ItroublveTSC-7.0.zip
- SHA256 d4577799ff5a7cc459ef6d8f29eaa03d45c34a98702f4ed6d1139a4e6a45a1c7
Overview
overview
9Static
static
9ItroublveT...m2.vbs
windows10-2004-x64
5ItroublveT...m2.vbs
windows11-ltsc_2024-x64
5ItroublveT...ain.js
windows10-2004-x64
3ItroublveT...ain.js
windows11-ltsc_2024-x64
3ItroublveT...in.vbs
windows10-2004-x64
5ItroublveT...in.vbs
windows11-ltsc_2024-x64
5ItroublveT...db.dll
windows10-2004-x64
1ItroublveT...db.dll
windows11-ltsc_2024-x64
1ItroublveT...db.dll
windows10-2004-x64
1ItroublveT...db.dll
windows11-ltsc_2024-x64
1ItroublveT...ks.dll
windows10-2004-x64
1ItroublveT...ks.dll
windows11-ltsc_2024-x64
1ItroublveT...il.dll
windows10-2004-x64
1ItroublveT...il.dll
windows11-ltsc_2024-x64
1ItroublveT...db.dll
windows10-2004-x64
1ItroublveT...db.dll
windows11-ltsc_2024-x64
1ItroublveT...en.exe
windows10-2004-x64
3ItroublveT...en.exe
windows11-ltsc_2024-x64
3ItroublveT...il.dll
windows10-2004-x64
1ItroublveT...il.dll
windows11-ltsc_2024-x64
1ItroublveT...PI.dll
windows10-2004-x64
1ItroublveT...PI.dll
windows11-ltsc_2024-x64
1ItroublveT...er.bat
windows10-2004-x64
3ItroublveT...er.bat
windows11-ltsc_2024-x64
3ItroublveT...es.vbs
windows10-2004-x64
5ItroublveT...es.vbs
windows11-ltsc_2024-x64
5ItroublveT...API.js
windows10-2004-x64
3ItroublveT...API.js
windows11-ltsc_2024-x64
3ItroublveT...eal.js
windows10-2004-x64
3ItroublveT...eal.js
windows11-ltsc_2024-x64
3ItroublveT...bow.js
windows10-2004-x64
3ItroublveT...bow.js
windows11-ltsc_2024-x64
3Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
ItroublveTSC-6.1/ItroublveTSC/frm2.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ItroublveTSC-6.1/ItroublveTSC/frm2.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
ItroublveTSC-6.1/ItroublveTSC/frmMain.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
ItroublveTSC-6.1/ItroublveTSC/frmMain.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
ItroublveTSC-6.1/ItroublveTSC/frmMain.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
ItroublveTSC-6.1/ItroublveTSC/frmMain.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Mdb.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Mdb.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Pdb.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Pdb.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Rocks.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Rocks.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Mdb.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Mdb.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
ItroublveTSC-6.1/DLL and BINS/GetToken.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
ItroublveTSC-6.1/DLL and BINS/GetToken.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
ItroublveTSC-6.1/DLL and BINS/Mono.Cecil.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
ItroublveTSC-6.1/DLL and BINS/Mono.Cecil.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
ItroublveTSC-6.1/DLL and BINS/RaidAPI.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
ItroublveTSC-6.1/DLL and BINS/RaidAPI.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
ItroublveTSC-6.1/DLL and BINS/TokenStealer.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral24
Sample
ItroublveTSC-6.1/DLL and BINS/TokenStealer.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral25
Sample
ItroublveTSC-6.1/GetToken/Properties/Resources.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
ItroublveTSC-6.1/GetToken/Properties/Resources.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral27
Sample
ItroublveTSC-6.1/GetToken/StealerBin/API.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral28
Sample
ItroublveTSC-6.1/GetToken/StealerBin/API.js
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral29
Sample
ItroublveTSC-6.1/GetToken/StealerBin/Steal.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral30
Sample
ItroublveTSC-6.1/GetToken/StealerBin/Steal.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral31
Sample
ItroublveTSC-6.1/ItroublveTSC/DiscordFlooder/Class/Design/Rainbow/Rainbow.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral32
Sample
ItroublveTSC-6.1/ItroublveTSC/DiscordFlooder/Class/Design/Rainbow/Rainbow.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target ItroublveTSC-7.0.zip
- Size 7.2MB
- Sample260808-x36khstbpb
- SHA256 d4577799ff5a7cc459ef6d8f29eaa03d45c34a98702f4ed6d1139a4e6a45a1c7
- MD5 ffdd47f01465b717267028ac3c1b4d4a
- SHA1 bd332cd7f2ac29ae0ec2b024b8f06593f29b6078
- SHA512 fce1e4e0f1862f528df4bae8462432e6b5f9214a53ba77f2d398d5c20c9f6f711372887307aa8eb6d42aab57b8f726f6034e809016d8e262884b786814b61853
- SSDEEP 196608:zwCZ46A3E2iOEGPsu/IAeOSlH0sYP+SauxezXoQOcEf:zNS6AU2zEGUGeOS10sg+CozAcEf
- TLSH T1017633DD550A8503E22DB773E6BBE7487E8A507621B1806D43CA8B127C1E7D811ECEDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Detected Nirsoft tools 2 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
resource yara_rule static1/unpack004/bin/Compiler/WebBrowserPassView.exe Nirsoft static1/unpack006/bin/Compiler/WebBrowserPassView.exe Nirsoft - NirSoft WebBrowserPassView 2 IoCs
Password recovery tool for various web browsers
resource yara_rule static1/unpack004/bin/Compiler/WebBrowserPassView.exe WebBrowserPassView static1/unpack006/bin/Compiler/WebBrowserPassView.exe WebBrowserPassView - Unsigned PE 24 IoCs
Checks for missing Authenticode signature.
resource unpack003/ItroublveTSC-6.1/DLL and BINS/GetToken.bin unpack003/ItroublveTSC-6.1/DLL and BINS/Mono.Cecil.dll unpack003/ItroublveTSC-6.1/DLL and BINS/RaidAPI.dll unpack004/bin/Compiler/WebBrowserPassView.exe unpack003/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Mdb.dll unpack003/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Pdb.dll unpack003/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Rocks.dll unpack003/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.dll unpack003/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Mdb.dll unpack003/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Pdb.dll unpack003/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Rocks.dll unpack003/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.dll unpack005/ItroublveTSC-6.1/DLL and BINS/GetToken.bin unpack005/ItroublveTSC-6.1/DLL and BINS/Mono.Cecil.dll unpack005/ItroublveTSC-6.1/DLL and BINS/RaidAPI.dll unpack006/bin/Compiler/WebBrowserPassView.exe unpack005/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Mdb.dll unpack005/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Pdb.dll unpack005/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Rocks.dll unpack005/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.dll unpack005/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Mdb.dll unpack005/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Pdb.dll unpack005/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Rocks.dll unpack005/ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.dll - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack004/bin/Compiler/curl.exe unpack006/bin/Compiler/curl.exe
File Explorer
-
ItroublveTSC-7.0.zip.zip 7.2MB
-
ItroublveTSC-7.0/LICENSE34KB
-
ItroublveTSC-7.0/README.md658B
-
ItroublveTSC-7.0/Source code.tar.gz.gz 3.6MB
-
Source code.tar.tar 5.9MB
-
ItroublveTSC-6.1/DLL and BINS/GetToken.bin.exe 18KB
-
ItroublveTSC-6.1/DLL and BINS/Mono.Cecil.dll.dll 274KB
-
ItroublveTSC-6.1/DLL and BINS/RaidAPI.dll.dll 17KB
-
ItroublveTSC-6.1/DLL and BINS/TokenStealer.bin.bat 3KB
-
ItroublveTSC-6.1/DLL and BINS/bin.rar.rar 1.8MB
-
bin/App.config.xml 186B
-
bin/Compiler/WebBrowserPassView.exe.exe 391KB
-
bin/Compiler/curl-ca-bundle.crt218KB
-
bin/Compiler/curl.exe.exe 3.5MB
-
bin/Compiler/finalres.vbs.vbs 2KB
-
bin/Compiler/finalres2.vbs.vbs 344B
-
bin/Program.cs.js 3KB
-
bin/Properties/AssemblyInfo.cs1KB
-
bin/Properties/Resources.Designer.cs.vbs 2KB
-
bin/Properties/Resources.resx.vbs 5KB
-
bin/Properties/Settings.Designer.cs1KB
-
bin/Properties/Settings.settings249B
-
bin/TOKEN STEALER CREATOR.csproj3KB
-
bin/TSC.sln1KB
-
ItroublveTSC-6.1/GetToken/Properties/AssemblyInfo.cs640B
-
ItroublveTSC-6.1/GetToken/Properties/Resources.cs.vbs 1KB
-
ItroublveTSC-6.1/GetToken/Properties/Resources.resources180B
-
ItroublveTSC-6.1/GetToken/Properties/Settings.Designer.cs570B
-
ItroublveTSC-6.1/GetToken/Properties/Settings.settings280B
-
ItroublveTSC-6.1/GetToken/StealerBin/API.cs.js 2KB
-
ItroublveTSC-6.1/GetToken/StealerBin/Hook.cs892B
-
ItroublveTSC-6.1/GetToken/StealerBin/Steal.cs.js 8KB
-
ItroublveTSC-6.1/GetToken/app.manifest490B
-
ItroublveTSC-6.1/GetToken/sendhookfile.csproj2KB
-
ItroublveTSC-6.1/GetToken/sendhookfile.sln999B
-
ItroublveTSC-6.1/ItroublveTSC/DiscordFlooder/Class/Design/Rainbow/Rainbow.cs.js 5KB
-
ItroublveTSC-6.1/ItroublveTSC/ItroublveTSC.csproj5KB
-
ItroublveTSC-6.1/ItroublveTSC/ItroublveTSC.ico361KB
-
ItroublveTSC-6.1/ItroublveTSC/ItroublveTSC.sln1KB
-
ItroublveTSC-6.1/ItroublveTSC/Mouse.cs218B
-
ItroublveTSC-6.1/ItroublveTSC/Program.cs366B
-
ItroublveTSC-6.1/ItroublveTSC/Properties/AssemblyInfo.cs564B
-
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.Designer.cs.vbs 2KB
-
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.cs.vbs 1KB
-
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.resources180B
-
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.resx.vbs 5KB
-
ItroublveTSC-6.1/ItroublveTSC/Properties/Settings.Designer.cs1KB
-
ItroublveTSC-6.1/ItroublveTSC/Properties/Settings.settings280B
-
ItroublveTSC-6.1/ItroublveTSC/RoundBtn.cs.vbs 3KB
-
ItroublveTSC-6.1/ItroublveTSC/app.manifest490B
-
ItroublveTSC-6.1/ItroublveTSC/frm2.Designer.cs18KB
-
ItroublveTSC-6.1/ItroublveTSC/frm2.cs3KB
-
ItroublveTSC-6.1/ItroublveTSC/frm2.resx.vbs 548KB
-
ItroublveTSC-6.1/ItroublveTSC/frmMain.Designer.cs48KB
-
ItroublveTSC-6.1/ItroublveTSC/frmMain.cs.js 22KB
-
ItroublveTSC-6.1/ItroublveTSC/frmMain.resx.vbs 548KB
-
ItroublveTSC-6.1/ItroublveTSC/packages.config139B
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/Mono.Cecil.0.11.3.nupkg.nupkg 676KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Mdb.dll.dll 42KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Mdb.pdb18KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Pdb.dll.dll 87KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Pdb.pdb25KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Rocks.dll.dll 27KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Rocks.pdb8KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.dll.dll 349KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.pdb179KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Mdb.dll.dll 38KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Mdb.pdb23KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Pdb.dll.dll 87KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Pdb.pdb31KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Rocks.dll.dll 24KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Rocks.pdb13KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.dll.dll 347KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.pdb184KB
-
ItroublveTSC-6.1/LICENSE1KB
-
ItroublveTSC-6.1/README.md704B
-
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/AssemblyInfo.cs634B
-
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Resources.cs.vbs 1KB
-
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Resources.resources9KB
-
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Settings.Designer.cs1KB
-
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Settings.settings275B
-
ItroublveTSC-6.1/RaidAPI by ByteTools/RaidAPI.csproj2KB
-
ItroublveTSC-6.1/RaidAPI by ByteTools/RaidAPI.sln989B
-
ItroublveTSC-6.1/RaidAPI by ByteTools/StealToken/Stealer.cs1019B
-
ItroublveTSC-7.0/Source code.zip.zip 3.6MB
-
ItroublveTSC-6.1/DLL and BINS/GetToken.bin.exe 18KB
-
ItroublveTSC-6.1/DLL and BINS/Mono.Cecil.dll.dll 274KB
-
ItroublveTSC-6.1/DLL and BINS/RaidAPI.dll.dll 17KB
-
ItroublveTSC-6.1/DLL and BINS/TokenStealer.bin.bat 3KB
-
ItroublveTSC-6.1/DLL and BINS/bin.rar.rar 1.8MB
-
bin/App.config.xml 186B
-
bin/Compiler/WebBrowserPassView.exe.exe 391KB
-
bin/Compiler/curl-ca-bundle.crt218KB
-
bin/Compiler/curl.exe.exe 3.5MB
-
bin/Compiler/finalres.vbs.vbs 2KB
-
bin/Compiler/finalres2.vbs.vbs 344B
-
bin/Program.cs.js 3KB
-
bin/Properties/AssemblyInfo.cs1KB
-
bin/Properties/Resources.Designer.cs.vbs 2KB
-
bin/Properties/Resources.resx.vbs 5KB
-
bin/Properties/Settings.Designer.cs1KB
-
bin/Properties/Settings.settings249B
-
bin/TOKEN STEALER CREATOR.csproj3KB
-
bin/TSC.sln1KB
-
ItroublveTSC-6.1/GetToken/Properties/AssemblyInfo.cs640B
-
ItroublveTSC-6.1/GetToken/Properties/Resources.cs.vbs 1KB
-
ItroublveTSC-6.1/GetToken/Properties/Resources.resources180B
-
ItroublveTSC-6.1/GetToken/Properties/Settings.Designer.cs570B
-
ItroublveTSC-6.1/GetToken/Properties/Settings.settings280B
-
ItroublveTSC-6.1/GetToken/StealerBin/API.cs.js 2KB
-
ItroublveTSC-6.1/GetToken/StealerBin/Hook.cs892B
-
ItroublveTSC-6.1/GetToken/StealerBin/Steal.cs.js 8KB
-
ItroublveTSC-6.1/GetToken/app.manifest490B
-
ItroublveTSC-6.1/GetToken/sendhookfile.csproj2KB
-
ItroublveTSC-6.1/GetToken/sendhookfile.sln999B
-
ItroublveTSC-6.1/ItroublveTSC/DiscordFlooder/Class/Design/Rainbow/Rainbow.cs.js 5KB
-
ItroublveTSC-6.1/ItroublveTSC/ItroublveTSC.csproj5KB
-
ItroublveTSC-6.1/ItroublveTSC/ItroublveTSC.ico361KB
-
ItroublveTSC-6.1/ItroublveTSC/ItroublveTSC.sln1KB
-
ItroublveTSC-6.1/ItroublveTSC/Mouse.cs218B
-
ItroublveTSC-6.1/ItroublveTSC/Program.cs366B
-
ItroublveTSC-6.1/ItroublveTSC/Properties/AssemblyInfo.cs564B
-
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.Designer.cs.vbs 2KB
-
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.cs.vbs 1KB
-
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.resources180B
-
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.resx.vbs 5KB
-
ItroublveTSC-6.1/ItroublveTSC/Properties/Settings.Designer.cs1KB
-
ItroublveTSC-6.1/ItroublveTSC/Properties/Settings.settings280B
-
ItroublveTSC-6.1/ItroublveTSC/RoundBtn.cs.vbs 3KB
-
ItroublveTSC-6.1/ItroublveTSC/app.manifest490B
-
ItroublveTSC-6.1/ItroublveTSC/frm2.Designer.cs18KB
-
ItroublveTSC-6.1/ItroublveTSC/frm2.cs3KB
-
ItroublveTSC-6.1/ItroublveTSC/frm2.resx.vbs 548KB
-
ItroublveTSC-6.1/ItroublveTSC/frmMain.Designer.cs48KB
-
ItroublveTSC-6.1/ItroublveTSC/frmMain.cs.js 22KB
-
ItroublveTSC-6.1/ItroublveTSC/frmMain.resx.vbs 548KB
-
ItroublveTSC-6.1/ItroublveTSC/packages.config139B
