-17-57.txt
- SHA256 771ed8dbe0a2c1534ea2a28a4f11e30fec0dc9a514ca12b651199c04305808a2
- MD5 6c3750e06bbfbaa6fc9cc07fb472d3b0
- SHA1 7f92afc9089d3fc832dd96cae04cdba91b84e6eb
- SHA512 fdcfae9ac8aca80df0df3685cef9df6c373a9f61c8e084211997377e7ddafcc5cb798b501f075d8ae0e5ead78e396097f9c0653f6f3a1fbedc60c4b34217c75c
- TLSH T1B9E0C23450A008D971866030A0A763A3740810CBDC9279DD7DCC4207D392B4AAB8729B
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-06-21_13-17-58.txt
- SHA256 041c60f781c1a36c62ef851f2bac057bba0d9b4f96364d5c2988e744ba3f7647
- MD5 9f9d46b9c60b31ceff39223293316433
- SHA1 5c2f221d99865a75afb59621e14df54d9ced9acc
- SHA512 15a029d25f63e19f95dc9336029d8222f3169c75dd91fbed047e3b3b4d05f83e45e5608ce510d9a5919c15fd8b8cbc9029149f68a1e332faff82a2373e314504
- TLSH T16E417D3117A5246EB9E2923BC0FB07214B5020EBC6B534BDB54E51879963FC303599EF
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-02_21-23-25.txt
- SHA256 2ff908a96c8717d64281ba5ff782e3073a24d466915991c122b1268bad9412b6
- MD5 073ee22646508df05463b1bc61f074be
- SHA1 104064416558817ac94a58dd4c2bac49e81f3755
- SHA512 6540929002164bce5bbbc4b133b3972a7002e73658e4bdbf30c9abde1087e109cf8054df0ae1c99fe09a7c23af90a09e204032b27cfe2ae585054a21d16d4f7b
- TLSH T10811E33A119108ECF586A23292BB376A6E0430D7C8F0B4C97D8C5645D6B1758AEC7DAB
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-02_21-23-26.txt
- SHA256 2006f1e8a0e177eb6fb71b498ca2bbe53459dad2852a102e4c3f9a2cb8a9cc1e
- MD5 3938e2511f1ecb68b1918844dc341235
- SHA1 70069c94a4dd3f1f27add8769203221386893904
- SHA512 f68c1cff62ab8fad169ec117ad09092598bf1831a1ee310e4009cc1d8f149acc5765bae822fbcd599538ba4dd7de4a287ac66a81d8ca482bd088fbbf9ff116dc
- TLSH T14C310B3212A924A13672A21FCAFA5B704E1071EBC2F501E5B64B454C5823F03DAB5EF7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-02_21-31-07.txt
- SHA256 2e6996276c484c734755fb563a7254c833bfd07edf8cd6fed695c47c5e8491dc
- MD5 bab9f073ffda8d05d49dfc209352a5be
- SHA1 93c3dac812d1498f866dc500d7c2faf18e2c94cb
- SHA512 d4e05486f70278613e2abd771175c1435e2f3125818fd6a027bc36d455d27c534577c9038007949244438841551b0874cf4ec2eb4fda1cf61c9ebe34fb4aab99
- TLSH T1DC518935128C24F43762B229C0FD47634B0410AFEAF5A095B94E8746DA63B0596DBFF7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-02_21-32-04.txt
- SHA256 85de3115b8ca23218abae924034c47b8745887da22dbc8c6e645a0f99c4618c2
- MD5 c0cee452102e1fd1b8f4b1772ac74009
- SHA1 5040b2b6806d0fb4ac6eff6c30b54fe56127c85d
- SHA512 8e359abe66a3677acd06fd15e17baf6977fa365c9cc5bbf34841c624ff48d8a60997831e791f8d1f40a0c63ad53d516844d4f1c1171f90a6f15b0cd4d12a511a
- TLSH T13C51DD301284E4F437627569C0BC47174F1418A7E6B1ACB5EF4A824C9AB37049E9B9F7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-12_03-29-21.txt
- SHA256 3a98c1f3a73aed91b857a4c83609f70c728e181d2330ac22ebf670001111b61c
- MD5 8064147241d9528a8c9c447f20f55089
- SHA1 370057ce8ff3bd97a35f66c163499f75f84257c5
- SHA512 9580b278eaae879d37c815ca4366c10f681053953e2b887d0ca6159721a9525df440002111979029698ad9dc4a1e7ba09a1b1a4566b71f59909dcf705aa6d0c6
- TLSH T17E51893783A4246BB662832BD2B703214E1830BFD6F134E5BF4A56449AE3744171ADD7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-12_03-32-38.txt
- SHA256 684b2eff2fda5dafcb257c2dea3613ff276c0b36876c833f34465eb0b8a6b818
- MD5 bad68f68d74d77522127c131cb677b86
- SHA1 8e59adb4fe7b60fe73e62596a3c76b11da335d97
- SHA512 f62698c2ddd61ff3740487b1923bff86c8fad7bdfa8b16454d680ad9890dcd9baf73a54e21b86aefaac02b214fe538fc631abab634897e3ee6859ef1ace9fa15
- TLSH T1C751A83403A434EE7A278125E1B90720DE0C22FBEDB1F4D5BF6A964498637841E07BD7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-15_22-48-39.txt
- SHA256 deb4e23c36309f8b0c26caf9ecad4a217deac6c5ef5e382022b2f723f8dc37b3
- MD5 74dd769e16185d856751d4c6618f4944
- SHA1 2189d0d1aa8c076b0e5d40b7c24c17ba0d7921be
