Temp-Spoofer.zip
- SHA256 e45d149081b2f65cee27d6a038afe1ff9b5c89382a935deadc6faf7c45d2f215
Overview
overview
7Static
static
3Temp-Spoof...er.exe
windows10-2004-x64
6Temp-Spoof...er.exe
windows11-ltsc_2024-x64
7Temp-Spoof...ts.vbs
windows10-2004-x64
5Temp-Spoof...ts.vbs
windows11-ltsc_2024-x64
5Temp-Spoof...on.dll
windows10-2004-x64
1Temp-Spoof...on.dll
windows11-ltsc_2024-x64
1Temp-Spoof...on.dll
windows10-2004-x64
1Temp-Spoof...on.dll
windows11-ltsc_2024-x64
1Temp-Spoof...on.dll
windows10-2004-x64
1Temp-Spoof...on.dll
windows11-ltsc_2024-x64
1Temp-Spoof...on.dll
windows10-2004-x64
1Temp-Spoof...on.dll
windows11-ltsc_2024-x64
1Temp-Spoof...on.dll
windows10-2004-x64
1Temp-Spoof...on.dll
windows11-ltsc_2024-x64
1Temp-Spoof...on.dll
windows10-2004-x64
1Temp-Spoof...on.dll
windows11-ltsc_2024-x64
1Temp-Spoof...on.dll
windows10-2004-x64
1Temp-Spoof...on.dll
windows11-ltsc_2024-x64
1Temp-Spoof...on.dll
windows10-2004-x64
1Temp-Spoof...on.dll
windows11-ltsc_2024-x64
1Temp-Spoof...on.dll
windows10-2004-x64
1Temp-Spoof...on.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Temp-Spoofer/TempSpoofer.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Temp-Spoofer/TempSpoofer.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
19 signatures
150 seconds
Behavioral task
behavioral3
Sample
Temp-Spoofer/imgui/imgui_widgets.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Temp-Spoofer/imgui/imgui_widgets.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net20/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net20/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net35/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net35/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net40/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net40/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net45/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net45/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard1.0/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard1.0/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard1.3/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard1.3/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard2.0/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard2.0/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/portable-net40+sl5+win8+wp8+wpa81/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/portable-net40+sl5+win8+wp8+wpa81/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/portable-net45+win8+wp8+wpa81/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/portable-net45+win8+wp8+wpa81/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Temp-Spoofer.zip
- Size 10.3MB
- Sample260809-1glj1ay1ds
- SHA256 e45d149081b2f65cee27d6a038afe1ff9b5c89382a935deadc6faf7c45d2f215
- MD5 9a39adc580c206bcd71bc0df84a3c06b
- SHA1 970c9878001bdec27a7b0eef0e1b981b65341c15