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/Mono.Cecil.0.11.3.nupkg.nupkg 676KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Mdb.dll.dll 42KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Mdb.pdb18KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Pdb.dll.dll 87KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Pdb.pdb25KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Rocks.dll.dll 27KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Rocks.pdb8KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.dll.dll 349KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.pdb179KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Mdb.dll.dll 38KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Mdb.pdb23KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Pdb.dll.dll 87KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Pdb.pdb31KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Rocks.dll.dll 24KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Rocks.pdb13KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.dll.dll 347KB
-
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.pdb184KB
-
ItroublveTSC-6.1/LICENSE1KB
-
ItroublveTSC-6.1/README.md704B
-
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/AssemblyInfo.cs634B
-
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Resources.cs.vbs 1KB
-
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Resources.resources9KB
-
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Settings.Designer.cs1KB
-
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Settings.settings275B
-
ItroublveTSC-6.1/RaidAPI by ByteTools/RaidAPI.csproj2KB
-
ItroublveTSC-6.1/RaidAPI by ByteTools/RaidAPI.sln989B
-
ItroublveTSC-6.1/RaidAPI by ByteTools/StealToken/Stealer.cs1019B
ItroublveTSC-7.0/LICENSE
- SHA256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986
- MD5 1ebbd3e34237af26da5dc08a4e440464
- SHA1 31a3d460bb3c7d98845187c716a30db81c44b615
- SHA512 d361e5e8201481c6346ee6a886592c51265112be550d5224f1a7a6e116255c2f1ab8788df579d9b8372ed7bfd19bac4b6e70e00b472642966ab5b319b99a2686
- SSDEEP 768:Fo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7J:Fhcycsrfrnoum
- TLSH T15FF2835FB74413B2018206A26A9F68DEE319D03A73664095785DC15C27B3E3483BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-7.0/README.md
- SHA256 e3832c1db119810e6a3381dc56c32fedcec46ad1f3f52e4845bc13929faec26b
- MD5 db9d272774da32c7cbd3e897a2efb8ed
- SHA1 eba03bbf6d622b46edb960518a2f4d412e6af995
- SHA512 5a20cc9e211f899f543191b0fae44432025084de6f3fd4bdde61b37c507cfe69ceb0822f961d7e5dfc0b479ab88c9846574866ec969638b0d753f347c7210840
- TLSH T1E901D31FD3A8D5E505A219A2DD2352636353C0593A723D89606DD1CF137505E8672F4A
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-7.0/Source code.tar.gz
- SHA256 8014035f4f7143a70dbab93ad54c9b52874a6f56425ea5ee0ce0ffae01a7788c
- MD5 f803d556cfbc7814ff8bb7d623883c8b
- SHA1 cc04db827246fd550cd78c0cbe56782cad63f3f8
- SHA512 b8fc6f06fa6e6daf2d3e98854986f483e4aef50ccdae33b9208eb7c012f49ddae6612a1003fe4404e9355bc6b07e835fe152770e68b4a3873ca29e98f10ec7b9
- SSDEEP 98304:UyZ7+NBQhT26IC0QEoiyvpTgPpNCEuUGQQeYwtD:UY7gAixQEoisTgluUGt/wB
- TLSH T1AC06339D01468502D134BB63A13B978D7FC590B561F0D42953CF9E21BC2AB9932E8EEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Source code.tar
- SHA256 2413851120640db78f7eb004f6074e253e88cd51425759ed15867de907346e11
- MD5 ae3e857ea265a6a4e757cf5c3a196576
- SHA1 0af4ddfe220272b82351947fd60dad6fa9022368
- SHA512 b4b9dafdc4d2ca69a91a19fead0f98268d5f26173a1dfbe9cc2646b2a2c58c7dd2d50eff42568c4c2338d272c17077dad3dfc7fd0e11bd5d331a0ba600eed294
- SSDEEP 98304:srVgGiTtHW1j2waAOrIua4izjy/DM6ZA6LSVKO1g5g:sOGi5q6/rIua46Im6LSP1g2
- TLSH T15A562A6880D40D2FDE9D0BFF69221E66A931389743ED6589B22C77B99F37E804D78071
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/DLL and BINS/GetToken.bin
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7e6c6ba0047dc3a5167438772e9b36e96e6089d0234d5a2b64383f243bb496af
- MD5 cf6d9e66237662f590efec6c385db443
- SHA1 751cf7ea6f334c7f8d586c23e9ad7fc8c29876ff
- SHA512 5e72e5d3f5e59552392b67275b78612c4560298152c446ee16606d625e99d26f11dd158b339f03ca2bff077fd9c720366b478da0b0111f560d396c00ec056105
- SSDEEP 384:y2cOt9P0qD2OLHK5JaMbk2a2+1LO3yvVbsoq0iCJ:v9PnDHHKyMbP+ba0iG
- TLSH T119821B1177E88629E7FE9F795C73168112B2BA668C22DB4C1CD550CE4D33B818762FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Itroublve Hacker\Desktop\Token-Browser-Password-Stealer-Creator-5.0\GetToken\obj\Release\sendhookfile.pdb
mscoree
_CorExeMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/DLL and BINS/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a3444dd5c83eebea15a807e4932ad4127ef33dc7c7c2d799f30ded930e1e1a74
- MD5 f494762fcce61f0c294bed88d1b5f3a9
- SHA1 b6d5b9dc666cb75fc8d77f800846a161dc58baea
- SHA512 3a1f74b6be008a95576c899bebdb7cdc53a50c1b68837247d0a4183dd06f2eb191b36591f97f0e1ab2d6bde1a639614a04c9abb5b8758bd5a495371a3a1f62e2
- SSDEEP 6144:9aUU6Xx2AE6gaSTYUs8Nr/jaGGv8+iZKdJDkP0bAB:ziG8Nr/Gv8+H
- TLSH T1A0545B252B985E3BC7CF92B7E06318290AF5D13BB24BE74C9C8CC5BA1D47B658C415A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
286286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\sources\cecil\obj\net_4_5_Release\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
272KB
Virtual Size
271KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/DLL and BINS/RaidAPI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 46e4b5f5e6177e56d6488cbb3d0a8f64c2f0a33c21c0e0cfd9e994a36a4c9756
- MD5 0fc99c54930c6943d70c6d5a9fa7f263
- SHA1 df72714818aa32fab839fa4d2b76a41a7e749a63
- SHA512 0f3bc83a6cff53bbd96ee3ea34e6c9d6dcebd694f23020ec05d428e856b7bf7db14097bb94c041d91670ac826316a80cda74453b6b3fd60629db3356680a722b
- SSDEEP 384:N4T9MzvRydfhFSt4uokwJwA4tOSXQ0RNxEzHtdTKzI8RzhkHmJCO:a9fat3UqQ0WzKremJn
- TLSH T18E728D2627F6CB74CAFF9E7E686302C50A71F3559836DB7D4C98015F5C6210266E0BE0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23434
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Itroublve Hacker\Desktop\Token Stealer 4.0 SRC+TOOL\Token Stealer 4.0 SRC\RaidAPI by ByteTools\obj\Debug\RaidAPI.pdb
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/DLL and BINS/TokenStealer.bin
- SHA256 8af07a8f7e5f55d5a45ee35da09f94c435e5074037523c7afd737ed123ed59c5
- MD5 7fc2c065ed8e61a111cb45bc047fa6ea
- SHA1 ad3a981139e3960cb15eba3c579af89234a0f782
- SHA512 b1e4773fb1cac7b43d6187c4619ca5faef94085bdc8aadda25c36efcc99d0f5230fed10ef807fd3255a58bfc00497f1d33c99057ab365be529ee193127d1a18e
- TLSH T165712F3B6723D755889402B6EA2FDB05FBD280B7090BC0600D5B80DE7AD951B33F9E96
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/DLL and BINS/bin.rar
- SHA256 4c9a5b5bd5a236403856bd14b25d4cc4d39e0b3cc7773a9639d0ad9f4372aa3b
- MD5 050c0e628e33a6dd8ec7e7016f029ec2
- SHA1 a2b480a5104c2edad280144bc0fa7bef5480b35e
- SHA512 e3e2d9e351f9ec1ed9eb6ee1a4fca076f5a6e6b8ec5a5e66a12e0e3e08cf62d97696e9dc86c16f6d89fbd0c43c468250531ad0c35bdf292e00ebf516b4d3a1f7
- SSDEEP 49152:SiAyNLRf/nW1sE2DSxm/W/x4rcxu/a4J8zUQIbKHHFHKfW:SiTtHW1j2waAOrIua4izjye
- TLSH T19295334E54012902E37DE7F2C3FDA748B9C602B664D1502A51CB9EA6AD077E823EC7C7
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/App.config
- SHA256 7921098e47e894412fdfd0cafe0f88cc68497740998eac17c68c00129069d803
- MD5 b51c130a957051ba9fb2245bf76fb6f6
- SHA1 42181e5745daab2a0e8cf87693142828306f9bda
- SHA512 fa2ac3eff5d51aea7acc9cf6aa018a77fae295d55c5bf808c9d7048c801baf4626568f00fb001a9f2780c46dce294482cfeb3045aabe139ddc557c0d3bc11640
- TLSH T1DCC08C4940A8BE279D338F239360C922FFF032A3A424150CF42FAB670B3115D464737A
- MD5 SHA1 SHA512 TLSH
bin/Compiler/WebBrowserPassView.exe
- IMPHASH 6526bb2991df39dd134d2e134366b58f
- SHA256 f999357a17e672e87fbed66d14ba2bebd6fb04e058a1aae0f0fdc49a797f58fe
- MD5 053778713819beab3df309df472787cd
- SHA1 99c7b5827df89b4fafc2b565abed97c58a3c65b8
- SHA512 35a00001c718e36e956f49879e453f18f5d6c66bbc6a3e1aad6d5dd1109904539b173c3cad0009bc021d4513a67ae0003282f7d14b7aecaa20e59a22c6ad0ddb
- SSDEEP 6144:wE+Z7EAXrvPRIxK0zBL/TIDC2dL3RltnfoBglM7zMUdsvk3zhAt76zkizX5:QZ7FXrPy4ix+LBltsgK7zXIqbkk5
- TLSH T1E084AE03F3D28076E8A70570066B5B36DEFABE201635895757D41C89BEB16D2EA3E307
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
NirSoft WebBrowserPassView
Password recovery tool for various web browsers
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
288500
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\Projects\VS2005\WebBrowserPassView\Command-Line\WebBrowserPassView.pdb
msvcrt
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
strlen
__p__commode
__p__fmode
__set_app_type
_controlfp
_itow
_wcslwr
strchr
_strlwr
_wcsupr
_wcmdln
memmove
malloc
free
_memicmp
modf
_c_exit
wcstoul
_wtoi64
strcmp
strcpy
wcsrchr
exit
_cexit
_XcptFilter
wcsncmp
_exit
_wcsnicmp
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
abs
log
_purecall
wcslen
wcscmp
_wtoi
_wcsicmp
wcschr
memcpy
wcscpy
memset
wcscat
wcsncat
_snwprintf
_except_handler3
_onexit
__dllonexit
memchr
realloc
_gmtime64
strftime
strcat
qsort
comctl32
ord17
ImageList_Create
ImageList_AddMasked
ImageList_SetImageCount
ImageList_ReplaceIcon
CreateStatusWindowW
CreateToolbarEx
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
wininet
FindCloseUrlCache
FindNextUrlCacheEntryW
FindFirstUrlCacheEntryW
kernel32
InterlockedCompareExchange
DeleteCriticalSection
GetFileAttributesExW
QueryPerformanceCounter
GetFileAttributesA
LeaveCriticalSection
SetEndOfFile
GetSystemInfo
Sleep
GetDiskFreeSpaceA
InitializeCriticalSection
GetFullPathNameA
DeleteFileA
GetDiskFreeSpaceW
GetFullPathNameW
AreFileApisANSI
UnlockFile
FlushFileBuffers
LockFile
UnlockFileEx
GetModuleHandleA
GetStartupInfoW
CreateFileA
EnterCriticalSection
GetSystemTime
LockFileEx
FormatMessageA
GetSystemTimeAsFileTime
GetTempPathA
EnumResourceTypesW
CreateToolhelp32Snapshot
Process32NextW
LocalFree
GetFileSize
SystemTimeToFileTime
CloseHandle
CompareFileTime
WriteFile
WideCharToMultiByte
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryW
FileTimeToSystemTime
GetTickCount
SetFilePointerEx
MultiByteToWideChar
GetModuleFileNameW
FindResourceW
CreateFileW
LoadResource
LockResource
SystemTimeToTzSpecificLocalTime
lstrlenW
LoadLibraryExW
lstrcpyW
GlobalAlloc
GetSystemDirectoryW
GlobalUnlock
GetTempPathW
GetDateFormatW
GlobalLock
SizeofResource
FindNextFileW
GetTempFileNameW
FormatMessageW
GetFileTime
FindFirstFileW
GetVersionExW
FindClose
SetFilePointer
GetModuleHandleW
GetTimeFormatW
GetFileAttributesW
GetWindowsDirectoryW
FileTimeToLocalFileTime
ReadFile
CopyFileW
DeleteFileW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
EnumResourceNamesW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetCurrentProcess
DuplicateHandle
GetCurrentProcessId
OpenProcess
GetStdHandle
SetErrorMode
ReadProcessMemory
ExitProcess
Process32FirstW
user32
RegisterWindowMessageW
GetKeyState
DispatchMessageW
TranslateMessage
IsDialogMessageW
DrawTextExW
GetMessageW
PostQuitMessage
TrackPopupMenu
CreateDialogParamW
DialogBoxParamW
DestroyMenu
GetDlgCtrlID
GetMenuItemInfoW
ModifyMenuW
LoadMenuW
LoadCursorW
ChildWindowFromPoint
GetSysColorBrush
ShowWindow
SetCursor
SetWindowTextW
SetDlgItemInt
UpdateWindow
SetDlgItemTextW
GetDlgItemTextW
GetClientRect
GetSystemMetrics
DeferWindowPos
CreateWindowExW
GetWindowRect
SendDlgItemMessageW
GetDlgItemInt
EndDialog
SetWindowLongW
GetDlgItem
GetWindow
InvalidateRect
GetWindowPlacement
LoadAcceleratorsW
DefWindowProcW
SendMessageW
PostMessageW
RegisterClassW
MessageBoxW
TranslateAcceleratorW
SetMenu
SetWindowPlacement
LoadIconW
LoadImageW
GetWindowLongW
SetFocus
GetParent
SetTimer
BeginDeferWindowPos
EndDeferWindowPos
KillTimer
GetSysColor
GetMenu
GetDC
GetSubMenu
EmptyClipboard
EnableMenuItem
ReleaseDC
GetClassNameW
OpenClipboard
MoveWindow
CheckMenuItem
GetMenuItemCount
GetMenuStringW
CheckMenuRadioItem
CloseClipboard
SetClipboardData
EnableWindow
GetCursorPos
MapWindowPoints
EnumChildWindows
LoadStringW
DestroyWindow
SetWindowPos
GetDesktopWindow
GetWindowTextW
gdi32
SetBkColor
GetDeviceCaps
SelectObject
SetBkMode
DeleteObject
SetTextColor
CreateFontIndirectW
GetTextExtentPoint32W
GetStockObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
FindTextW
advapi32
RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
shell32
SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
ole32
CoUninitialize
CoTaskMemFree
CoInitialize
Name
.text
Size
308KB
Virtual Size
307KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=22, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=11, id=64, version=9210,
count=11, id=28, version=9178,
count=336, id=1, productName=Unmarked objects,
count=3, id=25, version=9210,
count=58, id=114, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
bin/Compiler/curl-ca-bundle.crt
- SHA256 726889705b00f736200ed7999f7a50021b8735d53228d679c4e6665aa3b44987
- MD5 fd7ac2ff5b13acf3b48478a6da989a50
- SHA1 d7952c26ffd211b9d717e26144cca281223c1dfa
- SHA512 741566dd9b9a9d1fa47ceb26fbb587602c45fc40af2d0012527d0b2b9eae799e6b3ab3a55e71a5a0cd8bc876e579cb6e3469801af7b0d0fac1917d44ed27b111
- SSDEEP 6144:6Nc597qxzwd9aUaNR6dTd4tL2b02dTDkMgX:6Ncf7M576f4tLe0mIM0
- TLSH T1DF24AEE78F852D4928E3E490C9AB126EC959C362EDDBB0B31D193841C785B3D66FD08D
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Compiler/curl.exe
- IMPHASH 94d50e9c220dcd0fe83e2192746e0886
- SHA256 f4be61c70196444c3909101d960bc228a5aab0a992591c3425ca3c98728dc125
- MD5 2f7a5a94c61d0c3d6dd2caa373926a69
- SHA1 741748a24352b9e1f90a033cf80348000c8793b3
- SHA512 c0b6976955a3a72743ddcd0710c8a33702910b0a09edfc8ad519251ef6b8cf47553ab158f70c873295c32427396f85c02481ddf697f5c126cd6957f83d82084d
- SSDEEP 98304:sioHO038qIwwq9j2eHqs61SY2h6xSImk11GzN4+3Pg8qJvToA30eIetWdtp+HzUC:snUqIwwq9j2eHqs61Wh6xSImk11Gzm+S
- TLSH T10B065A84FA8350F2FD5B5DB0A08BF7BF4B359601D820CEE6DA44D941F933A526219B6C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
b8:e8:b4:00:af:64:57:3d:a6:1a:84:01:93:a2:24:94:27:a5:45:0b:9a:a8:c9:55:f9:af:41:ab:db:a0:94:4d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=curl-for-win Code Signing Authority,OU=curl-for-win Code Signing Authority,O=curl-for-win
Chains
Aug 6, 2026
CN=curl-for-win Code Signing Authority,OU=curl-for-win Code Signing Authority,O=curl-for-win
CN=curl-for-win Root CA,OU=curl-for-win Root CA,O=curl-for-win
Subject
CN=curl-for-win Code Signing Authority,OU=curl-for-win Code Signing Authority,O=curl-for-win
Serial Number
01
Issuer
CN=curl-for-win Root CA,OU=curl-for-win Root CA,O=curl-for-win
Timespan
Aug 31, 2018 - Aug 30, 2021
Subject
CN=curl-for-win Root CA,OU=curl-for-win Root CA,O=curl-for-win
Serial Number
af:42:e4:09:5d:94:1d:14
Issuer
CN=curl-for-win Root CA,OU=curl-for-win Root CA,O=curl-for-win
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2018 - Aug 31, 2023
Minor OS version
0
Major OS version
4
Entry point
5360
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
advapi32
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptGenRandom
CryptGetHashParam
CryptHashData
CryptReleaseContext
DeregisterEventSource
RegisterEventSourceW
ReportEventW
crypt32
CertAddCertificateContextToStore
CertCloseStore
CertCreateCertificateChainEngine