- SHA512 b709546d1f1327807db9d00c56ad575cec947f32e775f48ff6f9172c269a8c00fa8f75bfad47440c98e3659a44f61971a59dbf0c2dbce940eaeb0b1a3d648835
- TLSH T15D5188310294ACE47A238225C9B92721DF9850F7C679B4D9BD8AD24CB863701966FED3
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-16_05-40-05.txt
- SHA256 6569a56ac90b8e2081167e81b7929bc670f1a3933968919dee71196fe6db0c45
- MD5 85c64b38622045bf021e2257bfd22430
- SHA1 4a58f0c5a2a0562050b444eabb4d16f221a0606d
- SHA512 b188d042ad8fc273b3b57aa9f3f4f5db0ae02d140016ea15277f15336aeedbba903a5fd40850bb55b68f7c747c3bc1958eb55e4f13bb39e64c5ca1ac76a28798
- TLSH T1DD518A310FA524603B6AB22DC0FD43331A3A94B7C671A4F5BDAB51C49973701A2DADD7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-16_05-41-01.txt
- SHA256 9212af7cbfaf745d40696db812e2ad2e0ebb696f69583d38c70125e61bec48dc
- MD5 40190524304411f84e559fd5b4e21a4d
- SHA1 98c55b079aca4f139a26e0b6afee80ceb199479d
- SHA512 4b617e897fb9f0a30ee4cf73f84d781142058e72a5f419dc156753ca48f8c914b77b7cd703bc552c069a38cfbdea462e5d08e0a928c62fa629e98928fb2d1d03
- TLSH T12951BB33078624703B62572DC0BD4712DF2818AFE6B124D5A88A5A4499E37093EDEFF7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-17_11-46-31.txt
- SHA256 7b5d9ddcb8285fe26cb0d273f6ec929c1df26ccc5b81a40ef1e8faea0c9d45c9
- MD5 0ce011c322a34e6a9eb6934f3a98c02c
- SHA1 a8a5bdc06462dc7f44b4162c18aa457f28647c2f
- SHA512 26ba7e2a149d41d14412b451bb56b8321bdbd777a4e6e3f4948b4b54786d1065963e1b1ebad720c6869872c789a3cf6b3c1d8dffebc918836eb36fb8c81f8d1e
- TLSH T1F211AB3B118908D8F582623150BB7313AA1470DFDCE175E97C8C5649D6923456EC7EAB
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-17_11-46-32.txt
- SHA256 e063abfd627b41e174d07bac5401c7892e31d36af74ee983de1a1ed20cb7c2c5
- MD5 0b2a3bfc54709c4498cc5b9e59dba136
- SHA1 0442f7e1c1d2e1ce291501a3247fb9712b6d06c5
- SHA512 d43d1d07104b4a3d3479d20c1c37bd693f2b5e7f22c37efff723409b029e583e795bbdf47e65a98ec0ef68a829ef1f4d0296d4fe1d5bc5029bc5b1eba026d93b
- TLSH T12F31EC3A129B74643A32751AD0B44722CF7C7067C3B980B5A74B518C5963B131EABDFB
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-18_23-53-17.txt
- SHA256 8b80e2eeed91a8ddadaf70c0f381391f12fbb4d1d2fedac3505393c7123db883
- MD5 0df791d18aebc882820c775adab29be0
- SHA1 f641f77c26bff17cde1bf6b9b3146cf390d393f1
- SHA512 8e401b2597817740a7c0959a8ab0572beec6625d1941faeb767c6f506a7a284e6fc5003adb711d7a08f5d1af1c3091975c550e5f1672c40aec70f105a047f1a1
- TLSH T15351EF3016B524667A72B12BC0F937134E1C609BC7F120E9FD8E594E9963F2897469F3
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-20_01-58-49.txt
- SHA256 a7b836d280cbc77ca830c4ddcc9ed3fd1ebbed0cba3d71cf25dd133a81ad30e3
- MD5 f965bb76646d00c7a5f1e9f7a5c51513
- SHA1 14f6e0613b0ec4109081a0c9e8cb5442c41c13de
- SHA512 852a31a235a4bd19e11fcaa75649ec2a0518bdc3b476013ee5db502081d59863460b8a4f240784ccd97973f9a39129262c7d348450473fa963959c0fb734878b
- TLSH T1D551AD3013862C6C7B926367C0B957201E88A1A7C7B53499BF4E5244BAABB0D17D69F3
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-20_02-00-04.txt
- SHA256 5b7976e2d3750193ad09cdcdaf61b8121d75031f611b70aa8b6051f15a7e8dcb
- MD5 0d1d0f07bfc7950cd58d2c601d46da5e
- SHA1 f9386df00149e52c988b35d12c65b0565b8b4449
- SHA512 f17fe454d0c11b532d0b1e30d677f99a4bb066b6897011d883634e7ece00a23bbdf784afa87a706106304278b314fabf6b32800fa453ac48b8e6c56ee2681c9c
- TLSH T17651A77003A4AC64BB626175C0FD67271E0C98A7C77420B5F9AE8A4CA863B019267DE7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-26_09-35-33.txt
- SHA256 5f28a2231e7a9990a4b455de68ed07eeb080f8aa4d3bdfd836f09e3f6e70686b
- MD5 8b7067d73b7fb29ae11dc6a7cd1928fb
- SHA1 4791572cd1dbf6eb9d2113db02be93e662a58c3d
- SHA512 29498c6f81289b6af1ec460b8f0a93438fc9bc18a50297c8650d4a1ce269e31a1f875a070153cf2c28fbc9806fecb49e8e7e7aea923ae40839392b246548910a
- TLSH T1B151CE31038C24B4B96E611DE0BB3721DB0C2A9BC7F1D8A57B4ED6448A6374516CF9E7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-07-26_09-37-18.txt