- SHA512 a72d80975ee0c0375ebc91218538650c8704faeb085cf4521c59a97dea30cbd863616f312c18e03325cd34ad336eae7626e7a1fba2a0918583c4eed22520fa97
- SSDEEP 196608:XOVt/acm9+F6ec7rEirYVRBzhn/+XSUHrwzs2IZBTztTemb6K:Xi/ac+dYYYV/JWCRsRTJemX
- TLSH T1D4B63311E84842C2B0DDDA72D28F8E786C3B69953D7189A0C66C933D1BCC9F5F6FA116
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Temp-Spoofer/TempSpoofer.exe
File Explorer
-
Temp-Spoofer.zip.zip 10.3MB
-
Temp-Spoofer/TempSpoofer.exe.exe 8.0MB
-
Temp-Spoofer/imgui/imconfig.h9KB
-
Temp-Spoofer/imgui/imgui.cpp582KB
-
Temp-Spoofer/imgui/imgui.h274KB
-
Temp-Spoofer/imgui/imgui_demo.cpp379KB
-
Temp-Spoofer/imgui/imgui_draw.cpp206KB
-
Temp-Spoofer/imgui/imgui_impl_dx11.cpp27KB
-
Temp-Spoofer/imgui/imgui_impl_dx11.h1KB
-
Temp-Spoofer/imgui/imgui_impl_win32.cpp29KB
-
Temp-Spoofer/imgui/imgui_impl_win32.h2KB
-
Temp-Spoofer/imgui/imgui_internal.h193KB
-
Temp-Spoofer/imgui/imgui_tables.cpp209KB
-
Temp-Spoofer/imgui/imgui_widgets.cpp.vbs 398KB
-
Temp-Spoofer/imgui/imstb_rectpack.h20KB
-
Temp-Spoofer/imgui/imstb_textedit.h53KB
-
Temp-Spoofer/imgui/imstb_truetype.h187KB
-
Temp-Spoofer/lib/proxine.lib2.1MB
-
Temp-Spoofer/mac.h507B
-
Temp-Spoofer/main.cpp169KB
-
Temp-Spoofer/minhook/MinHook.def252B
-
Temp-Spoofer/minhook/MinHook.h7KB
-
Temp-Spoofer/minhook/Nouveau Archive WinRAR.rar.rar 24B
-
Temp-Spoofer/minhook/buffer.c9KB
-
Temp-Spoofer/minhook/buffer.h1KB
-
Temp-Spoofer/minhook/hde/hde32.c9KB
-
Temp-Spoofer/minhook/hde/hde32.h2KB
-
Temp-Spoofer/minhook/hde/hde64.c9KB
-
Temp-Spoofer/minhook/hde/hde64.h2KB
-
Temp-Spoofer/minhook/hde/pstdint.h1KB
-
Temp-Spoofer/minhook/hde/table32.h3KB
-
Temp-Spoofer/minhook/hde/table64.h3KB
-
Temp-Spoofer/minhook/hook.c25KB
-
Temp-Spoofer/minhook/trampoline.c10KB
-
Temp-Spoofer/minhook/trampoline.h3KB
-
Temp-Spoofer/nt.hpp1KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/LICENSE.md1KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/Newtonsoft.Json.12.0.3.nupkg.nupkg 2.5MB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net20/Newtonsoft.Json.dll.dll 557KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net20/Newtonsoft.Json.xml.xml 590KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net35/Newtonsoft.Json.dll.dll 493KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net35/Newtonsoft.Json.xml.xml 536KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net40/Newtonsoft.Json.dll.dll 560KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net40/Newtonsoft.Json.xml.xml 548KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net45/Newtonsoft.Json.dll.dll 683KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net45/Newtonsoft.Json.xml.xml 691KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard1.0/Newtonsoft.Json.dll.dll 653KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard1.0/Newtonsoft.Json.xml.xml 670KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard1.3/Newtonsoft.Json.dll.dll 671KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard1.3/Newtonsoft.Json.xml.xml 678KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard2.0/Newtonsoft.Json.dll.dll 677KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard2.0/Newtonsoft.Json.xml.xml 689KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/portable-net40+sl5+win8+wp8+wpa81/Newtonsoft.Json.dll.dll 457KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/portable-net40+sl5+win8+wp8+wpa81/Newtonsoft.Json.xml.xml 507KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/portable-net45+win8+wp8+wpa81/Newtonsoft.Json.dll.dll 652KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/portable-net45+win8+wp8+wpa81/Newtonsoft.Json.xml.xml 670KB
-
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/packageIcon.png.png 8KB
-
Temp-Spoofer/portable_executable.cpp3KB
-
Temp-Spoofer/portable_executable.hpp707B
Temp-Spoofer/TempSpoofer.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 6c2446f06869a50df82165dbbc78527186cc70e8ebb50c48634de0ab9057c00a
- MD5 53648dee77c997e3665a8c3add00eeaa
- SHA1 dfeedc4eae6c517ef1286bd041cc36de8a608f46
- SHA512 598afff16262ee75f9866a62a124407c6ef5dff8c577371ea79ea8817805be998ba6d0553497400312c1cf5c0106772696727f312bd55ac99a8c23dd6e138f65
- SSDEEP 98304:V3T2h9PPeJzgg3ty1qrMGUjEBoSMeduU8gsHZVY/YK2:VjigJMg3E1qwQFM/U8gsHCYX
- TLSH T1FC867C43EC9159E9C1A9A33089A79253BB71BC481B3223D72B90F7392F76BD06E75350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
506368
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
300KB
Virtual Size
643KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
340B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
479KB
Virtual Size
479KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
97KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
775KB
Virtual Size
775KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
456KB
Virtual Size
455KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/95
Size
188KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/112
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
50KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
409KB
Virtual Size
409KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Temp-Spoofer/imgui/imconfig.h
- SHA256 26e2ca0862f93e14fa97ec0786c46e501e863da6768f4c9431298ee75ca19d60
- MD5 ba819c635fb54d237ce2b7331dd1b48a
- SHA1 1fbd89a13f07f445ca85acc73aa550d536cb1637
- SHA512 a8e0ec9fe0763aba8604ee46a6c755026764f57d1c0392359522eb8b5285f3c402d3759180f0047ad8361382edbaa0ceebc30c8acde5d97d6acb0adf08d74ff7
- SSDEEP 192:9fgoLWD2IgdiR2cCcQKPbwFH1MND0tUjn5mYUEQft+Xt:9fyD6UFCcQKTwFH1MND0tCn5VUEQft+d
- TLSH T12A12B60B3D4A22500971E571B76F9175D705CE7BB350E0E870BE6A5C272482A12FEBF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/imgui/imgui.cpp