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFindExtension
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateContext
CertGetCertificateChain
CertGetEnhancedKeyUsage
CertGetIntendedKeyUsage
CertGetNameStringW
CertOpenStore
CertOpenSystemStoreA
CryptDecodeObjectEx
CryptQueryObject
CryptStringToBinaryW
PFXImportCertStore
kernel32
CloseHandle
CompareFileTime
ConvertFiberToThread
ConvertThreadToFiber
CreateFiber
CreateFileA
CreateFileMappingA
CreateFileW
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFiber
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
FormatMessageA
FormatMessageW
FreeLibrary
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableA
GetEnvironmentVariableW
GetFileSizeEx
GetFileTime
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetStdHandle
GetSystemDirectoryW
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
GetVersion
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MapViewOfFile
Module32FirstW
Module32NextW
MoveFileExA
MultiByteToWideChar
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleA
ReadConsoleW
ReadFile
SearchPathA
SetConsoleMode
SetEndOfFile
SetFileTime
SetLastError
SetUnhandledExceptionFilter
Sleep
SleepEx
SwitchToFiber
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoA
VerifyVersionInfoW
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
msvcrt
__lconv_init
__p__fmode
__p__wcmdln
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_access
_amsg_exit
_beginthreadex
_cexit
_chmod
_errno
_exit
_fileno
_fstati64
_get_osfhandle
_getpid
_initterm
_iob
_lseeki64
_onexit
_setmode
_snwprintf
_vsnwprintf
_wstati64
_stati64
_strdup
_stricmp
_strnicmp
_strtoi64
_sys_nerr
_vsnprintf
_waccess
_wcsdup
_wfopen
abort
atoi
calloc
clearerr
exit
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getc
getenv
islower
isprint
isspace
isupper
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
localtime
gmtime
difftime
printf
putchar
puts
qsort
raise
realloc
rewind
setbuf
setlocale
setvbuf
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtok
strtol
strtoul
tolower
vfprintf
time
wcschr
wcscmp
wcscpy
wcslen
wcsncmp
wcsncpy
wcspbrk
wcsstr
_stat
_fstat
_write
_unlink
_strdup
_setmode
_read
_open
_mkdir
_isatty
_getch
_fileno
_close
normaliz
IdnToAscii
IdnToUnicode
user32
FindWindowA
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
SendMessageA
wldap32
ber_free
ldap_bind_sW
ldap_err2stringA
ldap_first_attributeW
ldap_first_entry
ldap_get_dnW
ldap_get_values_lenW
ldap_initW
ldap_memfreeW
ldap_msgfree
ldap_next_attributeW
ldap_next_entry
ldap_search_sW
ldap_set_optionW
ldap_simple_bind_sW
ldap_sslinitW
ldap_unbind_s
ldap_value_free_len
ws2_32
WSACleanup
WSAGetLastError
WSAIoctl
WSASetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyname
gethostname
getnameinfo
getpeername
getsockname
getsockopt
htonl
htons
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
778KB
Virtual Size
777KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
49B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
97KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/Compiler/finalres.vbs
- SHA256 f76ba0c9cc7614a11a7e1217e2e738196d6da56dec9c96f90a8a64d9f80a4493
- MD5 c8c6b64b81a851311e99d91724496dc3
- SHA1 84dfd037612c878930263d02ecab16814ef47bf5
- SHA512 be6c21ab467e5d0e903c57bab8000edcaf21fc9e4795974a8df0fd6c9d398d8dac449b16bbb8b0cf6fe5ca8d7a8567d566d807ad27dbaebd26519eab91e19798
- TLSH T168410382AC1B8A28837766F10A039EA5EBF1464722715D143ECC6EC52F76105D7A639D
- MD5 SHA1 SHA512 TLSH
bin/Compiler/finalres2.vbs
- SHA256 04084885435b6134e792c03f8b52bf6ea7135c7bd7ff8d3cc3aaedae2c667dae
- MD5 979ba252e2c4e3a386da68ff50fc9d0f
- SHA1 b8fce3dd4ff22aa2fa909c9992cdbddbdc2ffdc8
- SHA512 40a35d0eb276e6983d38fc4469308e6d755507732835a8425e277e623ea4d1c42b4e6a20d6d8a68e82fdc35a8e8754139a440cf380d2520b48af1d4640373de2
- TLSH T12AE026157D38D47488674AF3437BC40ED79851871033E424714C9DC80F312780E22A72
- MD5 SHA1 SHA512 TLSH
bin/Program.cs
- SHA256 14a342c67dfe909e26efe3d8e5f8f9b8a69b74bc784f8e1565fd73e5fb1866ee
- MD5 42e46147c865ebc5a546065b67344d5c
- SHA1 c56d07e29f9ab4284cc28b55112bbf6cba62f20d
- SHA512 659999b3fea4aa8ead67422b7ebfdd3a91d6650fd76b50ae2bb7805ad824af4f642a61a9c5d8d0ab2c8c9b05925d0f2d206c4c0b6658576036f7883b58a27588
- TLSH T14F61FD195A1A5BFD88B36235BF567202E52B02234AB31220F9DD85509FF61BC077CFE2
- MD5 SHA1 SHA512 TLSH
bin/Properties/AssemblyInfo.cs
- SHA256 19dd8c30fdf7ff4a9c0d3d77ca7a10d9cda19196d94ab2f1f72095ba8c4bd326
- MD5 1dc703aeec8e9032463b32a1aca918a7
- SHA1 8b69f9d1b9b9d8c1d6f927a92499c78fd44d358f
- SHA512 7d9cf382bc8ec408f86f1d557bce8cb44facbb8ff46060ad1989eac71645e3f1171978d475fefc54f2f54c0680be7b48fbbf1cb6ea584d22de1dd2eb17f3e318
- TLSH T1DD216B296741A37E8F610093AE6F31C4837D633892EA0C4534B8B853E301A7843A99BB
- MD5 SHA1 SHA512 TLSH
bin/Properties/Resources.Designer.cs
- SHA256 bf5fc6a842c64e93dd0859ac47570ffe1304bf88988cd6a7f75fa30e968d2b81
- MD5 442100a3437d19567217ac066d28d702
- SHA1 e308e27533483544b755d11fb602ddca05d5dcbb
- SHA512 538e0a4d1b8eecd8d2b405a4cf97074d3ad412325b5bc76227d508cdb64b75c7e605f7c668ac725ea6eceb46f25ff141af9253024d741a6d00b4784e78f73424
- TLSH T1DB51BCB71F94C1320934D59F9700F851CB662113C63DE874F8AE02655FB639043BDDAA
- MD5 SHA1 SHA512 TLSH
bin/Properties/Resources.resx
- SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
- MD5 0cd8c971317d19bbed44757809bcb92b
- SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
- SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
- TLSH T17FC11245B1C09D220BF3482DE6527988F7A8923B0235AC54B4DCA61F5F73C85A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Properties/Settings.Designer.cs
- SHA256 6bc3fd642529779a5885e9ca7652c26c4392574a563285c885235d54e8911cdb
- MD5 721d631493bb8758abd3fc60ef4187a4
- SHA1 ef1d5669408350b69bea87b47ddaa2f8ea665821
- SHA512 45ed21e3be96d5823112774531a1debff60376b76f44513cf2df369d1758b0563ea441c37cecf8cb89dba740906225c15897ae1974828532a266507327c5d4be
- TLSH T15B119CF53E91C7360271E6AAD605C162CF32122BCB2EA435308D4205EF3644483ADEA5
- MD5 SHA1 SHA512 TLSH
bin/Properties/Settings.settings
- SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
- MD5 8c0f00d7d9b0046695a0255f1b11b061
- SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
- SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
- TLSH T1A4D0A78994C8880693313970F468E13C91106757046A95647164784F15071D612D35E7
- MD5 SHA1 SHA512 TLSH
bin/TOKEN STEALER CREATOR.csproj
- SHA256 334127c7a29b38b69b478a7625e6461aab8a5c3b706333231d709eaa4b574932
- MD5 5eef3e20174b3d1a5c29f4c33de36cb0
- SHA1 466225128d943c2423049ab7060e6311ff3a15f5
- SHA512 2a7296fa4738b0753f6b69acad50c5bbf286da0922f4ce9fa067d7cf980acbe6ea40c897b5b8b1eef6f6f758170bd91f2e2ab7a69deb931950cc5107ec0ca327
- TLSH T19181ED35D2CC7DBD03B12077D2A3AA05DE6463E314B44864F69DD2875FB2A442153B77
- MD5 SHA1 SHA512 TLSH
bin/TSC.sln
- SHA256 a41be67ff6675761854fb93f365a25a883e5100535cc63968b2ae3d5171b251c
- MD5 a0adcb5d6779e5c43d9838646114fec5
- SHA1 7156c5d88e6e3ddf72db976355d6cb2f06beb4c0
- SHA512 d669c0824007a4a6d06b83646c1772b1c427360731b6dfeca1a06e5fb3f6cc52a1a344f1e0366427f28b960f6ba181ce0a28ad9ff232917af65385dd94dc5cd2
- TLSH T163214FA9214D8CF49D8DE7EA96B12CC73E778141C2AD183C12DD50881F1BB4992BB88F
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/Properties/AssemblyInfo.cs
- SHA256 a5bcae2aa5b9a2055e97f95d9bf99a74abee8b3770aab3d15e4fd5b99e73486e
- MD5 c63cd21935ddb34754a4f58815005750
- SHA1 6a4422177fdb11aa26a501f2949947b73c14fa12
- SHA512 b232f8d4f53feba77a7a7930fba893d06e1f82beaa6df9d6f94323acc809dd0009bc9012940454fa9884c1a9659a071869df756dedfb2e44b5cf2642e952d559
- TLSH T1CEF0F66CAB46A35DCF1004C7BEA371CC077F733441EA5C056AEC3C43F9466749269966
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/Properties/Resources.cs
- SHA256 9809d52b8ca2db2a40d6b02b530e7de6d638158810764113b1599bb12d9807b3
- MD5 77bf5ec0173b49cbf5279a33118a7051
- SHA1 f3c4607194fc0d93534fee313a234f9ac841c820
- SHA512 b41a16016a6ebcb89fbb59f56ead7c0175fe4d917f9e83f699e3826ef8e9fa0a78b84ba0634408dedbf5ddd9119861ca3b7c4a3660ac818954aca28cc0899e82
- TLSH T1742107A7739EC6F945701447593024518A9AE146C6B674ECEC8B10B5D6F639007ACE78
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/Properties/Resources.resources
- SHA256 e13ed2c59366d0eea74863fd71a81f0cb977cce1edfde304fc538690a4f6ac89
- MD5 cd7dbc7abeda9893ce25793744443958
- SHA1 dbbbbe2694d4b9b990881f279b4313574dbeac9b
- SHA512 e880f131ff460384940248ab2ecd97189ae0b7169fe5246440dfbce32f295cbd7697ce2ee65b434a0e40be91b91c21b2c14b1f446b2b1650d0a5d94c0d4f37ef
- TLSH T1AEC08C36130C60B6CA621E7B241875C2122BD619D538296CDCA9223CAFF2317DBD3E62
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/Properties/Settings.Designer.cs
- SHA256 ec875e44e42915fe25f509bf8ac5a03f2d79cb93dae76274d5a2b5e413937b7c
- MD5 e4fc3d373ca2c01619a527ca383b2dc5
- SHA1 09e3084760e0a0fb55f54ae37c627854aad5fee1
- SHA512 699a4cb95dba6fdd19df655a9def4eb60fff4d6d817bfd94dc29efe2210de05f7af39b7671d980f5e0e1d112af19603a7cb1ea95ce5797f2f1f86b3ccb54a777
- TLSH T1B4F08BA6739FCB7D169128C6CA3152A74F77972A863734B8688D0141D502A8043FDF24
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/Properties/Settings.settings
- SHA256 7b0085f88ab02f23852be3c39fd10fa2c00edddc41fc3ac8b50a9521b0f7ecc2
- MD5 c6d957ee386defd82aa0433f1a2a71a9
- SHA1 1f4aedc0f769b6acb032ad9991515e95f3fff1f6
- SHA512 edba2c6a65d4333faa2e00df447ab3f06c174cee3767ec03518fc5557827f819920f8234d27d7ea56e3337f886e464f5a7bfebbaed4665b1ce550f27c969886e
- TLSH T15FD02E589088CC6C8A2161A0B42CE23DD42026238A3C8430B034378F284F4C612EB8D7
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/StealerBin/API.cs
- SHA256 715f2568fb125ed7d02d5c809b524e7b457b7bd055cef79bd101ce64c47848ba
- MD5 0615dd1daea7da770acafd97b0cbaebf
- SHA1 30a2775364fd290c931178df3b633a4a2622a375
- SHA512 e9097ea820177268230ab4461000492172b426206dbb661310d1ff194e5963c8a43b349a7c7b59f0700cedb8566fcadba84e07f8e45b8f611450be19785f2ebe
- TLSH T11351B7B2B78F79569759D0E48130F142FEAEE432039601F5FA8C858CA0FCA4553B8BB5
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/StealerBin/Hook.cs
- SHA256 17e0e5eac35f7f194ea18d819d60038b6bc81cfdafe493c71b3f4f9dc7a56c33
- MD5 804df0603e0a2ee25787d2d677ce9daa
- SHA1 d39bb26a3e3272c532b9ac912101ddd14bafc251
- SHA512 76f4f7161aa10ab0cad006380b25c7516c69d7a1cd5719f40a900bb4b0d2aacdcd377dd54821b4de5bb5f017f5a5bd93673e3685687223ecf204584a78cb3974
- TLSH T11B11F529B30B971E693760739A25A19ADB7213234B93CD1138CE01C4CF729270B3CD90
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/StealerBin/Steal.cs
- SHA256 621a6e31506633c46498d052b4b9dd35cc488a844eeba75d40d0d7db33b4447f
- MD5 c2f1b2f30ee3f8962dcca516d765db11
- SHA1 34af75cfcf906d79bddeb909ad68fa212c086e99
- SHA512 1c5aa35b37d82a9a2dc7b7bd6bbc63d6913042f286bb1193f50043e4e949ad7172fab5d45951b121d8d06672fe484e47ce5d8e023e3c40bf23731af7588ecf7e
- SSDEEP 96:Jo4h4a8U2nFz2VFtZ3VAmI5JvTUqma39DkD245Q3M3BUTtw6sKwOlRCKAGjmRC:9Kaa4f1k5Jblm6h4B6sKwACJST
- TLSH T129021E91B39EDB5E4BE06043A4708565DD2ECABC0A7B08F2F1CF0649F42055643BC9BA
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/GetToken/app.manifest
- SHA256 539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a
- MD5 b7db84991f23a680df8e95af8946f9c9
- SHA1 cac699787884fb993ced8d7dc47b7c522c7bc734
- SHA512 d4a78daf4ae93952197208752d801390ce39a519e7f5aa1360c42fc563ec0e221625b1bfec2a9564fd3dcd14c18b74d5d9fa6e57c2bced40c1f32c6814b4c523
- TLSH T1FFF0DCC1D188CA6AD33042A13A66E420A2AD435B19DD49EC74DC29BB6F0BBC680C30F1
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/sendhookfile.csproj
- SHA256 20382221bcc235ff3a8541e95fd9a335251f6033b7aef57106ee2e5ee8532928
- MD5 8b0f887a538ecfb646a07bdd667e962d
- SHA1 2dbaaaf6018e898241358f31890b7682a82a3eaf
- SHA512 89814bb815e79d1c86afacae914441ef16690d7d98aa1e298809d83e749000585f0e73cbe1df8c00136a170ec388d5fe9679dee6fcd6b2ce60fe5b023269babd
- TLSH T14951BB35D5DC3AA903B11177D2E39A06DE24A3E318A14CA8F65EE64B0B72A541253B73
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/sendhookfile.sln
- SHA256 b5212e967dbf6934dab312faec6c182ffec63734cea5865a17a6e1c9594af3fa
- MD5 b6b0cb245e122c9b599e56c452154dc9
- SHA1 210060230fc0e9edd39c1729f3204b6bcc284ece
- SHA512 3e31b064158857f968cb6ae385e8998a5c753ba156bd0d5eb05acb649ba7ae36193d1bc8b4d7344bc20154c5d8b7ca1145e4e2931348b154066da741aacb515e
- TLSH T16F113DFD111E6CE4AA8523F796E12CC26A378351C19E0D3C32AA18585A1BE51D1F644F
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/DiscordFlooder/Class/Design/Rainbow/Rainbow.cs
- SHA256 ab27147dad3db3cc13ce6541ee0dc19bb2263803575012b6f42d1a06e39f3238
- MD5 d71babf2718ba4dce959930c0ee32bd7
- SHA1 6417014efa4bccba7cc1fe075e9155e984075aad
- SHA512 85167378be60bc86d478937cace5b6af824a10f49d4cc405880aff4c8a4cebcc49252ba3dada5c2898b68338e09fb1e067ae92b634f75111f66ad8887bcd8bff
- SSDEEP 96:JofWITimhv6Q+AwBXkq0HxJWOQmwulT0yfJa1Xb+ls:fITimhv6Q+AwBXkq0HxJWOQmwulT0yfg
- TLSH T1D1C13C6C608007670833B73DDF63822DEF2A51A746E545717F0CA6A2AFB53631E21EE1
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/ItroublveTSC.csproj
- SHA256 7e91a96b0467212b1173d03c2a9602ced90d9a14a7b66c9e3479e3f52fa15430
- MD5 69de83305c65d8125908d484e6da5166
- SHA1 f65c970ea4f7bd18af836b3e3d1886c5f622eb31
- SHA512 977ea250eab92466e3729c7b18ee41939391b71077b9930c440554b755084d0e3fb0165bc6d7b1aa65475cc4e905138589d5c7660b54f1c7b223abf5dedd0cd3
- SSDEEP 96:7YWnpu5vuYwvxxa4xt7Mz6ypEOsHbSrGn0bqDnujOeGzs:7WmYwyseGnVDn54
- TLSH T1A7C12134E2DC7EB803B1117A92839D46EE68B3E348610454F6CEE34B5FB29192257B37
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/ItroublveTSC.ico
- SHA256 6867eedf73dabc91f2556844d37293466d4918b6ebaab6f83d45db8a7f77f8d9
- MD5 849d4b84b6d00e02e22e1e2bac3fb26d
- SHA1 f88d43398865f8497baf226466e3ece0580f64c7
- SHA512 58972da8ea94eba82e4c09f7f2fb569252c8ffeadfc6040f44b41d91c8b7cf02d38ffb6a1b84149e1985b4fb57fe8ed32efdb6e9fb870f96f28565ab57873d7e
- SSDEEP 6144:AsQA+WdlH4piJAiCC+c3e6iiixLifXiiiJ0Ny4SildqqQG2ixiiijEMiViihDfX6:7J+WbEGDfM2
- TLSH T1E474B5E8CADA8111ED8B2778E8761D7AC42BBFBD99B535CD850EB470BEB70D26074041
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/ItroublveTSC.sln
- SHA256 f4090849ef22ba1f0b52a792eb5c1799b7231b49bc8e9666ed180b8ae42bb115
- MD5 e817f37f911ada7ee51873966ec6c87d
- SHA1 b84a225bc2b866b20fbac422fe7341a3ff03c0a1
- SHA512 47a20ae1bf0d0180b589c2c4f8026cb0bc33b12d4477f15db840ebd5286fba75a7dbcc5e7700081fc4056313937624af85009944a686e49e8ab9a99a28f12343
- TLSH T14B21C8AC201D9DE0798A23EBA5E21DC329374240D5AA4D3D52DE58D87B2FE04916B49F
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Mouse.cs
- SHA256 f37f5606e2dbd9eb4d7ebdfad3d963cd4f68b4fb796b8b6c5b5ff3c6d65bf721
- MD5 a87eb8158dee7ae9bfb350e1ed0ec845
- SHA1 50e0642421c18175473bea3810b92932363bd49b
- SHA512 e9b3fa8b63ae2244ec13afecb9903b71d9a6d275a81d6e8293f91d4f87a3f02150add04e1174c54d5685a81918ff1e72f0c5f38fd04161ded54aa5168ac8fbd4