- SHA256 3585f3b6f548ebcfa263e008ea6c2471c162dda4a47a9a41ec68849f290519ff
- MD5 508e52194872a1083530de83e348b4b6
- SHA1 6c4918df579eb1eb22a60388aabbb6283d2cb26f
- SHA512 1a6cd7ece540f7d604512b94643c6b6325cb30066dd34df9104086adebcc47ac7faf4fdd38a6d181b9897e252c6a8cb4a767200480da6df17268ed64750b909d
- TLSH T16C51BC7D378924BC3E6A513DC0B903231A0852ABF7B2BCB4B94B524489637C5174B9D7
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-08-27_09-52-57.txt
- SHA256 3e57e1fb9980f0e9baee399aeb113eab83bd9eac3464d9b2b884088ce113fd0c
- MD5 50b910b19996f9fb740b78933fc8f588
- SHA1 7fdb829deb90b45e4da039f9f94082a80bdfe587
- SHA512 3fbcc62a52fd1a8192cfec871374bdc5af84e2714d666c2a8b101321d77e844b46ef38d563bf00945af75392046afd4daf845165cc66f97151a3e285577fa374
- TLSH T12C51BE71238524A6765B7324C0FB1325DE08A0ABC6F320957D4B524F86E27C31E0ABDF
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-09-29_15-32-08.txt
- SHA256 49a4c2e1b9e07e269019fa048c65f67eee0155ca459f7bac127816ccf50ad946
- MD5 86c3b808ed95f9114eb72c45e16c4bb4
- SHA1 0450ad119b41d612876467b9686454aa7a859a38
- SHA512 e0cc3fe972ecf5ec073850f42da8203933d4560339e874886b05f3e3f0ae347176639d433310dde78070ceed5bb37c6d0ace336290acaff9a58640caaa848076
- TLSH T10E519A300384146CBBE2912CE0BC13235E0A20DBF7B1B8A5BB4B570486327852DDF99F
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/Logs/2025-09-29_15-34-17.txt
- SHA256 be9cce68ab2b080786bf05d2e7ccd038455b383d1ea191bc0e11bb1b2d92ac59
- MD5 9770116826d7b670de274ea8bd210cea
- SHA1 d00026b021a5a8ddccb915214bbf28e8a113b838
- SHA512 a82ef8e345307e77215a84d8f0a2b3a293e110ccd70f2f4a6b1848c8a65e20180c084f0f9a0b6ee2ecac688930f907243518e51e528307c46fccff03887850c7
- TLSH T1A0518C3D1788A4F47BE2726FC0BC07235F06109BC7F5A0A5B98A5646946370127DB9DF
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/SecHex-GUI.deps.json
- SHA256 a4cadd5c4f3922a4ada9e4bbc13e2bd779280a9b8cf537b66475fb3559bc7122
- MD5 64ae126cf65a9096d5730e060b448293
- SHA1 621bce8056a378974cc38788bee2c3079aec7a87
- SHA512 8eb0dd523d91555ff65681ebb2d482e86e8ee5c2a8842fbbb479d164981d3d398308d335f8c3ba813007c16bf738c7ae72e4eb3c9d3ec92f4f09312e09261dc2
- SSDEEP 1536:9+lcu7Ll5JBuR6ML1O/1u33ZHZsSGKm6Y8:8lcu7Ll5JBuR6ML1O/1u33ZHZsSGKG8
- TLSH T1B4535626DB88ACE30AB66B961431C092F361832F51106DDE79FC118EDF77E861275B36
- MD5 SHA1 SHA512 SSDEEP TLSH
SecHex-Spoofy V1.5.8 (testing)/SecHex-GUI.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 39882d08403185d68a6363eb5066bd212003fbd479e6aa78ffbe97c4191949fe
- MD5 5b65ac01d6babf936451fb1540a680b4
- SHA1 48fae5874d20a27ab24eeda3a34b36d0e157a15e
- SHA512 41f3a2c83542f94011f6a8dc02d46f2c5fdaa4a3134838c2701daa68f7a12b0e0e61592c38a1d32443573b92807a5137e1127125f69200cbedb9ff97a77eaa81
- SSDEEP 49152:0X/lx35IEurgBWBKH8jkDVFCNXODzWS9HfX0HId:0X/LJIE3+KH4kpc+DX/0HId
- TLSH T1A095238027DD1B42F0B967FD91F184155FB2B7766A22CA9E0ECB08DD0EA2750DD20B97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1905102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\tickr\Downloads\SecHex-Spoofy-main\SecHex-Spoofy-main\SecHex-GUI\SecHex-GUI\obj\Debug\net6.0-windows\SecHex-GUI.pdb
mscoree
_CorExeMain
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
costura.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 41bb464ac7c0d192641077e44a59d7d89860c3c620a59961f2fc4a4be47deae3
- MD5 501981c7fc457d59238eb99780efb615
- SHA1 f1f25c01f6acf33bdd62c4f82d3ef078e76f0906
- SHA512 5921d0662add6c8aa075106878cc56335ccbf059d8bc7f359fe9e02a52ec657c3e5df1c718929564c09f205e4bd299b086f3e7424141f5e55ed0d756f65ee1e8
- SSDEEP 48:6F+lni2qJfjVRPGwzCo4MhTN0KDdilETrVsH4/QWk1qyFVT2IbG:7g7KedGEiYIWM2
- TLSH T1F791A51097A8477BE9BB0FB6ACB3534A4275FA61DC27CB2F19C562172C123180A31F72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10378
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\CI_WS\Ws\198629\Source\Costura_Fody\src\Costura\obj\Release\netstandard1.0\Costura.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