- SHA256 2c25143c697592ba509a2018ca534fb0b338b355f549438e34147af83ee81978
- MD5 88162e82c9705b53aa10f3156f36c78d
- SHA1 f2d60bbca70ee3249c1407147f20b796ed89255a
- SHA512 af4fc8cb2b19e56471aa4023c11a63b04fa0bc436c6f0937371fa2136a5f779775c96359790a42bab7097a3aacac5694d607f4c07c4a594eb72d7b72c16f19ae
- SSDEEP 6144:lLq5RRn6Dx9am16Sa5I2mrhnR5OqZ4UcybU8Gn2t2sLfCamOvMWNtc3Nx+pzhbUp:NCR1U16/tyBf1mmtUNUCCnVG
- TLSH T1CBC4E6A61C6335169A32E4386BC7B346E73A45336794D5107A4E234CBF94023867EBEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/imgui/imgui.h
- SHA256 e271aa94191d367d0b9f99e5f3a30994e9308cb2cc170413453be9e26e484eb1
- MD5 c83bdef09dd758503c8bf11f3b1a3881
- SHA1 ee1b454beb9257e4a62568d0c02ec2cad88bc035
- SHA512 a59b98d263db49913510c439dd28df8c5d7cc344cbbaba6bf6379cd153d82c53b2833aca1cdf89f3fa6685fca50a01651b515af758f15d6fc3ac99e804ec1cbc
- SSDEEP 6144:0SSaY21VKTQ1TAMVAdRcrcI1V1DB9MK1f3:f1r1cMVADcwIrT9MY
- TLSH T1FC5409472E013221CD22D2516BD6E546DB2C9436BFE0D6A0364F639C6F4642B427EFEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/imgui/imgui_demo.cpp
- SHA256 0fdcacd5803bffa781c26c64c0fb0d01dc626e9c910487b69195481c7b2ccd14
- MD5 70a315126c7cce3c00ca95ab16b1af96
- SHA1 1d17962094467604ea91a4a0d998d320e2192737
- SHA512 4799bd40d3ff5f34f39fa3ad4b0a7064526ec68aa1149dbde045b361c2c0a9a7559982c89d45ca189c71dabd2c74c63828d247c12c882b12be65eef456694b96
- SSDEEP 6144:wFMGKDFgEaxbrBAB51wHrcAyDQx5bI4cxfdtcIe4LFUczc8coFL+M6Oc8Lt+TYJs:wFMdCbrBAHCLcAyDQx5bI4cxfdtcIe4o
- TLSH T134845FCA2E1239129933D03927C79465EF3848335BD0D660BB1E729D6F8846542BDEFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/imgui/imgui_draw.cpp
- SHA256 a9bee62e3b9c239f27c482d5d006d7a5c6ec502822576d99759410c67331a504
- MD5 202f317e173eb9b9fc4118409104a648
- SHA1 67a91c7b90c0298e948bc80d3f326eb0d469ed7f
- SHA512 011cc4c2db6f101bc3f0d7d42ee86d9175fbce4ba9ecdc8797b69c75c08199f7a166061b0666b71c5bd4a4c3212098b4221d25ad21b3009cef46a5b3a16f44a5
- SSDEEP 3072:tU75Zm68mKMkvixfo5iqYGPNlb84uwCmI2b:tU75R8XviBNqnlZue
- TLSH T194242A4D0C5312534E63D47C1B97859EE64EC8A3BAE8D904BD4E578C6F81428CFBCB9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/imgui/imgui_impl_dx11.cpp
- SHA256 50e94170c60c65f08a03cc29d842464360378d194a8c99e14651595670ebdc05
- MD5 a269583de6a209523bd3c60743b1d2f7
- SHA1 d42a7f869c1341c17ac970a346801e8fea68a060
- SHA512 64441befe6191f66d5f17aca242e1b26894969518e62b27c81ebb03b058212b9b6c1bfb1b865a7d8b2b4cbafd1d7c4c224a4d8c69d8203e5876e8062f9e1e4ad
- SSDEEP 384:U18EMueuC4uMqSbcNhMYhvuFn4sRDlumyiPnfFnX1gwLmRTDWA9aAlsOEbKO2LEJ:0Mfxh/y4Ni9XMDWAsAKOEj
- TLSH T149D2C88B25AB35029D23A079DB832C4B6265789B1778DB54794C420C6FE10F0DE7DBEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/imgui/imgui_impl_dx11.h
- SHA256 ac65ad578385fbc45800bb70b144f76cbe2d78a83199d199ef0bf25e7a065005
- MD5 14bd217c3f5bef28ca4c8da9fc939dda
- SHA1 3f23a78b516fa24afee580481c4d543b0f36abdb