- TLSH T1B5D0C9566657C9240CF39903EB04A066EB03816B02E6EA01BCAC17210F23005AA38E2E
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Program.cs
- SHA256 5c94e623bddcefd9b348371e64fa7a26697dce478e43545ed69d763281da3a0b
- MD5 0d5828d8883dafbbd98b959089d40bf8
- SHA1 1eee610c89282c6802506e632d4a38f9118be02d
- SHA512 d8eaca255c59fdf547d62a0e70d3ec8a38c9fbf9a9a47a03bcb102509df76e7f8f10e26833ac4bfceb9a692630e4e2cd4d894b9ce361377e79cfde5d0083120c
- TLSH T1B8E0CDA632DEE6885AF791FB9A0540D4D973153F0EBD3150FC5C4441DF360058329E02
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Properties/AssemblyInfo.cs
- SHA256 1379b15d78826e538f15ab2ed608c96e364c07ee69cea87cfcaaa8848548dd0b
- MD5 c9fe4e8a8759075a520fb9724f581a06
- SHA1 cdad464ece6bc5fb56ad6f42fa206be6131cf603
- SHA512 e002e8d9e960a5fea2042771e12eed08346fd9b87fdb4d48b212d1487abe47768e00b35d1b313f29639581d797f718fa2fc7c0916f30563478e1c5fce4dda1f1
- TLSH T11FF067AC121AAB4DCF9004D7FEA774C9466F333040EE480666FC3C43F896AB88259926
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.Designer.cs
- SHA256 8c09a384cf3f837378ae14fb5c5268ffbfe8b6deac1a91d2fcce99173b373dad
- MD5 03ef5d2613de1b278448bc3ac7c7454d
- SHA1 3489875774dc0d0eb26edda7fbe149b58a5673c8
- SHA512 d5082893ba54815f8212c30470db1fb157de357bc4ccea4eabb45b5247c0b55bc6e6a1b99e09c63a11f5df5135296cdfbca96221a3a077dbed8d95b0f6b72a6d
- TLSH T17651CBB71FD4C5324834D59B9700F451CB662123CA3DD438F8AE02655FB6390436EDAA
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.cs
- SHA256 ef9164d554fcbfac2d63c470d9d496921ecdec62f718af2f4dc794dbbbbcdff7
- MD5 1bfb12e466b9aca493bc5099abb8874a
- SHA1 21d742e2220ffde5f84e42065f9cb67afc5f32dc
- SHA512 d23d6cbc34715e6b50eea1a6a9ddeaec6512f9a0bca085064486123f042fe9cbe0525bb8eadbc51d47196ceec6809ff6179d185db691aa8375ea0c1349da602f
- TLSH T1713143BF639E9AB64031AA578E016001DFA35167D6B66158FDCE01A09FF339007E8F78
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.resources
- SHA256 e13ed2c59366d0eea74863fd71a81f0cb977cce1edfde304fc538690a4f6ac89
- MD5 cd7dbc7abeda9893ce25793744443958
- SHA1 dbbbbe2694d4b9b990881f279b4313574dbeac9b
- SHA512 e880f131ff460384940248ab2ecd97189ae0b7169fe5246440dfbce32f295cbd7697ce2ee65b434a0e40be91b91c21b2c14b1f446b2b1650d0a5d94c0d4f37ef
- TLSH T1AEC08C36130C60B6CA621E7B241875C2122BD619D538296CDCA9223CAFF2317DBD3E62
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.resx
- SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
- MD5 4eb5913a0e5aa842250f7419538fa230
- SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
- SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
- TLSH T149C11245B1C1DD260FB3482DE6523988FBA8923F02356C50B4DCA61F5F72985A6B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/Properties/Settings.Designer.cs
- SHA256 346c99939b4a4a2851069e60bfa0e9af16ed9bdde09b71036d2699938b53e5ee
- MD5 d4c0fa029fcaf4521acdb89b1362fa80
- SHA1 88b9fc981c6fb85902c13d2001f3c312121ac468
- SHA512 4f35dc6331708ae39353126ef4628b86a4fc66e84f6974371f07344a08f2318de88b7af9f4401c84884c536f1530f28464da63a27a96dc9297e3e93407cf0654
- TLSH T1591199F62E91C73601A2E6AAD605C163CF32122BCB2E9439308C4205EF3644483ADEA5
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Properties/Settings.settings
- SHA256 91edeadaae594471742999919b67fdef7f54af657386e5f3c5280fb25c33f819
- MD5 4d1ac5be5911e8b83bef47cc5458296f
- SHA1 237524250283b15813a5f2a6853845ec86c13c0c
- SHA512 d9f9d5baafe31b4b9612c188edf63a1bb5b3c960efc3a5229b36e5bc886ed8645b5e44f0ae72acdbab4b2eb24438fc4d733706f6c4d47e39f573bf1ab20bfad3
- TLSH T1C9D05E9D9484CD6D86616560B46CF23DA4606A27CA389574B138378F285F1C612EB8D7
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/RoundBtn.cs
- SHA256 9884f2f3d3afc9894f2ada0df3597bc2428a55dd5456b14996d31a113ebb024d
- MD5 a65c5d6379a26f18249e9f76f9d0f29c
- SHA1 9613a5d2874e9add2e063d23c6c48216648d8ac1
- SHA512 90eabc19354ecc46bc013d6f7b57bd3e6b7799c1ed3b13488814e454b6b72b68f6dab9b93f55126d1ebb1013c709a946e0a8c3eafa4e34201d318eb0d0cbc0c6
- TLSH T16481356DA72A4D078A73DA2D9F32610BEE5B74171296460C3F9E00D93F7402CB5A9E35
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/app.manifest
- SHA256 539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a
- MD5 b7db84991f23a680df8e95af8946f9c9
- SHA1 cac699787884fb993ced8d7dc47b7c522c7bc734
- SHA512 d4a78daf4ae93952197208752d801390ce39a519e7f5aa1360c42fc563ec0e221625b1bfec2a9564fd3dcd14c18b74d5d9fa6e57c2bced40c1f32c6814b4c523
- TLSH T1FFF0DCC1D188CA6AD33042A13A66E420A2AD435B19DD49EC74DC29BB6F0BBC680C30F1
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/frm2.Designer.cs
- SHA256 e9e7d38a24a657ab4db94ff1b29e698eacc0741b9ad4708a46ad545c77fe06da
- MD5 47b9c1d2a45b9c88a9d136c0b2884db5
- SHA1 a9469a9dc625db6cfacd70421cfa3af2f6e4fcc5
- SHA512 4bc4912a86fce06a23bb946d9c523a7902ddfff916f1ddd0991386b3c74072c54bfb55195853b109d8a0a91926142fe7a5ab586e9644aa7abdc6cfebcdcceb21
- SSDEEP 384:N+dc6SE8d6BuPF7mlmab4VAtgad94zezIV+XplSDzO0V9w5TYNfv9JSVk98MOaTQ:UdpMmmrAuW
- TLSH T18B82AE28032D908CC9FA610C6F059AC0FB65212F7C5BDE2D79AFD695CF366254338AB5
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/frm2.cs
- SHA256 fe15f27d6c428f7c92249461de50a1b18db6a3af91cb0989ff54e49865c7e67e
- MD5 34d14215be94b15f75c065b3cac0b7b2
- SHA1 682f9cb2dfcebf571f9b10fcd3ed943079863a16
- SHA512 98689cc6a5255a90eb51dee8b770bba1685fe14b28051f302a9a5617820b147e2044d0706c79b46ca589222a4226b393aee8dcfce38b10cac2443a319e616b5d
- TLSH T1CC61AC4C339E8B6D41A3520DFA30358ADE6DE10B025551B9FEFE90C7CB384954768BB5
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/frm2.resx
- SHA256 2d09c8a6a77c2697008ecd854adf16fbb1c43d6443f7cf6a5e3a1f770cbf10aa
- MD5 52043e4305ef346163d6808f570487bf
- SHA1 0bb00aefac778e032335168b30a59c49e3e212e1
- SHA512 085edf11df06505eda5daae4fa75b29ba1832689b523f2997679c4d545d73dd7bb574bf79dbcca3fe081ca77a68ec68ef118d907d5afa759790e4ca558588708
- SSDEEP 1536:Kj2v6LL9mhrSuOvM1zhktTzPiX0K8rah9tC1fz20B6/w1syVtF8AODJFURrRZuTf:Kj2SBbPUnwTLagxj66rR8Y9K6Qfi/Hvs
- TLSH T19EC4F77880541D6F2AAD0ECF2A055E5BBD3128C747DD0481B32C7BBA9B3AC958EBD474
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/frmMain.Designer.cs
- SHA256 1f977bf0e390ac5eb960cb7b25d1c4934756e23055bd0fe07ed837aa981ced83
- MD5 eb44fdf5b3cd40ad419579e5a51569dd
- SHA1 320eac6c21678318a0f6adfbc89a0e24d30a8a75
- SHA512 108ce82a74db8a5e97a70b3e6cbceb2cf2942e5dbda9cf430d28b4a300faab2fab6c880cb087e7f5307d3559bef7186407778f50635aac5e4e952a01f9426fde
- SSDEEP 768:alt/bOSOumm7jYaEaJiLxTFfFwsZfFft41/x/Wicf+hUZ:mrmmPYaEaUxTFfFRZfFfy1/x/o
- TLSH T1FD239D28132ED189CAFA11496F058590FB29212F7C97CE3E789FC695CF36635433897A
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/frmMain.cs
- SHA256 ecbd6de19ff93139c8f97fb33ba2d3724e8fa0bbb16e86b1ce69374cd0fd6de7
- MD5 2167aa7e79a5982f6538c80bb44692ec
- SHA1 22111dbf0be05a9e181a9ab3f9115b22e5c17a8f
- SHA512 9b7bca25aec482fb6d2539fa46b1e3d2977ec3397f4183a40e8f5d3b4f0ed5dffcf318d69b2665ae1dd5c548d3ae46225cdd831acffdbd05e0d1756ba346c6d9
- SSDEEP 384:EULzqPOXWxFwPokq7gmxrxhQwjRCr4Ju4LnTC5JwSMW:wGGwXW/QwjRJu4LnTC5JwSp
- TLSH T1D2A21E1D158E9BABC5B3623AEF831407EA56122F06958270BFAD8AC65F7407442F4FF1
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/frmMain.resx
- SHA256 2d09c8a6a77c2697008ecd854adf16fbb1c43d6443f7cf6a5e3a1f770cbf10aa
- MD5 52043e4305ef346163d6808f570487bf
- SHA1 0bb00aefac778e032335168b30a59c49e3e212e1
- SHA512 085edf11df06505eda5daae4fa75b29ba1832689b523f2997679c4d545d73dd7bb574bf79dbcca3fe081ca77a68ec68ef118d907d5afa759790e4ca558588708
- SSDEEP 1536:Kj2v6LL9mhrSuOvM1zhktTzPiX0K8rah9tC1fz20B6/w1syVtF8AODJFURrRZuTf:Kj2SBbPUnwTLagxj66rR8Y9K6Qfi/Hvs
- TLSH T19EC4F77880541D6F2AAD0ECF2A055E5BBD3128C747DD0481B32C7BBA9B3AC958EBD474
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages.config
- SHA256 8ba11c643b589ffb81f7fc7972d6d0de96e139c5a27da20c5c8026fb5c9f7847
- MD5 e6d584b542a95370be7c8fc9403666b4
- SHA1 e967ba2e4af48d641dfdf2c3395ec9ea60e95c22
- SHA512 36ed1cd6b858ec9838e6fe9b4dc91bab43d3aba668480448a18ec80e4193fd18e023fb2bfe057be327c4dc0605caa7dda0725e8288612a599c77531ce0fa7c1e
- TLSH T199C02B440324D6338BE02E24B7EB4488273C3127B02108CC7C5013E6836E4094507225
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/Mono.Cecil.0.11.3.nupkg
- SHA256 43125c46ddde632ed1d26736e45fe13399f8a95a8102564286c10a9fe63d9d75
- MD5 1c4e21f49f7e2bcaa588d5c8f0e0f2bc
- SHA1 ed2722b43e75081333b062e926b98227fa530d87
- SHA512 4a555e9464c142912d5bc24650136b41d5c37bd784b87ad34c2b7f4c8bfa1a2670c239916f3dc9bbe1138542664bf3003144fbebd3becad2ab7771d41564c0ff
- SSDEEP 12288:VIrzz94V7+51lEhrBzQoy/xTqYiX0kt0MkA45ml07TrYfjLpHotPBpEb15ov:VIPzuJWlEhtzQoyZTqYk7hk/5zYfHp6D
- TLSH T1A9E42370D159A6B4CDEB1CF23DCBC1F837D32D2710A6D5DA0301C26B98C9B976936896
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Mdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1a05f2f7aa387210bfd0202fa70a06de73040765f5f988c3e8d50e5fec7827bd
- MD5 1cadd4d13fa6ac620fc0be9700e36b89
- SHA1 410f6bdb164bb94b3cd516d155dbd6e8dbe238cf
- SHA512 558ec71134938aaaafd41d91036e2c8f199e692042bec71abb851fea4e091e31fadc87f82f8ff3ca67178ec23393b9423813c7acb32992deb6edce7aca312e53
- SSDEEP 768:fr5EYZep98C87KHeBUZwrEzsEAnbF+em50Kktms4CRIcZwMRTIzaAtpT:fr59g98C87KHeBUb5AnZG+TdwMRTdAtB
- TLSH T17E1319156BFC8B27C29E51FEA4D125060BF19178A613FBA79EC0E5F7BC43B85450222B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
49122
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\mdb\obj\Release\net40\Mono.Cecil.Mdb.pdb
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Mdb.pdb
- SHA256 cd0e2a8ec6efb0b98dc9f5b3f88c311f234c881fc1da02804ad60091893377b1
- MD5 15ae0ef0497fdc03d208355545ab7ede
- SHA1 58aae2d2ced7de40780ab240bba72b4f6595241c
- SHA512 a8048d1d4aac80d82074a2c80d67e8878d441a0b1064d2b72b8aa1ccd0fdc3a52c3aceb7e146df5628c08c78912ebbc9fc8a0b44ebecae737f3fca260e44ef6f
- SSDEEP 384:F3YdBvkE/zECNLuSW5oAS+yjnLUSOcw6uRK2tmrNvnmBXizuXNYpkUxBLxukOVO6:CBvkE/znuSEajnLUF7FCBLxu2Ktn
- TLSH T17E82A326E2C88759CA53653B8172971FB3F6D0C5D78F0F0683ACAA79BCD27147262345
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Pdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4ae57a84baf3a8191312a860adb0ab65199c023f951bd739c6180965fd9b00d1
- MD5 d1d8de0281da552f89729a148a316d3a
- SHA1 8a5b086493b97ea9e2b90978f77de845dea26eb5
- SHA512 b331977a759068266fbb5cb997fb09251f8607d2df34765744ecbed37a00437739664b093aba2bf39b34dcfdeea30badf45fa3390c805d1ffc63d3dbb6ef1475
- SSDEEP 1536:3U2qJ+RazRt/Kc4oJiOxFR4NdJF0/RfhF46HAoYKHgPzpS6wgfa1C9w:E2MRtrfrR+Pe/BAiAzpQgy1C9w
- TLSH T150936D36E7A8A566D8EC64761476090903F2D2AED1539B565ECCBEF8192FF300933393
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
94650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\pdb\obj\Release\net40\Mono.Cecil.Pdb.pdb
mscoree
_CorDllMain
Name
.text
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Pdb.pdb
- SHA256 40ebe57989d42f07b74d3632140c889fe6b456d53f53d35f854c317d2765d786
- MD5 1bbadbe92ebc6765f5df8ba52c483ac3
- SHA1 e2b3e790a4e6e7d3f01c45dee2f0bcf5e532711f
- SHA512 700e64d8070233cca1c782768938ba6feb9490cc37887b1e7ac960243eb865cf64c02b58e95543e2317561c5b0005106d37974d282dc076419ca404f43ce2371
- SSDEEP 384:FgEm/xKLGaNrXoJL8xGWYBj1NoL9SOp9uxTt6qaA+3eOMH2XsTus7foJ4RmkZZQ7:7mGnWgxG3B3oL9Nm8A+MCs7RzQ
- TLSH T15EC2A726F2B4CA29C867073D81B743027BF4D189931B0B0B13ACF37599DB7682ED2259
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Rocks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c1ed51d12a59edf8b8f3d0a174a8c08ddc1b7e4032659ef983d071db4e1d5230
- MD5 e479be300cde63f146e245e5bfbe87dc
- SHA1 6e2172fb8b279f48bc77822b2016ec5d6ed5ec0a
- SHA512 caa6e3bfb98741a6331c97e4725e5be99f6a9ff6be3b82725745ecb0b3b24d2c6bf2e74d72a64935b40ed8a7ef99757b94310f4951f74a1649bd6e259b798664
- SSDEEP 384:D0ve8JOuJ5iC7n2NwxEXCni+FXcMeDz8PmR1ugLoaeuLMBG9UphJAprjEMuFLHad:D+m4iCyrXOhW8uRssveum1pZFLHFB1
- TLSH T1F8C229012764CB37D1EF853678E1129803F7C1A66103D7199CDCA6FAAC8B7C59B117EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33578
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\rocks\obj\Release\net40\Mono.Cecil.Rocks.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Rocks.pdb
- SHA256 f0423005d2a238178d841a7035e72df4160a89bfce4d894b83588ad2a81fe7f4
- MD5 e40811196a1034c70f199950233c372b
- SHA1 b51fc11b23cc68ed31edf8b1c64ab435798ea570
- SHA512 520e454a498811d0b8caf3347d1652d0a8ec8acb759ff4e59b03eda007a58498235ce6439a78e49fc2f5f1776b06acd37a7096c838ca775d1bf160f288ab3a2d
- SSDEEP 192:I2Djb/OLyWM45mBSOp9qxauwYgKiGqCEyKKJqqFeWixQ:Ikj6BL4SOp9qxnwYgZV90qPWiS
- TLSH T1A0028113F9F88F5DCD8B08B8C1639319BBB0D68CE3460B0492A3E679DC463A523B2345
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 96fa99d63cd84b76eb37505afc603d404e12fd5cb27e8caa1581aad97b74ae69
- MD5 272745086cb31748fbab2347bf1b42fe
- SHA1 9060569b45942016a5f1263f47abda63d4c59687
- SHA512 8634d0e217a87e8e61373f5d8a70b7738430c809815648937d01b5d74f2f736eea1118fefcc012010995a71efbe53ca2c2e48501c74d16634e24ca30e5dd1843
- SSDEEP 6144:c+hUsGuheHUup2gXxtgvZqzoxm+mYrsrZvomboSF2Y:vuWeHz0ktgvYzMrsvsSF
- TLSH T130746B2023FC863BD69F977BE06B042D46F5D456738FEB895C88A7FA4C47B924900267
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
361038
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\obj\Release\net40\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
347KB
Virtual Size
346KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.pdb
- SHA256 20306b719de7a825dcf3c00007878731f627d6d5fd0707852200c6af2cebf4f0
- MD5 7e6b56d15bdc4d172b390af7ee31be76
- SHA1 b817b14de8ad7c9cd4b1777edfff02549ed797fb
- SHA512 9772411d1d2c774383a9318d5ed8db506c66288008af54a33d57fae80a3ddfba8d487d89b579ff6b54279ea695e1508d537f2f630c068306148c9b9984c85049
- SSDEEP 3072:fiuHAXWaW1/UWg/+EANM9Amv0HagjsgxIdPYfwCVadme64qqfg:fJAXRI/nVId0GxqZ
- TLSH T10704080AE985633DCB6915BA685361E42BB8818DE64B4B4363FCF239F8473183F53359
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Mdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5dd65700e11d8a9e3461044b0e6f82abbedddd6fc90afb53c2b53744b9281233
- MD5 54016afec9a4541de4ea7fdc4536bee6
- SHA1 06016e9cc71c257e9e0dc7a6a53844233b977dac
- SHA512 a276fbb162233936b20b4dad82b19f1ad90fe3af298c4e8fd8fdf9328758db378d69f2f4d1080444e7a65cf366a0a0da834a162a7dd6ddff9dbdd1a9a1873b64
- SSDEEP 768:nrF3HuZyOt78PeWSTlNeyJOgfGNOV/DVxPZxaCCrHpTFu6L4oWk:nrFecOt78PeWCLOgfGkVzKpTJL4oWk
- TLSH T1E30307086FAD962BC2AE55FEE4A126191BF1D53C6603FBAB4DC4B0F3BC437444512267
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\mdb\obj\Release\netstandard2.0\Mono.Cecil.Mdb.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Mdb.pdb
- SHA256 a041aef95b19a167aea676f1f285a40ba5f4bff2eaee622913c42515f6325233
- MD5 1139b05827fe41f6f69b1b7606320861
- SHA1 ab618e08e85986fe4efc7ae12e233736768f7e57
- SHA512 d4c8edefab5b1d5a3380ad3ee0e4a88390fe00c371085f35228c3d1772f24faf12f6bef8e1e636bd811866990e89eebcd03f4766cf5ca337049e8fd713162d1c