costura.pdb
- SHA256 89b13aa6efbc0b04745a00bb5fcf05b7a4e3537095bde974ed3490a9cf582d17
- MD5 34b42a5776a3ad022b429124d55e576d
- SHA1 6c6000a5eaf8579850ab82a89bd6268776eb51ad
- SHA512 c24bf10e1d95a07fcd65c1f7841d2d4bdf25c5db02f5f4912286c8d6c077fe8bd3fc564cb249cb4ae01aed10889f25cc22a48bd9698499ed556560d0621a64f4
- TLSH T1F35193776F04C291ED9884B28513DA492B3047127602EE7AE9E51B05CCFFDF8077286B
- MD5 SHA1 SHA512 TLSH
metroframework.design.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6f1c73e1957d9fd4c468eed09767e466be99f409f59d1ccf295104d2525bd464
- MD5 5f41657eb3a222c02f7bc862363e74a7
- SHA1 d54d63e968c952b3f723362ae34b6680b70640c8
- SHA512 498f22cb5d6bd0fabe5ef5dc0c61e86883c56d2cd6ae2f7348dea0cb2ee2cfe6e4e1c34414969c21480b0a68d16403dd3a8b0fbbffb0e21aca5612ce2e7198f3
- SSDEEP 384:acZ31YBrJflEqwKXqLy5VsJU5QL3WbxPKN/ip4RorQzw:krUKP5iJUJqfork
- TLSH T18B62510A73F64236D7AEC63169EE811065726B5DA873C73D0CE806DA4EB32464B19F27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\home\dvlp\ManagedXLL-branches-4_0\MetroFramework\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
metroframework.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 baf326f52d39155d722465947f4cc67e6e90cfd0f89954eab959568e9bc342aa
- MD5 44538b311e9ec2bcf0a6452702628d99
- SHA1 da67301539903775708e9ec913654851e9e8eade
- SHA512 b65e3bc1c0f7b4c8f778cf52a36d628301d60aab53fdaf0355163e4865bc3d3adbf8870bb6cefc604708fdf2c0e72258eaf2fe301d524af2f77bc08014c9610a
- SSDEEP 3072:LU0T+erz8jYxYg5lzrPHlMUzxXd4kRZPI9q:vT+erz8jYxYgv/lxXGWPS
- TLSH T139E33B21770D457FC6BF4A7AF0A12492C3B0DC51FA7BDF5D5C82A29C989B794AE01283
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
157918
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
146KB
Virtual Size
146KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
metroframework.fonts.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e96030fddaf7e78401567ee82480ad75ee48d3556199a3f85c0ec669edac2ef4
- MD5 612080028164b12939751dcccbb68d4a
- SHA1 db066593c63d2eff41a5af1b49a3e098b60e0013
- SHA512 1879c960e27e32941c0c992b84803e7a1f8d243bfc88d17d3d32baca772290b9ea60a6ea90d53170be3bf7f0a58fe71ec901dc66aa560b4bf68b1da56c09fe18
- SSDEEP 12288:H+/9JcJlYqCNktA+SXfGpq2fHowSqCNktA+SXfvJR9FrIJJaqCNktA+SXfUC:H+/3qlrCNoh+UqgIwhCNoh+JR9FrIJJw
- TLSH T1BDE429B5760139E6EF11C4B7C260FD80192B7863A77B802A68E3077A88575CDFE53E46
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
677630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\home\dvlp\ManagedXLL-branches-4_0\MetroFramework\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb
mscoree
_CorDllMain
Name
.text
Size
654KB
Virtual Size
653KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
microsoft.toolkit.uwp.notifications.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3576c5b774ea545a55cf97b1bf415eacbb10e37340f59db87c0c441b8f3aae88
- MD5 2bc67154db177b01630b70c6d72ee163
- SHA1 2cdaeecdc6c233227d69ade46f101e00ffa148f8
- SHA512 5489a96fafd44b0b92fb43af1a3e6df370a8c64d74bc5b6194d4c01173a93f06a2d05d95c0bf4891a2eca027e743f9eaaa3b7f6e15658caa88a328dc00e0cf24
- SSDEEP 3072:FJvlT6Yal/tedKs9VIlfmq3AvpTg+LKYsxcL:FJ3omddg+p
- TLSH T151D329201378436FF7DF1739F468483687A6F58B7860E79EDA04A6BA2543B418650FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a5:d8:52:52:31:08:45:03:8e:0e:63:11:48:84:ff:93:48:69:95:c8:4e:17:d1:03:12:52:64:89:51:93:97:d9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US
Chains
Nov 1, 2022
SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US
Serial Number
0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 28, 2021 - Jul 19, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
127814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Microsoft.Toolkit.Uwp.Notifications/obj/Release/net5.0/Microsoft.Toolkit.Uwp.Notifications.pdb