- SHA512 25df3d5c2c9da883eddfaa312aa64e2ff33663e5068909bf11dbb0c8a7c18fb7a2c69aa8c43d4c05fa72af662d478044ad776850d8c3a85966723d2514edfbb3
- TLSH T1C121E09612B575804BB215C19DC4CF43B30E7CDC6BF9E3F9A618D11C23A9D712169973
- MD5 SHA1 SHA512 TLSH
Temp-Spoofer/imgui/imgui_impl_win32.cpp
- SHA256 32c783e0d7a4d81e64aeddf70ab78cefb2807ff8e7b050945dd9a904a0b6055e
- MD5 a532f6ab6af7e09ac9fc335c7bd913a1
- SHA1 e717ae748c578bc7748366fc868d6f0795b08b05
- SHA512 e27393d571c685877fb7b381c1e57595ba5c462ce023b7e4020ea77e310a5346f80efe38f2d7b5befe352d35bdf9e604ff7ba76a79a06aaac17112b6099747c5
- SSDEEP 384:I8I10H61hrM8ScQiKYyegGAeWpEZdJm74NUzc2iisjoT1leJUv6w92ySnj4NENgp:9eaMhrBQiKYjvJ2gisG6UjkcGwl67i
- TLSH T1A6D2F7911E4730A34A33C6606BD6A206FB38917B57A5C764795CA04C6F98132473EBFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/imgui/imgui_impl_win32.h
- SHA256 34b91e5a6753efd13b38fa05103e599cb5df2b2a78f94ab07104160c91f48058
- MD5 36e75e4cdbace766f8668ed900560be7
- SHA1 337cd442c4d04d7133eab844df4c2d5ccf5594af
- SHA512 f9253e8a504a02e9d7397c70f7688c2226ef00017e3de86e2aed5a9bde683f6af4ffb222290cd5c64ad11b3f39445bd19937f6d03e0affea0640c11d27c80d1c
- TLSH T11551B506039470D14A316A409BECC797332FBEA8ABA2CBF8552DE14C57661A71127EB7
- MD5 SHA1 SHA512 TLSH
Temp-Spoofer/imgui/imgui_internal.h
- SHA256 2ba1374e62d38a6fe0c255de90577168149c358bc1f13c28a6498c31a69d7e82
- MD5 f7d986245602a22680b17b8c7f1193af
- SHA1 0b79ac4e74b847c0122f6e7bd45e8c595ae1176c
- SHA512 5d607cb8fdd2fb8d833aed7b51059edae7dfd61c2869713420998e8fc361144f713140286f77ba2c35b9d148ea62b9b359ad6b44157b269614660cd41bef8c64
- SSDEEP 1536:tVwpeH57ymC9tsDaYI3K74r/TeapFvkoRVRiABoJPvcBB34b1RHJwf7aZH:zwpaymC9MaYA7NFvnR/tGKB3sBJwf7g
- TLSH T1A214C7932E023621DD32D15067D2D545EB3948736FE0E260368E635C6F4681B86BEBFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/imgui/imgui_tables.cpp
- SHA256 14be629e3591a4ccee6574890eaf442735f928e5ead4f717925d6d25000d2030
- MD5 11182c47543b073127e7906c473b4e61
- SHA1 e92418a068f9ec6fb2054b8bffebd82d157c8654
- SHA512 55a5cda9dca448f760eaf911daa90e3eea5df0d9403126a7b01dca2957380a2d7ea85114f11a605a3d2f0aacba011778874c6688cbb8dde19c44aa3b979486f2
- SSDEEP 6144:vQJgDGDCfrJY1LQj5V8XGaDPdq43wRlu5pN7AvfVB:vQJSGudY1LUVlazdq43wRlu5pN7A3VB
- TLSH T1682473976F2232158923E02563CE566FCF2614235B44A1F03D5DD24D2F928A38FBDEA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/imgui/imgui_widgets.cpp
- SHA256 c5411fb7b51416995e97478bbb2c77ce752090e41ffaed6aa401936247494cd5
- MD5 4c861b508d279476cabe905125f9f22b
- SHA1 21c66b34182e7a9cb3e9ba19480854ceb622d3a1
- SHA512 6f3b9edb38a124670764ccca43adf9c5be86dc23fd623b33bf50412125bf9782ff69a4a558e1fac5e5dbdc66b8f647c32a7306096f2afd91dc05b06a2a9e627a
- SSDEEP 6144:mTSoo34Q5XfG21IV+gskMM2MpwFWk1O1EU:mTSoo34Q5XfHwMM2MpYWk1O1F
- TLSH T1E194D5852D1332268A33E0694FC75255EB3958773BD4C9A07A1E635C7F8043682BDBEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/imgui/imstb_rectpack.h