- SSDEEP 384:eB4dbtCUxM6p4+A2+hj3La3u6jMai+NLy5nj4SCm5Mz6QkOAHOuXch8YgY7fT2t4:XbCUxMF1j3LabToOwu6n7rrM+yxuD9o
- TLSH T19CB2822FD3C8C626C20245374171D359B3F6C2419B9A9F25E3E9A665ECDF718B2B2321
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Pdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f5234d2a93e1e25a5ca703cadab9cd9f0218975f1a78ee6355c0a9d3978c5de0
- MD5 f100e5cf51ef9837af10b793f3ed8703
- SHA1 713edb8aca42579319ec77eb392f5714c0731b32
- SHA512 a9e5d15d854ba5f874e3160bed489cbf340f9bc847e52d1c03c82c3689c317c940ee3f92317513278a6f7ab5bbc9b2e5bd6259ab4e1e9dad4d74e7fdf08ea42e
- SSDEEP 1536:3U2qJ+tTKzlXr+wHRsh3Sv8q+KdbEAoYKHNvzpS6u6faHC9e:E2y5+weh2+KSAiFzpO6CHC9e
- TLSH T169936D31A7ACA96AD8DC617724B70A0A07F2D2A7D153972A59C87FF41D2F7700932393
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
94634
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\pdb\obj\Release\netstandard2.0\Mono.Cecil.Pdb.pdb
mscoree
_CorDllMain
Name
.text
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Pdb.pdb
- SHA256 c2cac3273cb914f0f93fa1471c4ccde6681b0711b77d4e475287851d10401754
- MD5 b10d0850b69a971d2a5a327abdcc0583
- SHA1 0a93ea03524198461e3e20abf63e655bdcb37c06
- SHA512 ebc26ce9c0ee2a37d10649e3c6a68981837fbae8294e990782f9624c7a03b8fd8e23581393e3258663f062d761502bd0ced762d0a8aa4cda23aa216a1b1a006b
- SSDEEP 768:b6KjG9WgxG36oLIbToOwu6n7zmMAexVujsr2Z7o:b/EWgxGKhU7MexVV0M
- TLSH T158E2C62BE7B8C62AC806073981728205B7F4834557178B27639EB235DD9F3646FF2365
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Rocks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b8106c90112b3d474ed3a7da8683c010f4cb9be724c0eaf459143464e611f8a8
- MD5 519aff3818e8871e428f403b9f1bf63d
- SHA1 e1d1fc47db18e2474aa348e1d39f2c0f930f4410
- SHA512 6e6efc407fb382cf0bbee191e620de0b494d207357789793548eb2f5b7bc0ee9e1c55110fd084d0da0d1f4904cc8b965c8244b55b4a856e8c3941bccc64d57d2
- SSDEEP 384:EWLOZBsQXmnFlPQnqc9H559krjuhXcVXD9PmROMLUBLMWG1UX8JvbrjEV1O/pl/E:raQHP+qcbkrPuROoUBBLXM/d
- TLSH T1E1B239103B99CF3BC2FF867958D2532802F1C96A9603EB064DCC90E99A5BF945341BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30674
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\rocks\obj\Release\netstandard2.0\Mono.Cecil.Rocks.pdb
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Rocks.pdb
- SHA256 0f67e6ef60af7e89fcb9976d91a13d6f7f18ed0904219ca88c156603ac88f53e
- MD5 50244dc478562f6e4818309208d3178b
- SHA1 22a7ab5086582242ef69b07b9a5a0fd5cfb95c45
- SHA512 3b1369e971b742ea57e0cc812e457d63a4b09573693a0fd7205022ffe76315d4fb20aa6fde7cd5b1871485baeb658e6d31e417e1230cb5e8db33ee635e00e07a
- SSDEEP 384:bQLu3u6jMai+NLy5nj4SCm5Mz6QkOAHOuXch8Ndqxng4gZF90Doo4:bQLubToOwu6n7mGsn4
- TLSH T1FE52512FA7A8CA5AC48655768022C348F7B283089B65EF74F3D7A514DD9F3588371731
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a4ac5e4d0d66dffdae43498e95ad502d042b0fc5c9d70264b9d4c88c3cc94955
- MD5 c4b802b9b66dc5b2b3f251c8822da712
- SHA1 141e52ac972b6a9001601140442709e2d554996f
- SHA512 dda56a6a1dd4aacd46072bedde582170ab67a95c16ca4847b9a39ad20ca74f1f37df2d6a64c5dff022380fee1e084f548015ae74bef395e74cf0273de331b09a
- SSDEEP 6144:N6fRR1AtYWP4aW2psE5MLv+pVRomxaSt1Q:C6tYWr/oGpVRQSt
- TLSH T181747C3433EC573BE69F637BD469042A42F5D816738BEF9D48C4A9F64C47B928A01263
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
359778
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\obj\Release\netstandard2.0\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
345KB
Virtual Size
345KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.pdb
- SHA256 284f0e7c0098a22ab87272549688c242ef94553cf8a0f2d2c4f00e100671bded
- MD5 ab6e5bf2c188f5bf974f280e4451f398
- SHA1 ddc4a15a4ad59d856b37e686278af0c93cc17167
- SHA512 efd68de0c5362ee637f287f01e39a579139484150fb2ccf3b3dfae35d4331fc40428bd0a1612d739d6656c334527340cb8ee51b3a15cb50f02d9a705469efe64
- SSDEEP 3072:nbo4MyAiW1/UWEpz9RbCfQuFIqP5dwdHm+yMH805O:ymI/OwI+Qhc0k
- TLSH T16E04F90EEA84A33ECB6515BAA41361D52BB9914DE90B8B0273BCF135BC4B7187F53358
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/LICENSE
- SHA256 c5f56ad51c311bfb3a1d4a1495d60636b9967697e5f3d3da47fe6422774944bd
- MD5 bfec9c06de830d536aee4674675e6ae3
- SHA1 b6f204bcfff75f7094b4a44f766ed56c0fe5217f
- SHA512 29b6f307b3a2e8651f97909ff7a65f2172fac9b5d432df5fefa3720b6e590e145d439a609dd7fd4b29cf932486b792dffa65b9bef34383006e9ced7b528b10de
- TLSH T11D11751EB3510772189B23A05979ACD9F23BB25F7A5F2A84246DF345633A06CC5FF844
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/README.md
- SHA256 65f8487dda452eda08b8405ab20adb016614490db8af62d6149aed356b7db670
- MD5 6ec1c96781377789b44d9437b021e19a
- SHA1 73c92cf22b469508b2e517fb3d84a75a0e17da98
- SHA512 492848beb3f1031f9a19d1e8d7faa1962564833311a22a8cdc7600e79e606bdaa70b1b633d144538cab811d7d1636879b1420d828da5a6252dc0b0a9e5f2da50
- TLSH T1DD01101FD3E8D9A505A25DD1ED125173B311C1893A263D89646EC0CF137604F4672B4A
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/AssemblyInfo.cs
- SHA256 934538bf787f37f5daaccd43e90760dc3acb92347de97b849b6714dfa268de57
- MD5 edc0af510d5ad28e9bfe9fe06aa25960
- SHA1 c35989a41078bfc84857a454668ba56a1638c808
- SHA512 c1ff5715af4c590114c0423b7de6d63f1cde4b6fee241399b0c4eb8343adf6671109c23dd863613f5acad614bd4efba4655e00dc81dcfb88030aae4f7751f17f
- TLSH T161F046AC6742A79DCF010083BEA374C8037F732401EE1C052AEC3C43F9856B482A9A66
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Resources.cs
- SHA256 9945e24fadf7585d8a1dfcde8a342a3a0bc6da276b38a3955b599f4502d10904
- MD5 58c817519cf5724694410eb39abf0e75
- SHA1 8a5b67c695bfe38c83ca9d7af47c91daf84d1e49
- SHA512 2c6b0a0fca446957213fdac10b9929b2b2504dd98b44ec44fd2e22db9ddd14bc406d4a72ea3258053a53b23b0202b74a5f1c94ef709526fe8f86f67e83788fbf
- TLSH T122414E6333CEC66DD570154375387844CBABB546C2F9A0AEEC4618B8C7E13414FA9D6A
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Resources.resources
- SHA256 4d4d0b14272bf5d6cbb9c64dcd971c7aeee861e0e464b7ab5c85da5a046afb03
- MD5 aa77642495f6e822d8def3c00ef21b8d
- SHA1 5b0233cc00c43f786e68f3d22fc512e0cd29c965
- SHA512 e4ce7d60a531ab3dfee5dea6446fc62c47ed69bbdfaa9a635ff3032d9b169b3bab1676fe113d1c1cfa42ba84f70bc9b693a974fc70d1fc63dd3998558b62a709
- SSDEEP 192:ruokwJwAcKArr2QznJOSXQos0RKPAGcE00d89+tdTKzI8RzhkHmvzg2Cf:ruokwJwA4tOSXQ0RNxEzHtdTKzI8Rzhk
- TLSH T12912AEA72277AFE88A7EDDBE340914C79A77F22324346B78A8B8042D14D54C7F5A41D8
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Settings.Designer.cs
- SHA256 ea9d4d4c1161eea37dbb629920beeda2aa9dbc52249fb513c88a627b9a63a85d
- MD5 1630a6adeb42e1c14c172a6a9877ea14
- SHA1 56cc7871f882f95a3912248b6e87ca94106d1b56
- SHA512 f91a5d05ea860996aebc3547b239de11dc36d93660b943e1528c3428879aaebd4fb1f06c73aa37bd0f4b8bb943994fd0fbd82618353fe5b22f73b166d5029135
- TLSH T1CD118CF63E91D7370676E6AAD605C163CF32122BCB2E9435308D4605EF3554483ADEA6
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Settings.settings
- SHA256 ae33bb940d36e9df222e22c16fcc4ddcfda269983e8c0f5708cf7b657fb7b9b0
- MD5 7e409394e73eda19c40cd27c4c89a895
- SHA1 547800c9e3e2242dcae6ad1626abf57a185c549a
- SHA512 8da0bf92b4be341602b1ab05985060d4f43c7cef7b1f1120d03e18da53bd51858ecf3fc21ca6c48ae65d29d50698da43cc42c7ad8b9440b5b3df65e8e6431b58
- TLSH T13AD05E989484CD2E97726560B46CE27D94202A278A389574B134778F285F1C612EB8D7
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/RaidAPI.csproj
- SHA256 cde202ff08e6559edf6077a5eb3aea170038251c54963a21694e539fc1f42ace
- MD5 4a2afb4d8e493e9a7d929d846731c5e0
- SHA1 b49c287063100c4ecc0a077e938e0e8c6abf5b2d
- SHA512 dbfad2cfe6803a6d1cb22cd07f958efc7a10c7247b9c1de03fde9a0fa5f9aa2bbf28c8e5b71fd1fe362f07ed357f3162550d426fa1df27db5611f8d0525b681e
- TLSH T1B451DF34E2D83AAE07B51137D1E39A06DE2463D314B54CA8F35EE64B0B73A942153B77
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/RaidAPI.sln
- SHA256 fa45677f57c9d2a3d0c13e1e33549bd0bcc8db24882119ff5cfcd85f1da7ceee
- MD5 6679fa1e88c36b16b69d0c817c705561
- SHA1 5c7bd491c401b1e018e0d80c3a90506c1dc8c552
- SHA512 2b19a89357bb39ce3b577560c7580dec98ebda8f23f283d5ef809ff250c61f9ac5ed2d0c22a55fa5863db5d0c6d952bbe2818929e62ee26ebc3260c3ab921099
- TLSH T1C4113AE8220D0CBAA94917EFA1E21CD76E374141D1AE483C414E25EC2E2FA5592B69CF
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/StealToken/Stealer.cs
- SHA256 249403dc56eeb38bc5d77d6002c7604a4ffae4ff8283b5446047c6a27a694f7e
- MD5 3afbe5831aeb3a8d6591dcd8612e1881
- SHA1 3a3d07494ba0e3bac4727067229a04450e0371b7
- SHA512 94cb5ae507cec680b5e9ba8f6c6fcb4796a4dc0a415007ca66db78ac3bddd88d0f40c94303d8c2935ed45d1a82eb780f600dc73ef65572f78a86376ec9ed9ec7
- TLSH T14311C21D3A6FD38E0EE380266CF22049C7ADDA14457B1896AC9A99C1CC6B93E0335E91
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-7.0/Source code.zip
- SHA256 9f5ba9b553b95790bea7c2b135c0a9c95af9b969a3f0f64765306fd4d0302283
- MD5 8bc7588e894ab30badd8cf26f1753174
- SHA1 dcc2d89e96c5559a04cec643284b4b0a8d641d9b
- SHA512 926eda6277185fe8e451664adc91ddfef1cee51abcfab25f57d0f049bfa0fc9b7e1724dd8404e4ae033c875c415f2455dc1f2292f3de61df8d6ea99dde9af8b6
- SSDEEP 98304:dIp1XnYRVQT4GsDaO6oMvKuR6tZh6ZTvB:dIplwaGDaO6od/fKvB
- TLSH T10D06337CD885AF25C6FE7A7376DA83483EC5482271A3C09A63C183A35C4B2591DFC9D9
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/DLL and BINS/GetToken.bin
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 7e6c6ba0047dc3a5167438772e9b36e96e6089d0234d5a2b64383f243bb496af
- MD5 cf6d9e66237662f590efec6c385db443
- SHA1 751cf7ea6f334c7f8d586c23e9ad7fc8c29876ff
- SHA512 5e72e5d3f5e59552392b67275b78612c4560298152c446ee16606d625e99d26f11dd158b339f03ca2bff077fd9c720366b478da0b0111f560d396c00ec056105
- SSDEEP 384:y2cOt9P0qD2OLHK5JaMbk2a2+1LO3yvVbsoq0iCJ:v9PnDHHKyMbP+ba0iG
- TLSH T119821B1177E88629E7FE9F795C73168112B2BA668C22DB4C1CD550CE4D33B818762FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23678
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Itroublve Hacker\Desktop\Token-Browser-Password-Stealer-Creator-5.0\GetToken\obj\Release\sendhookfile.pdb
mscoree
_CorExeMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/DLL and BINS/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a3444dd5c83eebea15a807e4932ad4127ef33dc7c7c2d799f30ded930e1e1a74
- MD5 f494762fcce61f0c294bed88d1b5f3a9
- SHA1 b6d5b9dc666cb75fc8d77f800846a161dc58baea
- SHA512 3a1f74b6be008a95576c899bebdb7cdc53a50c1b68837247d0a4183dd06f2eb191b36591f97f0e1ab2d6bde1a639614a04c9abb5b8758bd5a495371a3a1f62e2
- SSDEEP 6144:9aUU6Xx2AE6gaSTYUs8Nr/jaGGv8+iZKdJDkP0bAB:ziG8Nr/Gv8+H
- TLSH T1A0545B252B985E3BC7CF92B7E06318290AF5D13BB24BE74C9C8CC5BA1D47B658C415A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
286286
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\sources\cecil\obj\net_4_5_Release\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
272KB
Virtual Size
271KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/DLL and BINS/RaidAPI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 46e4b5f5e6177e56d6488cbb3d0a8f64c2f0a33c21c0e0cfd9e994a36a4c9756
- MD5 0fc99c54930c6943d70c6d5a9fa7f263
- SHA1 df72714818aa32fab839fa4d2b76a41a7e749a63
- SHA512 0f3bc83a6cff53bbd96ee3ea34e6c9d6dcebd694f23020ec05d428e856b7bf7db14097bb94c041d91670ac826316a80cda74453b6b3fd60629db3356680a722b
- SSDEEP 384:N4T9MzvRydfhFSt4uokwJwA4tOSXQ0RNxEzHtdTKzI8RzhkHmJCO:a9fat3UqQ0WzKremJn
- TLSH T18E728D2627F6CB74CAFF9E7E686302C50A71F3559836DB7D4C98015F5C6210266E0BE0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23434
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Itroublve Hacker\Desktop\Token Stealer 4.0 SRC+TOOL\Token Stealer 4.0 SRC\RaidAPI by ByteTools\obj\Debug\RaidAPI.pdb
mscoree
_CorDllMain
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/DLL and BINS/TokenStealer.bin
- SHA256 8af07a8f7e5f55d5a45ee35da09f94c435e5074037523c7afd737ed123ed59c5
- MD5 7fc2c065ed8e61a111cb45bc047fa6ea
- SHA1 ad3a981139e3960cb15eba3c579af89234a0f782
- SHA512 b1e4773fb1cac7b43d6187c4619ca5faef94085bdc8aadda25c36efcc99d0f5230fed10ef807fd3255a58bfc00497f1d33c99057ab365be529ee193127d1a18e
- TLSH T165712F3B6723D755889402B6EA2FDB05FBD280B7090BC0600D5B80DE7AD951B33F9E96
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/DLL and BINS/bin.rar
- SHA256 4c9a5b5bd5a236403856bd14b25d4cc4d39e0b3cc7773a9639d0ad9f4372aa3b
- MD5 050c0e628e33a6dd8ec7e7016f029ec2
- SHA1 a2b480a5104c2edad280144bc0fa7bef5480b35e
- SHA512 e3e2d9e351f9ec1ed9eb6ee1a4fca076f5a6e6b8ec5a5e66a12e0e3e08cf62d97696e9dc86c16f6d89fbd0c43c468250531ad0c35bdf292e00ebf516b4d3a1f7
- SSDEEP 49152:SiAyNLRf/nW1sE2DSxm/W/x4rcxu/a4J8zUQIbKHHFHKfW:SiTtHW1j2waAOrIua4izjye
- TLSH T19295334E54012902E37DE7F2C3FDA748B9C602B664D1502A51CB9EA6AD077E823EC7C7
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/App.config
- SHA256 7921098e47e894412fdfd0cafe0f88cc68497740998eac17c68c00129069d803
- MD5 b51c130a957051ba9fb2245bf76fb6f6
- SHA1 42181e5745daab2a0e8cf87693142828306f9bda
- SHA512 fa2ac3eff5d51aea7acc9cf6aa018a77fae295d55c5bf808c9d7048c801baf4626568f00fb001a9f2780c46dce294482cfeb3045aabe139ddc557c0d3bc11640
- TLSH T1DCC08C4940A8BE279D338F239360C922FFF032A3A424150CF42FAB670B3115D464737A
- MD5 SHA1 SHA512 TLSH
bin/Compiler/WebBrowserPassView.exe
- IMPHASH 6526bb2991df39dd134d2e134366b58f
- SHA256 f999357a17e672e87fbed66d14ba2bebd6fb04e058a1aae0f0fdc49a797f58fe
- MD5 053778713819beab3df309df472787cd
- SHA1 99c7b5827df89b4fafc2b565abed97c58a3c65b8
- SHA512 35a00001c718e36e956f49879e453f18f5d6c66bbc6a3e1aad6d5dd1109904539b173c3cad0009bc021d4513a67ae0003282f7d14b7aecaa20e59a22c6ad0ddb
- SSDEEP 6144:wE+Z7EAXrvPRIxK0zBL/TIDC2dL3RltnfoBglM7zMUdsvk3zhAt76zkizX5:QZ7FXrPy4ix+LBltsgK7zXIqbkk5
- TLSH T1E084AE03F3D28076E8A70570066B5B36DEFABE201635895757D41C89BEB16D2EA3E307
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
NirSoft WebBrowserPassView
Password recovery tool for various web browsers
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
288500
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\Projects\VS2005\WebBrowserPassView\Command-Line\WebBrowserPassView.pdb
msvcrt
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
strlen
__p__commode
__p__fmode
__set_app_type
_controlfp
_itow
_wcslwr
strchr
_strlwr
_wcsupr
_wcmdln
memmove
malloc
free
_memicmp
modf
_c_exit
wcstoul
_wtoi64
strcmp
strcpy
wcsrchr
exit
_cexit
_XcptFilter
wcsncmp
_exit
_wcsnicmp
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
abs
log
_purecall
wcslen
wcscmp
_wtoi
_wcsicmp
wcschr
memcpy
wcscpy
memset
wcscat
wcsncat
_snwprintf
_except_handler3
_onexit
__dllonexit
memchr
realloc
_gmtime64
strftime
strcat
qsort
comctl32
ord17
ImageList_Create
ImageList_AddMasked
ImageList_SetImageCount
ImageList_ReplaceIcon
CreateStatusWindowW
CreateToolbarEx
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
wininet
FindCloseUrlCache
FindNextUrlCacheEntryW
FindFirstUrlCacheEntryW
kernel32
InterlockedCompareExchange