mscoree
_CorDllMain
Name
.text
Size
117KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
microsoft.toolkit.uwp.notifications.pdb
- SHA256 6ccc2010ca843778f4e3eb80ded204c2da573916614a26990ae4e868cb2d97d5
- MD5 dbed223fbe6c765194d726ae69549317
- SHA1 725ae997de3af971cf5126a92e266d6b0ec212d9
- SHA512 72205e997a9218c2d4c74acfe5af533452bbeb42d50e6273f5030dd8278a7ac9d61f309a791b8e1fbd24dd44da113782d93bbb9993ceba6ff1adf2c2f4dfe694
- SSDEEP 768:nkRlZKB2tQjrfKPFUPDvhjpVbeZnI0SBNLUHZufCPlvWqMearbMmozg7hxZptUG:nkNDQ/KPFMT9qSNLU5ufCP9rarfD7h9
- TLSH T14643D50E4295476BCDE220F6169757786330D700EEA5DF37A2983BA1AC5A7644F332BC
- MD5 SHA1 SHA512 SSDEEP TLSH
siticone.desktop.ui.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 21eecaf504b7fe787a45f4aa8f8f36dacfc3ab1d75624dfb41827cdef2a9a589
- MD5 1582aa45d981e0e569c6e05698642b30
- SHA1 763506f312a186c55a04ef6a16ad7e867c394097
- SHA512 278a7a4e2b9d82528200b9f92244db3f228187d15c36fd169deb927e343bc4d0bb29c9dba496f86558aea4f4deb44d1e47a41d5598c0b375d99ad9fbe99cec34
- SSDEEP 24576:UCCxPAT4L7h3M7O2MLBSlvTh/aOBteUePU/DU/GHQYazK/DkWoql3zjbndHQ/jzb:WuO2MIThZNwewYDoyG
- TLSH T12E166D013BD08917D16EBF76B463141C97F6F804E6A7E74E7995F2AC2B9B3684802363
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
b1:71:29:25:46:e9:2d:e2:55:d6:f1:cb:f7:85:05:22:d0:ea:41:50
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Siticone Technology
Chains
Oct 25, 2022
CN=Siticone Technology
Subject
CN=Siticone Technology
Serial Number
3a:93:0b:19:8f:29:72:9a:49:b0:8b:f3:6d:f8:17:ae
Issuer
CN=Siticone Root CA
Timespan
Feb 5, 2020 - Oct 22, 2030
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Minor OS version
0
Major OS version
4
Entry point
4196702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Siticone.Desktop.UI.pdb
mscoree
_CorDllMain
Name
.text
Size
4.0MB
Virtual Size
4.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.diagnostics.eventlog.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8e2cb5727f14eebfdeb2aeeadef055691fc91b23019b868ed5d8a27ea6b9649a
- MD5 ac14143e53d8e9d9e24d0fcffcf340b2
- SHA1 132429c27489ce6f2eb0161d2b7ca4fa5ed672bd
- SHA512 e5f2137ee2c7602d55985698097e5c1d37819222a547a27a2d4f50f96ebd9223d4950299d42bca118b8e576c938649473249d5f4f4a9e8dab359b862f5c6f0a2
- SSDEEP 768:nwaS3btRNtRXkWb0Tad6jirgq2GfmAXOaYbG7GVjoftw19z6K:nXIRJXkWyjiv2LbvWfqz6K
- TLSH T1333309D55F54832DD8E72A33B6728FE10E3497EA2923D6192C1F79C9091AFC047E2B94
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b8:47:5b:ae:e1:37:50:e2:ba:ed:9e:a8:da:95:65:79:85:e7:cf:d9:7a:8c:35:c1:df:69:64:11:15:6e:7b:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
48890
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Diagnostics.EventLog/Release/net6.0/System.Diagnostics.EventLog.pdb
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.runtime.windowsruntime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e76d3e2dbf4176e19f55053abdbda9802c4e3a14512313e0dc703657d5c5c674
- MD5 a8d9a75a833c4935599f64e13b9ad68e
- SHA1 1b0daf140433af606a44a91a56cd2548dac35793
- SHA512 48f0c9dab8bc8cd8be7c39a05b3b3c181ecefb95aab8c671eff756d65583839b4ba44b6f1fadd0f781268b36c277a4b86ee8f052c7bda559a49470a9896f5682
- SSDEEP 1536:mZRPqN1nlYX3AZROKLqU8rQpwGTHBUd6H:JTniX3I4KLq1g
- TLSH T1F333F9017FF81218F6FB1B71B67AA7819636BDEE2822C74D240D908D1867F948F61772
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e6:fd:15:b4:53:2a:0f:6a:46:94:71:5a:4a:da:6e:83:6c:8c:71:a7:d9:41:15:88:3a:06:81:6b:57:94:35:6d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 15, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:fe:01:f0:b5:1e:ff:e9:f9:ad:00:00:00:00:00:fe
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
47578
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Runtime.WindowsRuntime/netstandard-Release/System.Runtime.WindowsRuntime.pdb
mscoree