DeleteCriticalSection
GetFileAttributesExW
QueryPerformanceCounter
GetFileAttributesA
LeaveCriticalSection
SetEndOfFile
GetSystemInfo
Sleep
GetDiskFreeSpaceA
InitializeCriticalSection
GetFullPathNameA
DeleteFileA
GetDiskFreeSpaceW
GetFullPathNameW
AreFileApisANSI
UnlockFile
FlushFileBuffers
LockFile
UnlockFileEx
GetModuleHandleA
GetStartupInfoW
CreateFileA
EnterCriticalSection
GetSystemTime
LockFileEx
FormatMessageA
GetSystemTimeAsFileTime
GetTempPathA
EnumResourceTypesW
CreateToolhelp32Snapshot
Process32NextW
LocalFree
GetFileSize
SystemTimeToFileTime
CloseHandle
CompareFileTime
WriteFile
WideCharToMultiByte
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryW
FileTimeToSystemTime
GetTickCount
SetFilePointerEx
MultiByteToWideChar
GetModuleFileNameW
FindResourceW
CreateFileW
LoadResource
LockResource
SystemTimeToTzSpecificLocalTime
lstrlenW
LoadLibraryExW
lstrcpyW
GlobalAlloc
GetSystemDirectoryW
GlobalUnlock
GetTempPathW
GetDateFormatW
GlobalLock
SizeofResource
FindNextFileW
GetTempFileNameW
FormatMessageW
GetFileTime
FindFirstFileW
GetVersionExW
FindClose
SetFilePointer
GetModuleHandleW
GetTimeFormatW
GetFileAttributesW
GetWindowsDirectoryW
FileTimeToLocalFileTime
ReadFile
CopyFileW
DeleteFileW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
EnumResourceNamesW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetCurrentProcess
DuplicateHandle
GetCurrentProcessId
OpenProcess
GetStdHandle
SetErrorMode
ReadProcessMemory
ExitProcess
Process32FirstW
user32
RegisterWindowMessageW
GetKeyState
DispatchMessageW
TranslateMessage
IsDialogMessageW
DrawTextExW
GetMessageW
PostQuitMessage
TrackPopupMenu
CreateDialogParamW
DialogBoxParamW
DestroyMenu
GetDlgCtrlID
GetMenuItemInfoW
ModifyMenuW
LoadMenuW
LoadCursorW
ChildWindowFromPoint
GetSysColorBrush
ShowWindow
SetCursor
SetWindowTextW
SetDlgItemInt
UpdateWindow
SetDlgItemTextW
GetDlgItemTextW
GetClientRect
GetSystemMetrics
DeferWindowPos
CreateWindowExW
GetWindowRect
SendDlgItemMessageW
GetDlgItemInt
EndDialog
SetWindowLongW
GetDlgItem
GetWindow
InvalidateRect
GetWindowPlacement
LoadAcceleratorsW
DefWindowProcW
SendMessageW
PostMessageW
RegisterClassW
MessageBoxW
TranslateAcceleratorW
SetMenu
SetWindowPlacement
LoadIconW
LoadImageW
GetWindowLongW
SetFocus
GetParent
SetTimer
BeginDeferWindowPos
EndDeferWindowPos
KillTimer
GetSysColor
GetMenu
GetDC
GetSubMenu
EmptyClipboard
EnableMenuItem
ReleaseDC
GetClassNameW
OpenClipboard
MoveWindow
CheckMenuItem
GetMenuItemCount
GetMenuStringW
CheckMenuRadioItem
CloseClipboard
SetClipboardData
EnableWindow
GetCursorPos
MapWindowPoints
EnumChildWindows
LoadStringW
DestroyWindow
SetWindowPos
GetDesktopWindow
GetWindowTextW
gdi32
SetBkColor
GetDeviceCaps
SelectObject
SetBkMode
DeleteObject
SetTextColor
CreateFontIndirectW
GetTextExtentPoint32W
GetStockObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
FindTextW
advapi32
RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
shell32
SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
ole32
CoUninitialize
CoTaskMemFree
CoInitialize
Name
.text
Size
308KB
Virtual Size
307KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=22, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=11, id=64, version=9210,
count=11, id=28, version=9178,
count=336, id=1, productName=Unmarked objects,
count=3, id=25, version=9210,
count=58, id=114, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
bin/Compiler/curl-ca-bundle.crt
- SHA256 726889705b00f736200ed7999f7a50021b8735d53228d679c4e6665aa3b44987
- MD5 fd7ac2ff5b13acf3b48478a6da989a50
- SHA1 d7952c26ffd211b9d717e26144cca281223c1dfa
- SHA512 741566dd9b9a9d1fa47ceb26fbb587602c45fc40af2d0012527d0b2b9eae799e6b3ab3a55e71a5a0cd8bc876e579cb6e3469801af7b0d0fac1917d44ed27b111
- SSDEEP 6144:6Nc597qxzwd9aUaNR6dTd4tL2b02dTDkMgX:6Ncf7M576f4tLe0mIM0
- TLSH T1DF24AEE78F852D4928E3E490C9AB126EC959C362EDDBB0B31D193841C785B3D66FD08D
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Compiler/curl.exe
- IMPHASH 94d50e9c220dcd0fe83e2192746e0886
- SHA256 f4be61c70196444c3909101d960bc228a5aab0a992591c3425ca3c98728dc125
- MD5 2f7a5a94c61d0c3d6dd2caa373926a69
- SHA1 741748a24352b9e1f90a033cf80348000c8793b3
- SHA512 c0b6976955a3a72743ddcd0710c8a33702910b0a09edfc8ad519251ef6b8cf47553ab158f70c873295c32427396f85c02481ddf697f5c126cd6957f83d82084d
- SSDEEP 98304:sioHO038qIwwq9j2eHqs61SY2h6xSImk11GzN4+3Pg8qJvToA30eIetWdtp+HzUC:snUqIwwq9j2eHqs61Wh6xSImk11Gzm+S
- TLSH T10B065A84FA8350F2FD5B5DB0A08BF7BF4B359601D820CEE6DA44D941F933A526219B6C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
b8:e8:b4:00:af:64:57:3d:a6:1a:84:01:93:a2:24:94:27:a5:45:0b:9a:a8:c9:55:f9:af:41:ab:db:a0:94:4d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=curl-for-win Code Signing Authority,OU=curl-for-win Code Signing Authority,O=curl-for-win
Chains
Aug 6, 2026
CN=curl-for-win Code Signing Authority,OU=curl-for-win Code Signing Authority,O=curl-for-win
CN=curl-for-win Root CA,OU=curl-for-win Root CA,O=curl-for-win
Subject
CN=curl-for-win Code Signing Authority,OU=curl-for-win Code Signing Authority,O=curl-for-win
Serial Number
01
Issuer
CN=curl-for-win Root CA,OU=curl-for-win Root CA,O=curl-for-win
Timespan
Aug 31, 2018 - Aug 30, 2021
Subject
CN=curl-for-win Root CA,OU=curl-for-win Root CA,O=curl-for-win
Serial Number
af:42:e4:09:5d:94:1d:14
Issuer
CN=curl-for-win Root CA,OU=curl-for-win Root CA,O=curl-for-win
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2018 - Aug 31, 2023
Minor OS version
0
Major OS version
4
Entry point
5360
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
advapi32
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptGenRandom
CryptGetHashParam
CryptHashData
CryptReleaseContext
DeregisterEventSource
RegisterEventSourceW
ReportEventW
crypt32
CertAddCertificateContextToStore
CertCloseStore
CertCreateCertificateChainEngine
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFindExtension
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateContext
CertGetCertificateChain
CertGetEnhancedKeyUsage
CertGetIntendedKeyUsage
CertGetNameStringW
CertOpenStore
CertOpenSystemStoreA
CryptDecodeObjectEx
CryptQueryObject
CryptStringToBinaryW
PFXImportCertStore
kernel32
CloseHandle
CompareFileTime
ConvertFiberToThread
ConvertThreadToFiber
CreateFiber
CreateFileA
CreateFileMappingA
CreateFileW
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFiber
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
FormatMessageA
FormatMessageW
FreeLibrary
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableA
GetEnvironmentVariableW
GetFileSizeEx
GetFileTime
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetStdHandle
GetSystemDirectoryW
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
GetVersion
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MapViewOfFile
Module32FirstW
Module32NextW
MoveFileExA
MultiByteToWideChar
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleA
ReadConsoleW
ReadFile
SearchPathA
SetConsoleMode
SetEndOfFile
SetFileTime
SetLastError
SetUnhandledExceptionFilter
Sleep
SleepEx
SwitchToFiber
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoA
VerifyVersionInfoW
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
msvcrt
__lconv_init
__p__fmode
__p__wcmdln
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_access
_amsg_exit
_beginthreadex
_cexit
_chmod
_errno
_exit
_fileno
_fstati64
_get_osfhandle
_getpid
_initterm
_iob
_lseeki64
_onexit
_setmode
_snwprintf
_vsnwprintf
_wstati64
_stati64
_strdup
_stricmp
_strnicmp
_strtoi64
_sys_nerr
_vsnprintf
_waccess
_wcsdup
_wfopen
abort
atoi
calloc
clearerr
exit
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getc
getenv
islower
isprint
isspace
isupper
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
localtime
gmtime
difftime
printf
putchar
puts
qsort
raise
realloc
rewind
setbuf
setlocale
setvbuf
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtok
strtol
strtoul
tolower
vfprintf
time
wcschr
wcscmp
wcscpy
wcslen
wcsncmp
wcsncpy
wcspbrk
wcsstr
_stat
_fstat
_write
_unlink
_strdup
_setmode
_read
_open
_mkdir
_isatty
_getch
_fileno
_close
normaliz
IdnToAscii
IdnToUnicode
user32
FindWindowA
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
SendMessageA
wldap32
ber_free
ldap_bind_sW
ldap_err2stringA
ldap_first_attributeW
ldap_first_entry
ldap_get_dnW
ldap_get_values_lenW
ldap_initW
ldap_memfreeW
ldap_msgfree
ldap_next_attributeW
ldap_next_entry
ldap_search_sW
ldap_set_optionW
ldap_simple_bind_sW
ldap_sslinitW
ldap_unbind_s
ldap_value_free_len
ws2_32
WSACleanup
WSAGetLastError
WSAIoctl
WSASetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyname
gethostname
getnameinfo
getpeername
getsockname
getsockopt
htonl
htons
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
778KB
Virtual Size
777KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
49B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
97KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/Compiler/finalres.vbs
- SHA256 f76ba0c9cc7614a11a7e1217e2e738196d6da56dec9c96f90a8a64d9f80a4493
- MD5 c8c6b64b81a851311e99d91724496dc3
- SHA1 84dfd037612c878930263d02ecab16814ef47bf5
- SHA512 be6c21ab467e5d0e903c57bab8000edcaf21fc9e4795974a8df0fd6c9d398d8dac449b16bbb8b0cf6fe5ca8d7a8567d566d807ad27dbaebd26519eab91e19798
- TLSH T168410382AC1B8A28837766F10A039EA5EBF1464722715D143ECC6EC52F76105D7A639D
- MD5 SHA1 SHA512 TLSH
bin/Compiler/finalres2.vbs
- SHA256 04084885435b6134e792c03f8b52bf6ea7135c7bd7ff8d3cc3aaedae2c667dae
- MD5 979ba252e2c4e3a386da68ff50fc9d0f
- SHA1 b8fce3dd4ff22aa2fa909c9992cdbddbdc2ffdc8
- SHA512 40a35d0eb276e6983d38fc4469308e6d755507732835a8425e277e623ea4d1c42b4e6a20d6d8a68e82fdc35a8e8754139a440cf380d2520b48af1d4640373de2
- TLSH T12AE026157D38D47488674AF3437BC40ED79851871033E424714C9DC80F312780E22A72
- MD5 SHA1 SHA512 TLSH
bin/Program.cs
- SHA256 14a342c67dfe909e26efe3d8e5f8f9b8a69b74bc784f8e1565fd73e5fb1866ee
- MD5 42e46147c865ebc5a546065b67344d5c
- SHA1 c56d07e29f9ab4284cc28b55112bbf6cba62f20d
- SHA512 659999b3fea4aa8ead67422b7ebfdd3a91d6650fd76b50ae2bb7805ad824af4f642a61a9c5d8d0ab2c8c9b05925d0f2d206c4c0b6658576036f7883b58a27588
- TLSH T14F61FD195A1A5BFD88B36235BF567202E52B02234AB31220F9DD85509FF61BC077CFE2
- MD5 SHA1 SHA512 TLSH
bin/Properties/AssemblyInfo.cs
- SHA256 19dd8c30fdf7ff4a9c0d3d77ca7a10d9cda19196d94ab2f1f72095ba8c4bd326
- MD5 1dc703aeec8e9032463b32a1aca918a7
- SHA1 8b69f9d1b9b9d8c1d6f927a92499c78fd44d358f
- SHA512 7d9cf382bc8ec408f86f1d557bce8cb44facbb8ff46060ad1989eac71645e3f1171978d475fefc54f2f54c0680be7b48fbbf1cb6ea584d22de1dd2eb17f3e318
- TLSH T1DD216B296741A37E8F610093AE6F31C4837D633892EA0C4534B8B853E301A7843A99BB
- MD5 SHA1 SHA512 TLSH
bin/Properties/Resources.Designer.cs
- SHA256 bf5fc6a842c64e93dd0859ac47570ffe1304bf88988cd6a7f75fa30e968d2b81
- MD5 442100a3437d19567217ac066d28d702
- SHA1 e308e27533483544b755d11fb602ddca05d5dcbb
- SHA512 538e0a4d1b8eecd8d2b405a4cf97074d3ad412325b5bc76227d508cdb64b75c7e605f7c668ac725ea6eceb46f25ff141af9253024d741a6d00b4784e78f73424
- TLSH T1DB51BCB71F94C1320934D59F9700F851CB662113C63DE874F8AE02655FB639043BDDAA
- MD5 SHA1 SHA512 TLSH
bin/Properties/Resources.resx
- SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
- MD5 0cd8c971317d19bbed44757809bcb92b
- SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
- SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
- TLSH T17FC11245B1C09D220BF3482DE6527988F7A8923B0235AC54B4DCA61F5F73C85A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Properties/Settings.Designer.cs
- SHA256 6bc3fd642529779a5885e9ca7652c26c4392574a563285c885235d54e8911cdb
- MD5 721d631493bb8758abd3fc60ef4187a4
- SHA1 ef1d5669408350b69bea87b47ddaa2f8ea665821
- SHA512 45ed21e3be96d5823112774531a1debff60376b76f44513cf2df369d1758b0563ea441c37cecf8cb89dba740906225c15897ae1974828532a266507327c5d4be
- TLSH T15B119CF53E91C7360271E6AAD605C162CF32122BCB2EA435308D4205EF3644483ADEA5
- MD5 SHA1 SHA512 TLSH
bin/Properties/Settings.settings
- SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
- MD5 8c0f00d7d9b0046695a0255f1b11b061
- SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
- SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
- TLSH T1A4D0A78994C8880693313970F468E13C91106757046A95647164784F15071D612D35E7
- MD5 SHA1 SHA512 TLSH
bin/TOKEN STEALER CREATOR.csproj
- SHA256 334127c7a29b38b69b478a7625e6461aab8a5c3b706333231d709eaa4b574932
- MD5 5eef3e20174b3d1a5c29f4c33de36cb0
- SHA1 466225128d943c2423049ab7060e6311ff3a15f5
- SHA512 2a7296fa4738b0753f6b69acad50c5bbf286da0922f4ce9fa067d7cf980acbe6ea40c897b5b8b1eef6f6f758170bd91f2e2ab7a69deb931950cc5107ec0ca327
- TLSH T19181ED35D2CC7DBD03B12077D2A3AA05DE6463E314B44864F69DD2875FB2A442153B77
- MD5 SHA1 SHA512 TLSH
bin/TSC.sln
- SHA256 a41be67ff6675761854fb93f365a25a883e5100535cc63968b2ae3d5171b251c
- MD5 a0adcb5d6779e5c43d9838646114fec5
- SHA1 7156c5d88e6e3ddf72db976355d6cb2f06beb4c0
- SHA512 d669c0824007a4a6d06b83646c1772b1c427360731b6dfeca1a06e5fb3f6cc52a1a344f1e0366427f28b960f6ba181ce0a28ad9ff232917af65385dd94dc5cd2
- TLSH T163214FA9214D8CF49D8DE7EA96B12CC73E778141C2AD183C12DD50881F1BB4992BB88F
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/Properties/AssemblyInfo.cs
- SHA256 a5bcae2aa5b9a2055e97f95d9bf99a74abee8b3770aab3d15e4fd5b99e73486e
- MD5 c63cd21935ddb34754a4f58815005750
- SHA1 6a4422177fdb11aa26a501f2949947b73c14fa12
- SHA512 b232f8d4f53feba77a7a7930fba893d06e1f82beaa6df9d6f94323acc809dd0009bc9012940454fa9884c1a9659a071869df756dedfb2e44b5cf2642e952d559
- TLSH T1CEF0F66CAB46A35DCF1004C7BEA371CC077F733441EA5C056AEC3C43F9466749269966
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/Properties/Resources.cs
- SHA256 9809d52b8ca2db2a40d6b02b530e7de6d638158810764113b1599bb12d9807b3
- MD5 77bf5ec0173b49cbf5279a33118a7051
- SHA1 f3c4607194fc0d93534fee313a234f9ac841c820
- SHA512 b41a16016a6ebcb89fbb59f56ead7c0175fe4d917f9e83f699e3826ef8e9fa0a78b84ba0634408dedbf5ddd9119861ca3b7c4a3660ac818954aca28cc0899e82
- TLSH T1742107A7739EC6F945701447593024518A9AE146C6B674ECEC8B10B5D6F639007ACE78
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/Properties/Resources.resources
- SHA256 e13ed2c59366d0eea74863fd71a81f0cb977cce1edfde304fc538690a4f6ac89
- MD5 cd7dbc7abeda9893ce25793744443958
- SHA1 dbbbbe2694d4b9b990881f279b4313574dbeac9b
- SHA512 e880f131ff460384940248ab2ecd97189ae0b7169fe5246440dfbce32f295cbd7697ce2ee65b434a0e40be91b91c21b2c14b1f446b2b1650d0a5d94c0d4f37ef
- TLSH T1AEC08C36130C60B6CA621E7B241875C2122BD619D538296CDCA9223CAFF2317DBD3E62
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/Properties/Settings.Designer.cs
- SHA256 ec875e44e42915fe25f509bf8ac5a03f2d79cb93dae76274d5a2b5e413937b7c
- MD5 e4fc3d373ca2c01619a527ca383b2dc5
- SHA1 09e3084760e0a0fb55f54ae37c627854aad5fee1
- SHA512 699a4cb95dba6fdd19df655a9def4eb60fff4d6d817bfd94dc29efe2210de05f7af39b7671d980f5e0e1d112af19603a7cb1ea95ce5797f2f1f86b3ccb54a777