_CorDllMain
Name
.text
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.runtime.windowsruntime.ui.xaml.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ef18614848e47bb95bbcf8838956c9fbb18ef52c5e2228ef8b8b8b5df2b5ca63
- MD5 624e572a63bb2a717029978e16188dcb
- SHA1 f619da24c31f2f753ce24ed61734c27612c8b051
- SHA512 df6b58c0cf87ec542b21344f41b82adf8db28776bfbf7b2cf9a15b912c2c236040b0e5ff17f6708e892ae64becba0d5ea24d5cf126134eb8c6f6abbdabd478dc
- SSDEEP 384:Sd/cXMUgAWfejZ7kFWFpc/G1stkBAWWFeWT74o9VWqQHRN7svhKtklxgs3z8:A/cXMUAfejZ7kwkguHN8sp13z8
- TLSH T1EEC2B44F8FAE671EC8E60731BDE487252634E2D67D1282352CAED15C580BFD9771026E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4a:27:99:14:c1:25:23:34:ef:0c:8f:7a:31:80:cd:86:50:b0:f5:f4:fd:67:ed:85:49:62:5b:e6:64:7e:b4:9e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 15, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:01:81:3e:22:46:fd:fa:38:e2:00:00:00:00:01:01
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
23726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Runtime.WindowsRuntime.UI.Xaml/netstandard-Release/System.Runtime.WindowsRuntime.UI.Xaml.pdb
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
system.serviceprocess.servicecontroller.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e1429eb39766f73d6460138ccca7b0702b67a0fbf553fa95563753256f30678b
- MD5 e661082385c67e2a7b98de2f7f123cdf
- SHA1 ecdad91b0c30ffd4a3d718cee55520668bafa53a
- SHA512 d2fed54e4f163c1c3c6594877a50ad436b95361f930abb57b5d4ce1ebb8b73bdb3e288524aad942ee8b8d80af3d74afdd8d751dfb2dec72e84eaddb848135f5d
- SSDEEP 768:63OGtQt6GbTK/lWNVz7RGN92D1NltgNofhROOPO9z:63O42alWL7RGN0pg2fh8Oiz
- TLSH T1B6F24B51A7F8437BDDE70AB0ED71C2620F3176C21A02D62E05AD914D2AD6FC48BB1E79
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
da:46:ef:5e:c6:05:2d:b8:fb:76:02:5e:42:b8:35:b3:6c:3c:ac:39:f2:e0:b2:9e:82:05:46:a1:ae:d2:29:1a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 24, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:12BC-E3AE-74EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ca:4f:c2:b3:ed:03:0d:18:6c:00:01:00:00:01:ca
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
29286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.ServiceProcess.ServiceController/Release/net6.0/System.ServiceProcess.ServiceController.pdb
mscoree
_CorDllMain
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SecHex-Spoofy V1.5.8 (testing)/SecHex-GUI.exe
- IMPHASH 6dbf27f4c70fe2c8ed3e0122ba75d641
- SHA256 b779b45849a4ab5bd8ff296e6c95638c5be4da18b67f1fd195b31795bc21cdfc
- MD5 c252a43b1d357d08308690545c617031
- SHA1 10312402951264e103983c4c08582b785b588794
- SHA512 c3f359c1bd57276ee9422151e7b32a8232d88b0d2ea220cdd4c1323c39ba7a19540dcd52b393de47274fbbac1b46f4e75d34173fb037ebc755307c80c8cd586f
- SSDEEP 3072:f8vbzyQ6Y1YXrbNK+3FNxacPEMk65RQA2TWTa/2udv0lf:fszAXNK+3FVFRQdTWTJ
- TLSH T184047B07B2AD11F8D1BBE23C89A24A06F7767826473597DF0390463A1F67BE09E79311
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
79696
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EnterCriticalSection
FindFirstFileExW
OutputDebugStringW
LoadLibraryA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_exit
__p___argc
_initterm_e
_initterm
_get_initial_wide_environment
_invalid_parameter_noinfo_noreturn
_initialize_wide_environment
_configure_wide_argv
_initialize_onexit_table
_set_app_type
__p___wargv
_seh_filter_exe
_register_onexit_function
_cexit
terminate
_errno
exit
abort
_crt_atexit
_c_exit
_register_thread_local_exe_atexit_callback
api-ms-win-crt-stdio-l1-1-0
setvbuf
fflush
_wfopen
__stdio_common_vswprintf
__stdio_common_vfwprintf
_set_fmode
__stdio_common_vsprintf_s
__acrt_iob_func
fputwc
fputws
__p__commode
api-ms-win-crt-heap-l1-1-0
_set_new_mode
_callnewh
free
malloc
calloc
api-ms-win-crt-string-l1-1-0
wcsnlen
strcpy_s
_wcsdup
strcspn