- TLSH T1B4F08BA6739FCB7D169128C6CA3152A74F77972A863734B8688D0141D502A8043FDF24
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/Properties/Settings.settings
- SHA256 7b0085f88ab02f23852be3c39fd10fa2c00edddc41fc3ac8b50a9521b0f7ecc2
- MD5 c6d957ee386defd82aa0433f1a2a71a9
- SHA1 1f4aedc0f769b6acb032ad9991515e95f3fff1f6
- SHA512 edba2c6a65d4333faa2e00df447ab3f06c174cee3767ec03518fc5557827f819920f8234d27d7ea56e3337f886e464f5a7bfebbaed4665b1ce550f27c969886e
- TLSH T15FD02E589088CC6C8A2161A0B42CE23DD42026238A3C8430B034378F284F4C612EB8D7
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/StealerBin/API.cs
- SHA256 715f2568fb125ed7d02d5c809b524e7b457b7bd055cef79bd101ce64c47848ba
- MD5 0615dd1daea7da770acafd97b0cbaebf
- SHA1 30a2775364fd290c931178df3b633a4a2622a375
- SHA512 e9097ea820177268230ab4461000492172b426206dbb661310d1ff194e5963c8a43b349a7c7b59f0700cedb8566fcadba84e07f8e45b8f611450be19785f2ebe
- TLSH T11351B7B2B78F79569759D0E48130F142FEAEE432039601F5FA8C858CA0FCA4553B8BB5
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/StealerBin/Hook.cs
- SHA256 17e0e5eac35f7f194ea18d819d60038b6bc81cfdafe493c71b3f4f9dc7a56c33
- MD5 804df0603e0a2ee25787d2d677ce9daa
- SHA1 d39bb26a3e3272c532b9ac912101ddd14bafc251
- SHA512 76f4f7161aa10ab0cad006380b25c7516c69d7a1cd5719f40a900bb4b0d2aacdcd377dd54821b4de5bb5f017f5a5bd93673e3685687223ecf204584a78cb3974
- TLSH T11B11F529B30B971E693760739A25A19ADB7213234B93CD1138CE01C4CF729270B3CD90
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/StealerBin/Steal.cs
- SHA256 621a6e31506633c46498d052b4b9dd35cc488a844eeba75d40d0d7db33b4447f
- MD5 c2f1b2f30ee3f8962dcca516d765db11
- SHA1 34af75cfcf906d79bddeb909ad68fa212c086e99
- SHA512 1c5aa35b37d82a9a2dc7b7bd6bbc63d6913042f286bb1193f50043e4e949ad7172fab5d45951b121d8d06672fe484e47ce5d8e023e3c40bf23731af7588ecf7e
- SSDEEP 96:Jo4h4a8U2nFz2VFtZ3VAmI5JvTUqma39DkD245Q3M3BUTtw6sKwOlRCKAGjmRC:9Kaa4f1k5Jblm6h4B6sKwACJST
- TLSH T129021E91B39EDB5E4BE06043A4708565DD2ECABC0A7B08F2F1CF0649F42055643BC9BA
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/GetToken/app.manifest
- SHA256 539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a
- MD5 b7db84991f23a680df8e95af8946f9c9
- SHA1 cac699787884fb993ced8d7dc47b7c522c7bc734
- SHA512 d4a78daf4ae93952197208752d801390ce39a519e7f5aa1360c42fc563ec0e221625b1bfec2a9564fd3dcd14c18b74d5d9fa6e57c2bced40c1f32c6814b4c523
- TLSH T1FFF0DCC1D188CA6AD33042A13A66E420A2AD435B19DD49EC74DC29BB6F0BBC680C30F1
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/sendhookfile.csproj
- SHA256 20382221bcc235ff3a8541e95fd9a335251f6033b7aef57106ee2e5ee8532928
- MD5 8b0f887a538ecfb646a07bdd667e962d
- SHA1 2dbaaaf6018e898241358f31890b7682a82a3eaf
- SHA512 89814bb815e79d1c86afacae914441ef16690d7d98aa1e298809d83e749000585f0e73cbe1df8c00136a170ec388d5fe9679dee6fcd6b2ce60fe5b023269babd
- TLSH T14951BB35D5DC3AA903B11177D2E39A06DE24A3E318A14CA8F65EE64B0B72A541253B73
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/GetToken/sendhookfile.sln
- SHA256 b5212e967dbf6934dab312faec6c182ffec63734cea5865a17a6e1c9594af3fa
- MD5 b6b0cb245e122c9b599e56c452154dc9
- SHA1 210060230fc0e9edd39c1729f3204b6bcc284ece
- SHA512 3e31b064158857f968cb6ae385e8998a5c753ba156bd0d5eb05acb649ba7ae36193d1bc8b4d7344bc20154c5d8b7ca1145e4e2931348b154066da741aacb515e
- TLSH T16F113DFD111E6CE4AA8523F796E12CC26A378351C19E0D3C32AA18585A1BE51D1F644F
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/DiscordFlooder/Class/Design/Rainbow/Rainbow.cs
- SHA256 ab27147dad3db3cc13ce6541ee0dc19bb2263803575012b6f42d1a06e39f3238
- MD5 d71babf2718ba4dce959930c0ee32bd7
- SHA1 6417014efa4bccba7cc1fe075e9155e984075aad
- SHA512 85167378be60bc86d478937cace5b6af824a10f49d4cc405880aff4c8a4cebcc49252ba3dada5c2898b68338e09fb1e067ae92b634f75111f66ad8887bcd8bff
- SSDEEP 96:JofWITimhv6Q+AwBXkq0HxJWOQmwulT0yfJa1Xb+ls:fITimhv6Q+AwBXkq0HxJWOQmwulT0yfg
- TLSH T1D1C13C6C608007670833B73DDF63822DEF2A51A746E545717F0CA6A2AFB53631E21EE1
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/ItroublveTSC.csproj
- SHA256 7e91a96b0467212b1173d03c2a9602ced90d9a14a7b66c9e3479e3f52fa15430
- MD5 69de83305c65d8125908d484e6da5166
- SHA1 f65c970ea4f7bd18af836b3e3d1886c5f622eb31
- SHA512 977ea250eab92466e3729c7b18ee41939391b71077b9930c440554b755084d0e3fb0165bc6d7b1aa65475cc4e905138589d5c7660b54f1c7b223abf5dedd0cd3
- SSDEEP 96:7YWnpu5vuYwvxxa4xt7Mz6ypEOsHbSrGn0bqDnujOeGzs:7WmYwyseGnVDn54
- TLSH T1A7C12134E2DC7EB803B1117A92839D46EE68B3E348610454F6CEE34B5FB29192257B37
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/ItroublveTSC.ico
- SHA256 6867eedf73dabc91f2556844d37293466d4918b6ebaab6f83d45db8a7f77f8d9
- MD5 849d4b84b6d00e02e22e1e2bac3fb26d
- SHA1 f88d43398865f8497baf226466e3ece0580f64c7
- SHA512 58972da8ea94eba82e4c09f7f2fb569252c8ffeadfc6040f44b41d91c8b7cf02d38ffb6a1b84149e1985b4fb57fe8ed32efdb6e9fb870f96f28565ab57873d7e
- SSDEEP 6144:AsQA+WdlH4piJAiCC+c3e6iiixLifXiiiJ0Ny4SildqqQG2ixiiijEMiViihDfX6:7J+WbEGDfM2
- TLSH T1E474B5E8CADA8111ED8B2778E8761D7AC42BBFBD99B535CD850EB470BEB70D26074041
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/ItroublveTSC.sln
- SHA256 f4090849ef22ba1f0b52a792eb5c1799b7231b49bc8e9666ed180b8ae42bb115
- MD5 e817f37f911ada7ee51873966ec6c87d
- SHA1 b84a225bc2b866b20fbac422fe7341a3ff03c0a1
- SHA512 47a20ae1bf0d0180b589c2c4f8026cb0bc33b12d4477f15db840ebd5286fba75a7dbcc5e7700081fc4056313937624af85009944a686e49e8ab9a99a28f12343
- TLSH T14B21C8AC201D9DE0798A23EBA5E21DC329374240D5AA4D3D52DE58D87B2FE04916B49F
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Mouse.cs
- SHA256 f37f5606e2dbd9eb4d7ebdfad3d963cd4f68b4fb796b8b6c5b5ff3c6d65bf721
- MD5 a87eb8158dee7ae9bfb350e1ed0ec845
- SHA1 50e0642421c18175473bea3810b92932363bd49b
- SHA512 e9b3fa8b63ae2244ec13afecb9903b71d9a6d275a81d6e8293f91d4f87a3f02150add04e1174c54d5685a81918ff1e72f0c5f38fd04161ded54aa5168ac8fbd4
- TLSH T1B5D0C9566657C9240CF39903EB04A066EB03816B02E6EA01BCAC17210F23005AA38E2E
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Program.cs
- SHA256 5c94e623bddcefd9b348371e64fa7a26697dce478e43545ed69d763281da3a0b
- MD5 0d5828d8883dafbbd98b959089d40bf8
- SHA1 1eee610c89282c6802506e632d4a38f9118be02d
- SHA512 d8eaca255c59fdf547d62a0e70d3ec8a38c9fbf9a9a47a03bcb102509df76e7f8f10e26833ac4bfceb9a692630e4e2cd4d894b9ce361377e79cfde5d0083120c
- TLSH T1B8E0CDA632DEE6885AF791FB9A0540D4D973153F0EBD3150FC5C4441DF360058329E02
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Properties/AssemblyInfo.cs
- SHA256 1379b15d78826e538f15ab2ed608c96e364c07ee69cea87cfcaaa8848548dd0b
- MD5 c9fe4e8a8759075a520fb9724f581a06
- SHA1 cdad464ece6bc5fb56ad6f42fa206be6131cf603
- SHA512 e002e8d9e960a5fea2042771e12eed08346fd9b87fdb4d48b212d1487abe47768e00b35d1b313f29639581d797f718fa2fc7c0916f30563478e1c5fce4dda1f1
- TLSH T11FF067AC121AAB4DCF9004D7FEA774C9466F333040EE480666FC3C43F896AB88259926
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.Designer.cs
- SHA256 8c09a384cf3f837378ae14fb5c5268ffbfe8b6deac1a91d2fcce99173b373dad
- MD5 03ef5d2613de1b278448bc3ac7c7454d
- SHA1 3489875774dc0d0eb26edda7fbe149b58a5673c8
- SHA512 d5082893ba54815f8212c30470db1fb157de357bc4ccea4eabb45b5247c0b55bc6e6a1b99e09c63a11f5df5135296cdfbca96221a3a077dbed8d95b0f6b72a6d
- TLSH T17651CBB71FD4C5324834D59B9700F451CB662123CA3DD438F8AE02655FB6390436EDAA
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.cs
- SHA256 ef9164d554fcbfac2d63c470d9d496921ecdec62f718af2f4dc794dbbbbcdff7
- MD5 1bfb12e466b9aca493bc5099abb8874a
- SHA1 21d742e2220ffde5f84e42065f9cb67afc5f32dc
- SHA512 d23d6cbc34715e6b50eea1a6a9ddeaec6512f9a0bca085064486123f042fe9cbe0525bb8eadbc51d47196ceec6809ff6179d185db691aa8375ea0c1349da602f
- TLSH T1713143BF639E9AB64031AA578E016001DFA35167D6B66158FDCE01A09FF339007E8F78
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.resources
- SHA256 e13ed2c59366d0eea74863fd71a81f0cb977cce1edfde304fc538690a4f6ac89
- MD5 cd7dbc7abeda9893ce25793744443958
- SHA1 dbbbbe2694d4b9b990881f279b4313574dbeac9b
- SHA512 e880f131ff460384940248ab2ecd97189ae0b7169fe5246440dfbce32f295cbd7697ce2ee65b434a0e40be91b91c21b2c14b1f446b2b1650d0a5d94c0d4f37ef
- TLSH T1AEC08C36130C60B6CA621E7B241875C2122BD619D538296CDCA9223CAFF2317DBD3E62
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Properties/Resources.resx
- SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
- MD5 4eb5913a0e5aa842250f7419538fa230
- SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
- SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
- TLSH T149C11245B1C1DD260FB3482DE6523988FBA8923F02356C50B4DCA61F5F72985A6B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/Properties/Settings.Designer.cs
- SHA256 346c99939b4a4a2851069e60bfa0e9af16ed9bdde09b71036d2699938b53e5ee
- MD5 d4c0fa029fcaf4521acdb89b1362fa80
- SHA1 88b9fc981c6fb85902c13d2001f3c312121ac468
- SHA512 4f35dc6331708ae39353126ef4628b86a4fc66e84f6974371f07344a08f2318de88b7af9f4401c84884c536f1530f28464da63a27a96dc9297e3e93407cf0654
- TLSH T1591199F62E91C73601A2E6AAD605C163CF32122BCB2E9439308C4205EF3644483ADEA5
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/Properties/Settings.settings
- SHA256 91edeadaae594471742999919b67fdef7f54af657386e5f3c5280fb25c33f819
- MD5 4d1ac5be5911e8b83bef47cc5458296f
- SHA1 237524250283b15813a5f2a6853845ec86c13c0c
- SHA512 d9f9d5baafe31b4b9612c188edf63a1bb5b3c960efc3a5229b36e5bc886ed8645b5e44f0ae72acdbab4b2eb24438fc4d733706f6c4d47e39f573bf1ab20bfad3
- TLSH T1C9D05E9D9484CD6D86616560B46CF23DA4606A27CA389574B138378F285F1C612EB8D7
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/RoundBtn.cs
- SHA256 9884f2f3d3afc9894f2ada0df3597bc2428a55dd5456b14996d31a113ebb024d
- MD5 a65c5d6379a26f18249e9f76f9d0f29c
- SHA1 9613a5d2874e9add2e063d23c6c48216648d8ac1
- SHA512 90eabc19354ecc46bc013d6f7b57bd3e6b7799c1ed3b13488814e454b6b72b68f6dab9b93f55126d1ebb1013c709a946e0a8c3eafa4e34201d318eb0d0cbc0c6
- TLSH T16481356DA72A4D078A73DA2D9F32610BEE5B74171296460C3F9E00D93F7402CB5A9E35
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/app.manifest
- SHA256 539dc26a14b6277e87348594ab7d6e932d16aabb18612d77f29fe421a9f1d46a
- MD5 b7db84991f23a680df8e95af8946f9c9
- SHA1 cac699787884fb993ced8d7dc47b7c522c7bc734
- SHA512 d4a78daf4ae93952197208752d801390ce39a519e7f5aa1360c42fc563ec0e221625b1bfec2a9564fd3dcd14c18b74d5d9fa6e57c2bced40c1f32c6814b4c523
- TLSH T1FFF0DCC1D188CA6AD33042A13A66E420A2AD435B19DD49EC74DC29BB6F0BBC680C30F1
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/frm2.Designer.cs
- SHA256 e9e7d38a24a657ab4db94ff1b29e698eacc0741b9ad4708a46ad545c77fe06da
- MD5 47b9c1d2a45b9c88a9d136c0b2884db5
- SHA1 a9469a9dc625db6cfacd70421cfa3af2f6e4fcc5
- SHA512 4bc4912a86fce06a23bb946d9c523a7902ddfff916f1ddd0991386b3c74072c54bfb55195853b109d8a0a91926142fe7a5ab586e9644aa7abdc6cfebcdcceb21
- SSDEEP 384:N+dc6SE8d6BuPF7mlmab4VAtgad94zezIV+XplSDzO0V9w5TYNfv9JSVk98MOaTQ:UdpMmmrAuW
- TLSH T18B82AE28032D908CC9FA610C6F059AC0FB65212F7C5BDE2D79AFD695CF366254338AB5
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/frm2.cs
- SHA256 fe15f27d6c428f7c92249461de50a1b18db6a3af91cb0989ff54e49865c7e67e
- MD5 34d14215be94b15f75c065b3cac0b7b2
- SHA1 682f9cb2dfcebf571f9b10fcd3ed943079863a16
- SHA512 98689cc6a5255a90eb51dee8b770bba1685fe14b28051f302a9a5617820b147e2044d0706c79b46ca589222a4226b393aee8dcfce38b10cac2443a319e616b5d
- TLSH T1CC61AC4C339E8B6D41A3520DFA30358ADE6DE10B025551B9FEFE90C7CB384954768BB5
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/frm2.resx
- SHA256 2d09c8a6a77c2697008ecd854adf16fbb1c43d6443f7cf6a5e3a1f770cbf10aa
- MD5 52043e4305ef346163d6808f570487bf
- SHA1 0bb00aefac778e032335168b30a59c49e3e212e1
- SHA512 085edf11df06505eda5daae4fa75b29ba1832689b523f2997679c4d545d73dd7bb574bf79dbcca3fe081ca77a68ec68ef118d907d5afa759790e4ca558588708
- SSDEEP 1536:Kj2v6LL9mhrSuOvM1zhktTzPiX0K8rah9tC1fz20B6/w1syVtF8AODJFURrRZuTf:Kj2SBbPUnwTLagxj66rR8Y9K6Qfi/Hvs
- TLSH T19EC4F77880541D6F2AAD0ECF2A055E5BBD3128C747DD0481B32C7BBA9B3AC958EBD474
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/frmMain.Designer.cs
- SHA256 1f977bf0e390ac5eb960cb7b25d1c4934756e23055bd0fe07ed837aa981ced83
- MD5 eb44fdf5b3cd40ad419579e5a51569dd
- SHA1 320eac6c21678318a0f6adfbc89a0e24d30a8a75
- SHA512 108ce82a74db8a5e97a70b3e6cbceb2cf2942e5dbda9cf430d28b4a300faab2fab6c880cb087e7f5307d3559bef7186407778f50635aac5e4e952a01f9426fde
- SSDEEP 768:alt/bOSOumm7jYaEaJiLxTFfFwsZfFft41/x/Wicf+hUZ:mrmmPYaEaUxTFfFRZfFfy1/x/o
- TLSH T1FD239D28132ED189CAFA11496F058590FB29212F7C97CE3E789FC695CF36635433897A
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/frmMain.cs
- SHA256 ecbd6de19ff93139c8f97fb33ba2d3724e8fa0bbb16e86b1ce69374cd0fd6de7
- MD5 2167aa7e79a5982f6538c80bb44692ec
- SHA1 22111dbf0be05a9e181a9ab3f9115b22e5c17a8f
- SHA512 9b7bca25aec482fb6d2539fa46b1e3d2977ec3397f4183a40e8f5d3b4f0ed5dffcf318d69b2665ae1dd5c548d3ae46225cdd831acffdbd05e0d1756ba346c6d9
- SSDEEP 384:EULzqPOXWxFwPokq7gmxrxhQwjRCr4Ju4LnTC5JwSMW:wGGwXW/QwjRJu4LnTC5JwSp
- TLSH T1D2A21E1D158E9BABC5B3623AEF831407EA56122F06958270BFAD8AC65F7407442F4FF1
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/frmMain.resx
- SHA256 2d09c8a6a77c2697008ecd854adf16fbb1c43d6443f7cf6a5e3a1f770cbf10aa
- MD5 52043e4305ef346163d6808f570487bf
- SHA1 0bb00aefac778e032335168b30a59c49e3e212e1
- SHA512 085edf11df06505eda5daae4fa75b29ba1832689b523f2997679c4d545d73dd7bb574bf79dbcca3fe081ca77a68ec68ef118d907d5afa759790e4ca558588708
- SSDEEP 1536:Kj2v6LL9mhrSuOvM1zhktTzPiX0K8rah9tC1fz20B6/w1syVtF8AODJFURrRZuTf:Kj2SBbPUnwTLagxj66rR8Y9K6Qfi/Hvs
- TLSH T19EC4F77880541D6F2AAD0ECF2A055E5BBD3128C747DD0481B32C7BBA9B3AC958EBD474
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages.config
- SHA256 8ba11c643b589ffb81f7fc7972d6d0de96e139c5a27da20c5c8026fb5c9f7847
- MD5 e6d584b542a95370be7c8fc9403666b4
- SHA1 e967ba2e4af48d641dfdf2c3395ec9ea60e95c22
- SHA512 36ed1cd6b858ec9838e6fe9b4dc91bab43d3aba668480448a18ec80e4193fd18e023fb2bfe057be327c4dc0605caa7dda0725e8288612a599c77531ce0fa7c1e
- TLSH T199C02B440324D6338BE02E24B7EB4488273C3127B02108CC7C5013E6836E4094507225
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/Mono.Cecil.0.11.3.nupkg
- SHA256 43125c46ddde632ed1d26736e45fe13399f8a95a8102564286c10a9fe63d9d75
- MD5 1c4e21f49f7e2bcaa588d5c8f0e0f2bc
- SHA1 ed2722b43e75081333b062e926b98227fa530d87
- SHA512 4a555e9464c142912d5bc24650136b41d5c37bd784b87ad34c2b7f4c8bfa1a2670c239916f3dc9bbe1138542664bf3003144fbebd3becad2ab7771d41564c0ff
- SSDEEP 12288:VIrzz94V7+51lEhrBzQoy/xTqYiX0kt0MkA45ml07TrYfjLpHotPBpEb15ov:VIPzuJWlEhtzQoyZTqYk7hk/5zYfHp6D
- TLSH T1A9E42370D159A6B4CDEB1CF23DCBC1F837D32D2710A6D5DA0301C26B98C9B976936896
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Mdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1a05f2f7aa387210bfd0202fa70a06de73040765f5f988c3e8d50e5fec7827bd
- MD5 1cadd4d13fa6ac620fc0be9700e36b89
- SHA1 410f6bdb164bb94b3cd516d155dbd6e8dbe238cf