wcsncmp
toupper
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-locale-l1-1-0
setlocale
___lc_locale_name_func
localeconv
_unlock_locales
_lock_locales
___mb_cur_max_func
_configthreadlocale
__pctype_func
___lc_codepage_func
api-ms-win-crt-math-l1-1-0
frexp
__setusermatherr
api-ms-win-crt-time-l1-1-0
_gmtime64_s
_time64
wcsftime
Name
.text
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=260, version=30034,
count=10, id=259, version=30034,
count=77, id=261, version=30034,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=29395,
count=162, id=1, productName=Unmarked objects,
count=10, id=265, version=30148,
count=1, id=258, version=30148,
SecHex-Spoofy V1.5.8 (testing)/SecHex-GUI.pdb
- SHA256 64d236de60ea2d3257dba85c5c1dfa3e8c2123821f8e4ade7c0cdd1c3a1d4a37
- MD5 7d0e9a9ae399a11b9b6645cb1577c326
- SHA1 dbd70768aa768b1570dfc0c14e0c3a25f809dd4f
- SHA512 45d74abd07f05b92cf9b85213db1cc6e2890c91346e156fce18347d32c2c873558cb679cd4307636256f3ca0ab2599498d060b9206c28064c479b70e12172606
- SSDEEP 768:x2414TNpWNZH62L4eERtahv4QGy9VtrPdcBdl1lu:xzeTNpW37U0hFvxdUf1lu
- TLSH T186F28326D3D08A11C711263B8932C30DA6B5D3A96309CFA9F1E4967DF8DF3A49BB5350
- MD5 SHA1 SHA512 SSDEEP TLSH
SecHex-Spoofy V1.5.8 (testing)/SecHex-GUI.runtimeconfig.json
- SHA256 321b4e463bbacd6113aa337511bdebf5e7356e9971744346b28424607c7b483a
- MD5 d720176a229e9d969b40fabeb0baf62e
- SHA1 f2d8e97a6c6098a10dd80553eaaef7547ad32ba3
- SHA512 0844f9aca147014a68248c43310bf97e0a0a3679fc84650aa0a27aa09f70f56fa071c0ace1be80f0e33ce4dd3f865eae11e946d98d21af916dc1a7f945acaba0
- TLSH T136D0A93BC9508CB328F92BB6D23AC281FF24071B11804E2A32BC000C1FB6A630100F84
- MD5 SHA1 SHA512 TLSH
SecHex-Spoofy V1.5.8 (testing)/runtimes/win/lib/net6.0/System.Diagnostics.EventLog.Messages.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3a2ea792755bbe4674f349d7870aeb917494ac39f96a9e5d9625d4ac68dc3ec5
- MD5 286f0a973cf2332fbded81cf541fff06
- SHA1 c712b399a1e9217625cac0fa8dfab1c681eb5174
- SHA512 3b615c3071cf8c13e972391d53ad8310092d2503cd085334162cedcc141b1d25df2694b0034ca87d9dcab26acd69cbc3358deb7bac8a1ec24c142d39eb4e2ac5
- SSDEEP 192:knrMpXKRZwW+1OwvHnhWgN7aFWa8l98RjchC6zm60X01k9z3AifUX:erGKiXvHRN7b8RjcM6a1R9zDfe
- TLSH T10705C3A29E388742CF5A68B17E96F7F36B3943C7084061160AD9E6053D833F89E255FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d9:08:7d:66:d6:d3:8c:c8:85:be:d7:e5:46:51:30:28:98:c0:24:c2:c8:84:d4:42:90:85:01:8a:b9:ef:93:16
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
10566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Diagnostics.EventLog.Messages/Release/netstandard2.0/System.Diagnostics.EventLog.Messages.pdb
mscoree
_CorDllMain
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
768KB
Virtual Size
768KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SecHex-Spoofy V1.5.8 (testing)/runtimes/win/lib/net6.0/System.Diagnostics.EventLog.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fac816ca0bd5d9c4a17693b37575a5aba901d993133b61d7344b597472fa0c26
- MD5 62c63c04c6083330d020cf855c85002c
- SHA1 abfd4f92b132ac47e9b049545be242f86f9a389e
- SHA512 afa4870e91b5528001b6a4019b068aacfcaa8040bb492c12b1dca9b0cd236d847b376d77b6222875eefe0ca377babaa541bfbb19f0165fc305775c36134a79a1
- SSDEEP 3072:PDIYZl6zdsy6PbTH2WAwPvXSMoiWJoQ46Kjbj4+:fZAGyoTH2yXSM4u1bD
- TLSH T176D36C3977EC4F1FE7AF0A38F2B051064B76E2965913F36E8E84EDA509537C06A10297
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7e:15:f2:f2:93:b7:bb:eb:ce:6e:33:2d:ee:b9:dc:26:e5:d8:2b:ee:e7:41:85:6e:4b:ca:13:c5:3f:8b:4a:51
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
137198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Diagnostics.EventLog/Release/net6.0-windows/System.Diagnostics.EventLog.pdb
mscoree
_CorDllMain
Name
.text
Size
126KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SecHex-Spoofy V1.5.8 (testing)/runtimes/win/lib/net6.0/System.ServiceProcess.ServiceController.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d11b97c114101961bcc7acb0bb17e536708593c0321b6107942fba20cb430c65
- MD5 1c710ef8481e54352a4e1f66a8f7ad8c
- SHA1 ccd1388f0f418e7f74f10bad6f32c175b68e6880
- SHA512 f658e2a506e8c7a11a8e91ff069b63e84a1131742cd1928f2b9ca77e97ebbfdcf64b9452496f9e345a9fba70863ce3928fe6c5886a09f2c84682893ad4e1451d
- SSDEEP 1536:1zf8ajD3rRdO3OtMdq+K7j3RN0pmDf93zu:1zzD3116dq+K7jRNKmZa
- TLSH T1B5636D00A3EC077BDADF0AF8BC7696030B356BD66712F72A56DCA44915D2BC865302A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0d:f7:50:6d:f3:32:dc:46:09:d0:05:57:b5:84:52:9e:5f:b1:0d:0e:3e:1c:33:b8:ed:f4:f7:a8:f8:d2:95:d9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 24, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 4, 2022 - Aug 3, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:49BC-E37A-233C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:c0:55:a4:8d:c3:64:15:c5:4b:00:01:00:00:01:c0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 4, 2022 - Feb 2, 2024
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
62922
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.ServiceProcess.ServiceController/Release/net6.0-windows/System.ServiceProcess.ServiceController.pdb
mscoree
_CorDllMain
Name
.text
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SecHex-Spoofy V1.5.8 (testing)/runtimes/win/lib/netcoreapp3.0/System.Runtime.WindowsRuntime.UI.Xaml.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 884442e44bcef27d917e5de5b69cbd4a297830e0b98b84495c7ab7486fa47332
- MD5 7141c72e54fe9a7ed39ef89814de67d9
- SHA1 bccef028036224c6f0bb168d104d0f6adb186dc5
- SHA512 9d3a1da9f050dd7df26f3a35dcfef5766adf4d3627b9d28a57359414b1d67aee7a8b6176674a01a5a3b099e21be5ce9d3c911af42fe5150469e37ff8a92a7efb
- SSDEEP 768:XFUvumWzh6pCPtrpeHWGj45ZOo2HNB+LXDPp8vkyFww8L1v:XSIzDW2Gjjk7akyFwBxv
- TLSH T119033BC947DCC32BDBAE6B79A865A6079F31F36A5212F76708E4E0B869133D10904397
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
41:9f:43:a5:7d:13:db:2d:93:64:40:44:d7:e4:bb:f3:a0:f7:87:b1:6a:f3:ef:2d:c8:2f:20:05:40:d4:5a:d1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 15, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:01:81:3e:22:46:fd:fa:38:e2:00:00:00:00:01:01
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
35982
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Runtime.WindowsRuntime.UI.Xaml/netcoreapp3.0-Windows_NT-Release/System.Runtime.WindowsRuntime.UI.Xaml.pdb
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SecHex-Spoofy V1.5.8 (testing)/runtimes/win/lib/netcoreapp3.0/System.Runtime.WindowsRuntime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 be26699765f700a29c3928e10f6d1e02a297dff3ba6eb7afb6ec41003cb3d665
- MD5 0198a79063c865ed21c95b7400ddd9fc
- SHA1 b56b4bc0760914149e8d43288d5c151b7fb8ab43
- SHA512 fa77da06a33ae646f69dcadeaeb71524a91cbdd1e9d8008c5fa278039bede09dab87b74765ff5fdf133a4f864d2a324659618d58a30e7dd165408b1c3be889ef
- SSDEEP 3072:zmhU+vMwoh1Zz+Wzvo3Z/O6ZFJX3JhKLqAOd:zgU+Ewmz+W7m/DFJXvKe
- TLSH T187D37B11A7FC0B1AE7EF6B39B17552024B32FD96A912E75E244C90FC1867BC149613B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:66:18:e1:73:4c:89:d3:9b:59:b2:6f:e8:ed:2d:14:fe:35:76:f6:9d:11:40:d8:52:0d:45:8d:de:81:92:43
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 15, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:BBEC-30CA-2DBE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:ff:2f:9e:6b:05:11:d3:6b:97:00:00:00:00:00:ff
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
4
Entry point
129082
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/artifacts/obj/System.Runtime.WindowsRuntime/netcoreapp3.0-Windows_NT-Release/System.Runtime.WindowsRuntime.pdb
mscoree
_CorDllMain
Name
.text
Size
118KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