- SHA512 558ec71134938aaaafd41d91036e2c8f199e692042bec71abb851fea4e091e31fadc87f82f8ff3ca67178ec23393b9423813c7acb32992deb6edce7aca312e53
- SSDEEP 768:fr5EYZep98C87KHeBUZwrEzsEAnbF+em50Kktms4CRIcZwMRTIzaAtpT:fr59g98C87KHeBUb5AnZG+TdwMRTdAtB
- TLSH T17E1319156BFC8B27C29E51FEA4D125060BF19178A613FBA79EC0E5F7BC43B85450222B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
49122
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\mdb\obj\Release\net40\Mono.Cecil.Mdb.pdb
mscoree
_CorDllMain
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Mdb.pdb
- SHA256 cd0e2a8ec6efb0b98dc9f5b3f88c311f234c881fc1da02804ad60091893377b1
- MD5 15ae0ef0497fdc03d208355545ab7ede
- SHA1 58aae2d2ced7de40780ab240bba72b4f6595241c
- SHA512 a8048d1d4aac80d82074a2c80d67e8878d441a0b1064d2b72b8aa1ccd0fdc3a52c3aceb7e146df5628c08c78912ebbc9fc8a0b44ebecae737f3fca260e44ef6f
- SSDEEP 384:F3YdBvkE/zECNLuSW5oAS+yjnLUSOcw6uRK2tmrNvnmBXizuXNYpkUxBLxukOVO6:CBvkE/znuSEajnLUF7FCBLxu2Ktn
- TLSH T17E82A326E2C88759CA53653B8172971FB3F6D0C5D78F0F0683ACAA79BCD27147262345
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Pdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4ae57a84baf3a8191312a860adb0ab65199c023f951bd739c6180965fd9b00d1
- MD5 d1d8de0281da552f89729a148a316d3a
- SHA1 8a5b086493b97ea9e2b90978f77de845dea26eb5
- SHA512 b331977a759068266fbb5cb997fb09251f8607d2df34765744ecbed37a00437739664b093aba2bf39b34dcfdeea30badf45fa3390c805d1ffc63d3dbb6ef1475
- SSDEEP 1536:3U2qJ+RazRt/Kc4oJiOxFR4NdJF0/RfhF46HAoYKHgPzpS6wgfa1C9w:E2MRtrfrR+Pe/BAiAzpQgy1C9w
- TLSH T150936D36E7A8A566D8EC64761476090903F2D2AED1539B565ECCBEF8192FF300933393
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
94650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\pdb\obj\Release\net40\Mono.Cecil.Pdb.pdb
mscoree
_CorDllMain
Name
.text
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Pdb.pdb
- SHA256 40ebe57989d42f07b74d3632140c889fe6b456d53f53d35f854c317d2765d786
- MD5 1bbadbe92ebc6765f5df8ba52c483ac3
- SHA1 e2b3e790a4e6e7d3f01c45dee2f0bcf5e532711f
- SHA512 700e64d8070233cca1c782768938ba6feb9490cc37887b1e7ac960243eb865cf64c02b58e95543e2317561c5b0005106d37974d282dc076419ca404f43ce2371
- SSDEEP 384:FgEm/xKLGaNrXoJL8xGWYBj1NoL9SOp9uxTt6qaA+3eOMH2XsTus7foJ4RmkZZQ7:7mGnWgxG3B3oL9Nm8A+MCs7RzQ
- TLSH T15EC2A726F2B4CA29C867073D81B743027BF4D189931B0B0B13ACF37599DB7682ED2259
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Rocks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c1ed51d12a59edf8b8f3d0a174a8c08ddc1b7e4032659ef983d071db4e1d5230
- MD5 e479be300cde63f146e245e5bfbe87dc
- SHA1 6e2172fb8b279f48bc77822b2016ec5d6ed5ec0a
- SHA512 caa6e3bfb98741a6331c97e4725e5be99f6a9ff6be3b82725745ecb0b3b24d2c6bf2e74d72a64935b40ed8a7ef99757b94310f4951f74a1649bd6e259b798664
- SSDEEP 384:D0ve8JOuJ5iC7n2NwxEXCni+FXcMeDz8PmR1ugLoaeuLMBG9UphJAprjEMuFLHad:D+m4iCyrXOhW8uRssveum1pZFLHFB1
- TLSH T1F8C229012764CB37D1EF853678E1129803F7C1A66103D7199CDCA6FAAC8B7C59B117EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33578
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\rocks\obj\Release\net40\Mono.Cecil.Rocks.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.Rocks.pdb
- SHA256 f0423005d2a238178d841a7035e72df4160a89bfce4d894b83588ad2a81fe7f4
- MD5 e40811196a1034c70f199950233c372b
- SHA1 b51fc11b23cc68ed31edf8b1c64ab435798ea570
- SHA512 520e454a498811d0b8caf3347d1652d0a8ec8acb759ff4e59b03eda007a58498235ce6439a78e49fc2f5f1776b06acd37a7096c838ca775d1bf160f288ab3a2d
- SSDEEP 192:I2Djb/OLyWM45mBSOp9qxauwYgKiGqCEyKKJqqFeWixQ:Ikj6BL4SOp9qxnwYgZV90qPWiS
- TLSH T1A0028113F9F88F5DCD8B08B8C1639319BBB0D68CE3460B0492A3E679DC463A523B2345
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 96fa99d63cd84b76eb37505afc603d404e12fd5cb27e8caa1581aad97b74ae69
- MD5 272745086cb31748fbab2347bf1b42fe
- SHA1 9060569b45942016a5f1263f47abda63d4c59687
- SHA512 8634d0e217a87e8e61373f5d8a70b7738430c809815648937d01b5d74f2f736eea1118fefcc012010995a71efbe53ca2c2e48501c74d16634e24ca30e5dd1843
- SSDEEP 6144:c+hUsGuheHUup2gXxtgvZqzoxm+mYrsrZvomboSF2Y:vuWeHz0ktgvYzMrsvsSF
- TLSH T130746B2023FC863BD69F977BE06B042D46F5D456738FEB895C88A7FA4C47B924900267
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
361038
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\obj\Release\net40\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
347KB
Virtual Size
346KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/net40/Mono.Cecil.pdb
- SHA256 20306b719de7a825dcf3c00007878731f627d6d5fd0707852200c6af2cebf4f0
- MD5 7e6b56d15bdc4d172b390af7ee31be76
- SHA1 b817b14de8ad7c9cd4b1777edfff02549ed797fb
- SHA512 9772411d1d2c774383a9318d5ed8db506c66288008af54a33d57fae80a3ddfba8d487d89b579ff6b54279ea695e1508d537f2f630c068306148c9b9984c85049
- SSDEEP 3072:fiuHAXWaW1/UWg/+EANM9Amv0HagjsgxIdPYfwCVadme64qqfg:fJAXRI/nVId0GxqZ
- TLSH T10704080AE985633DCB6915BA685361E42BB8818DE64B4B4363FCF239F8473183F53359
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Mdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5dd65700e11d8a9e3461044b0e6f82abbedddd6fc90afb53c2b53744b9281233
- MD5 54016afec9a4541de4ea7fdc4536bee6
- SHA1 06016e9cc71c257e9e0dc7a6a53844233b977dac
- SHA512 a276fbb162233936b20b4dad82b19f1ad90fe3af298c4e8fd8fdf9328758db378d69f2f4d1080444e7a65cf366a0a0da834a162a7dd6ddff9dbdd1a9a1873b64
- SSDEEP 768:nrF3HuZyOt78PeWSTlNeyJOgfGNOV/DVxPZxaCCrHpTFu6L4oWk:nrFecOt78PeWCLOgfGkVzKpTJL4oWk
- TLSH T1E30307086FAD962BC2AE55FEE4A126191BF1D53C6603FBAB4DC4B0F3BC437444512267
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\mdb\obj\Release\netstandard2.0\Mono.Cecil.Mdb.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Mdb.pdb
- SHA256 a041aef95b19a167aea676f1f285a40ba5f4bff2eaee622913c42515f6325233
- MD5 1139b05827fe41f6f69b1b7606320861
- SHA1 ab618e08e85986fe4efc7ae12e233736768f7e57
- SHA512 d4c8edefab5b1d5a3380ad3ee0e4a88390fe00c371085f35228c3d1772f24faf12f6bef8e1e636bd811866990e89eebcd03f4766cf5ca337049e8fd713162d1c
- SSDEEP 384:eB4dbtCUxM6p4+A2+hj3La3u6jMai+NLy5nj4SCm5Mz6QkOAHOuXch8YgY7fT2t4:XbCUxMF1j3LabToOwu6n7rrM+yxuD9o
- TLSH T19CB2822FD3C8C626C20245374171D359B3F6C2419B9A9F25E3E9A665ECDF718B2B2321
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Pdb.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f5234d2a93e1e25a5ca703cadab9cd9f0218975f1a78ee6355c0a9d3978c5de0
- MD5 f100e5cf51ef9837af10b793f3ed8703
- SHA1 713edb8aca42579319ec77eb392f5714c0731b32
- SHA512 a9e5d15d854ba5f874e3160bed489cbf340f9bc847e52d1c03c82c3689c317c940ee3f92317513278a6f7ab5bbc9b2e5bd6259ab4e1e9dad4d74e7fdf08ea42e
- SSDEEP 1536:3U2qJ+tTKzlXr+wHRsh3Sv8q+KdbEAoYKHNvzpS6u6faHC9e:E2y5+weh2+KSAiFzpO6CHC9e
- TLSH T169936D31A7ACA96AD8DC617724B70A0A07F2D2A7D153972A59C87FF41D2F7700932393
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
94634
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\symbols\pdb\obj\Release\netstandard2.0\Mono.Cecil.Pdb.pdb
mscoree
_CorDllMain
Name
.text
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
864B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Pdb.pdb
- SHA256 c2cac3273cb914f0f93fa1471c4ccde6681b0711b77d4e475287851d10401754
- MD5 b10d0850b69a971d2a5a327abdcc0583
- SHA1 0a93ea03524198461e3e20abf63e655bdcb37c06
- SHA512 ebc26ce9c0ee2a37d10649e3c6a68981837fbae8294e990782f9624c7a03b8fd8e23581393e3258663f062d761502bd0ced762d0a8aa4cda23aa216a1b1a006b
- SSDEEP 768:b6KjG9WgxG36oLIbToOwu6n7zmMAexVujsr2Z7o:b/EWgxGKhU7MexVV0M
- TLSH T158E2C62BE7B8C62AC806073981728205B7F4834557178B27639EB235DD9F3646FF2365
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Rocks.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b8106c90112b3d474ed3a7da8683c010f4cb9be724c0eaf459143464e611f8a8
- MD5 519aff3818e8871e428f403b9f1bf63d
- SHA1 e1d1fc47db18e2474aa348e1d39f2c0f930f4410
- SHA512 6e6efc407fb382cf0bbee191e620de0b494d207357789793548eb2f5b7bc0ee9e1c55110fd084d0da0d1f4904cc8b965c8244b55b4a856e8c3941bccc64d57d2
- SSDEEP 384:EWLOZBsQXmnFlPQnqc9H559krjuhXcVXD9PmROMLUBLMWG1UX8JvbrjEV1O/pl/E:raQHP+qcbkrPuROoUBBLXM/d
- TLSH T1E1B239103B99CF3BC2FF867958D2532802F1C96A9603EB064DCC90E99A5BF945341BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30674
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\rocks\obj\Release\netstandard2.0\Mono.Cecil.Rocks.pdb
mscoree
_CorDllMain
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.Rocks.pdb
- SHA256 0f67e6ef60af7e89fcb9976d91a13d6f7f18ed0904219ca88c156603ac88f53e
- MD5 50244dc478562f6e4818309208d3178b
- SHA1 22a7ab5086582242ef69b07b9a5a0fd5cfb95c45
- SHA512 3b1369e971b742ea57e0cc812e457d63a4b09573693a0fd7205022ffe76315d4fb20aa6fde7cd5b1871485baeb658e6d31e417e1230cb5e8db33ee635e00e07a
- SSDEEP 384:bQLu3u6jMai+NLy5nj4SCm5Mz6QkOAHOuXch8Ndqxng4gZF90Doo4:bQLubToOwu6n7mGsn4
- TLSH T1FE52512FA7A8CA5AC48655768022C348F7B283089B65EF74F3D7A514DD9F3588371731
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a4ac5e4d0d66dffdae43498e95ad502d042b0fc5c9d70264b9d4c88c3cc94955
- MD5 c4b802b9b66dc5b2b3f251c8822da712
- SHA1 141e52ac972b6a9001601140442709e2d554996f
- SHA512 dda56a6a1dd4aacd46072bedde582170ab67a95c16ca4847b9a39ad20ca74f1f37df2d6a64c5dff022380fee1e084f548015ae74bef395e74cf0273de331b09a
- SSDEEP 6144:N6fRR1AtYWP4aW2psE5MLv+pVRomxaSt1Q:C6tYWr/oGpVRQSt
- TLSH T181747C3433EC573BE69F637BD469042A42F5D816738BEF9D48C4A9F64C47B928A01263
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
359778
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sources\cecil\obj\Release\netstandard2.0\Mono.Cecil.pdb
mscoree
_CorDllMain
Name
.text
Size
345KB
Virtual Size
345KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
ItroublveTSC-6.1/ItroublveTSC/packages/Mono.Cecil.0.11.3/lib/netstandard2.0/Mono.Cecil.pdb
- SHA256 284f0e7c0098a22ab87272549688c242ef94553cf8a0f2d2c4f00e100671bded
- MD5 ab6e5bf2c188f5bf974f280e4451f398
- SHA1 ddc4a15a4ad59d856b37e686278af0c93cc17167
- SHA512 efd68de0c5362ee637f287f01e39a579139484150fb2ccf3b3dfae35d4331fc40428bd0a1612d739d6656c334527340cb8ee51b3a15cb50f02d9a705469efe64
- SSDEEP 3072:nbo4MyAiW1/UWEpz9RbCfQuFIqP5dwdHm+yMH805O:ymI/OwI+Qhc0k
- TLSH T16E04F90EEA84A33ECB6515BAA41361D52BB9914DE90B8B0273BCF135BC4B7187F53358
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/LICENSE
- SHA256 c5f56ad51c311bfb3a1d4a1495d60636b9967697e5f3d3da47fe6422774944bd
- MD5 bfec9c06de830d536aee4674675e6ae3
- SHA1 b6f204bcfff75f7094b4a44f766ed56c0fe5217f
- SHA512 29b6f307b3a2e8651f97909ff7a65f2172fac9b5d432df5fefa3720b6e590e145d439a609dd7fd4b29cf932486b792dffa65b9bef34383006e9ced7b528b10de
- TLSH T11D11751EB3510772189B23A05979ACD9F23BB25F7A5F2A84246DF345633A06CC5FF844
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/README.md
- SHA256 65f8487dda452eda08b8405ab20adb016614490db8af62d6149aed356b7db670
- MD5 6ec1c96781377789b44d9437b021e19a
- SHA1 73c92cf22b469508b2e517fb3d84a75a0e17da98
- SHA512 492848beb3f1031f9a19d1e8d7faa1962564833311a22a8cdc7600e79e606bdaa70b1b633d144538cab811d7d1636879b1420d828da5a6252dc0b0a9e5f2da50
- TLSH T1DD01101FD3E8D9A505A25DD1ED125173B311C1893A263D89646EC0CF137604F4672B4A
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/AssemblyInfo.cs
- SHA256 934538bf787f37f5daaccd43e90760dc3acb92347de97b849b6714dfa268de57
- MD5 edc0af510d5ad28e9bfe9fe06aa25960
- SHA1 c35989a41078bfc84857a454668ba56a1638c808
- SHA512 c1ff5715af4c590114c0423b7de6d63f1cde4b6fee241399b0c4eb8343adf6671109c23dd863613f5acad614bd4efba4655e00dc81dcfb88030aae4f7751f17f
- TLSH T161F046AC6742A79DCF010083BEA374C8037F732401EE1C052AEC3C43F9856B482A9A66
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Resources.cs
- SHA256 9945e24fadf7585d8a1dfcde8a342a3a0bc6da276b38a3955b599f4502d10904
- MD5 58c817519cf5724694410eb39abf0e75
- SHA1 8a5b67c695bfe38c83ca9d7af47c91daf84d1e49
- SHA512 2c6b0a0fca446957213fdac10b9929b2b2504dd98b44ec44fd2e22db9ddd14bc406d4a72ea3258053a53b23b0202b74a5f1c94ef709526fe8f86f67e83788fbf
- TLSH T122414E6333CEC66DD570154375387844CBABB546C2F9A0AEEC4618B8C7E13414FA9D6A
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Resources.resources
- SHA256 4d4d0b14272bf5d6cbb9c64dcd971c7aeee861e0e464b7ab5c85da5a046afb03
- MD5 aa77642495f6e822d8def3c00ef21b8d
- SHA1 5b0233cc00c43f786e68f3d22fc512e0cd29c965
- SHA512 e4ce7d60a531ab3dfee5dea6446fc62c47ed69bbdfaa9a635ff3032d9b169b3bab1676fe113d1c1cfa42ba84f70bc9b693a974fc70d1fc63dd3998558b62a709
- SSDEEP 192:ruokwJwAcKArr2QznJOSXQos0RKPAGcE00d89+tdTKzI8RzhkHmvzg2Cf:ruokwJwA4tOSXQ0RNxEzHtdTKzI8Rzhk
- TLSH T12912AEA72277AFE88A7EDDBE340914C79A77F22324346B78A8B8042D14D54C7F5A41D8
- MD5 SHA1 SHA512 SSDEEP TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Settings.Designer.cs
- SHA256 ea9d4d4c1161eea37dbb629920beeda2aa9dbc52249fb513c88a627b9a63a85d
- MD5 1630a6adeb42e1c14c172a6a9877ea14
- SHA1 56cc7871f882f95a3912248b6e87ca94106d1b56
- SHA512 f91a5d05ea860996aebc3547b239de11dc36d93660b943e1528c3428879aaebd4fb1f06c73aa37bd0f4b8bb943994fd0fbd82618353fe5b22f73b166d5029135
- TLSH T1CD118CF63E91D7370676E6AAD605C163CF32122BCB2E9435308D4605EF3554483ADEA6
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/Properties/Settings.settings
- SHA256 ae33bb940d36e9df222e22c16fcc4ddcfda269983e8c0f5708cf7b657fb7b9b0
- MD5 7e409394e73eda19c40cd27c4c89a895
- SHA1 547800c9e3e2242dcae6ad1626abf57a185c549a
- SHA512 8da0bf92b4be341602b1ab05985060d4f43c7cef7b1f1120d03e18da53bd51858ecf3fc21ca6c48ae65d29d50698da43cc42c7ad8b9440b5b3df65e8e6431b58
- TLSH T13AD05E989484CD2E97726560B46CE27D94202A278A389574B134778F285F1C612EB8D7
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/RaidAPI.csproj
- SHA256 cde202ff08e6559edf6077a5eb3aea170038251c54963a21694e539fc1f42ace
- MD5 4a2afb4d8e493e9a7d929d846731c5e0
- SHA1 b49c287063100c4ecc0a077e938e0e8c6abf5b2d
- SHA512 dbfad2cfe6803a6d1cb22cd07f958efc7a10c7247b9c1de03fde9a0fa5f9aa2bbf28c8e5b71fd1fe362f07ed357f3162550d426fa1df27db5611f8d0525b681e
- TLSH T1B451DF34E2D83AAE07B51137D1E39A06DE2463D314B54CA8F35EE64B0B73A942153B77
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/RaidAPI.sln
- SHA256 fa45677f57c9d2a3d0c13e1e33549bd0bcc8db24882119ff5cfcd85f1da7ceee
- MD5 6679fa1e88c36b16b69d0c817c705561
- SHA1 5c7bd491c401b1e018e0d80c3a90506c1dc8c552
- SHA512 2b19a89357bb39ce3b577560c7580dec98ebda8f23f283d5ef809ff250c61f9ac5ed2d0c22a55fa5863db5d0c6d952bbe2818929e62ee26ebc3260c3ab921099
- TLSH T1C4113AE8220D0CBAA94917EFA1E21CD76E374141D1AE483C414E25EC2E2FA5592B69CF
- MD5 SHA1 SHA512 TLSH
ItroublveTSC-6.1/RaidAPI by ByteTools/StealToken/Stealer.cs
- SHA256 249403dc56eeb38bc5d77d6002c7604a4ffae4ff8283b5446047c6a27a694f7e
- MD5 3afbe5831aeb3a8d6591dcd8612e1881
- SHA1 3a3d07494ba0e3bac4727067229a04450e0371b7
- SHA512 94cb5ae507cec680b5e9ba8f6c6fcb4796a4dc0a415007ca66db78ac3bddd88d0f40c94303d8c2935ed45d1a82eb780f600dc73ef65572f78a86376ec9ed9ec7
- TLSH T14311C21D3A6FD38E0EE380266CF22049C7ADDA14457B1896AC9A99C1CC6B93E0335E91
- MD5 SHA1 SHA512 TLSH