- SHA256 a53bcd85861ff53ca1526407db1f6fd2ad619636327dcf1e6318f33e545068dd
- MD5 f63ce0be310a45a733df420c9e0a1309
- SHA1 fe879a1c667936b33a268c5498010bb42229dcb4
- SHA512 6b9302d640dd15de0aa14b9e0d25e4cefaba865b1b12a0e8a5230ef6c3e03a0ed253618c487573099ba1ce1aa0d0dbab8464e7e77696a1bd53f008102d50ef9e
- SSDEEP 384:/E/y6kzHSyJm8Ss6Ra+Kid1zNOHxR4ZL/8FreybFre3ks06Y4LG:/e6zyyc8Ss6Ra+KjxRS8FreybFreUWYV
- TLSH T11592B62B2CA216256B41E171974F7099E326D467D33AD620BE8E73642FC006753FEBD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/imgui/imstb_textedit.h
- SHA256 686a603897d8ff024fd7dbc4bfe582ebb66b4581b89b084d69f899a9076847d2
- MD5 1310a7c1c1617ac4995b1e90e3b1a32c
- SHA1 6d31e57ec3234d12618cca5164037f84246041f4
- SHA512 a100593b9c71d32dec8bdfaaf1a66265802627e58262f3ff7e73c2b161d3b9f4bdb059c80d827b6c9aac3801c9340139639e5179ddb9dd3c414778a3470726fe
- SSDEEP 768:Ne34mnOxj8ZPNP6Mg+jkFmUfXWMn3MMl8cR8OsaLn5IM6MLLUYgG:0oWxuvLUYgG
- TLSH T14E3313036553073A0C6EA173B6CF21F6BB26486FB269DB61B48E71181F510FA01BD6F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/imgui/imstb_truetype.h
- SHA256 87345e551d9f0060f7551c804fe7ed02e57580c0a22f979442660e2781a973b4
- MD5 1afa4a6723bd0088c795f98327416f72
- SHA1 5a90b5e97a022baff6452bee8457e2664bd67f4b
- SHA512 3204f926281ee38cbc1933a1c7babfde32472b505d3b8c625543c6c5cc2c19060bb93c0ffbeb3faf2d1cfc22f1d4144c56dcb9382aac4023784cd6275107c0ad
- SSDEEP 1536:Rbtr1kh9vAMrMFh1QyAmzz/m7XxtvmXg+dzo7gZDaXT82AkonbjB8zAY0YgG:RbLg9vAMIFh1HzzO7+zow2AkonQ
- TLSH T14B14E80419D314231913A5A9DB8F54E8B32ED0E7A2A9EC51B85E3A1C2F60439D3F5FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/lib/proxine.lib
- SHA256 ad16f92861045caad6db733a514d194f607828eba6360f4f41bf50e87569cc14
- MD5 c1204aef149d4ca715e36cc92472ca0a
- SHA1 8a1aab973371c4f44c90677673ce10b44da8c941
- SHA512 b82e9bcc54e5e62a8e360e1f867083b302838b1063aa6cc47dd82af2f3a8614ea61bcfbe57021043e0bb2252ee4f706051da341a38329fff1b4ee04b8c43b290
- SSDEEP 49152:Tqy2W/QTufGsoJy01WzF6gj57qt45gu0cL00eQlrxKfR7A+CvwrLg92sov9//utE:i1WzF6gj57qt45gu0800eQllq/utU1so
- TLSH T15FA5F801DB94DBD2D8DD323281EB836D73B8B8C47B971F87A79E922109C3344B29B559
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/mac.h
- SHA256 8afa7b652676884a84313de1a33a3f24b2554584007d6d4b41e1d1438c073a36
- MD5 452193968c59c9625e26052d04bd2514
- SHA1 690cbdad2ea2fdc02f3f5498b7b825373985aa62
- SHA512 1ed62955562b45a38958ad65832f9e0a570eb571901b0ee67c9d298726102f8aedcbcc313a22b086cb73bc3722e5df5e62d57700f5c8f0948c92182c8b426666
- TLSH T1DEF02E70F1AE1392C40384FF635B86915A9C34A143ADB7B110E220E3F0041C833AB7E4
- MD5 SHA1 SHA512 TLSH
Temp-Spoofer/main.cpp
- SHA256 b34247f32bae710c51c550e4fdcafbb7fa5d139cfaeb8def6803e62d8f61e545
- MD5 a8835539bd6821dcb703ecf5b3c6634a
- SHA1 c15ea30eed2d6ce7024849859a14bedc000bf99a
- SHA512 065e51bf3d5651aeadb65523bd59d18660079065c9c91b3c407b6316d1b4cae9ed81a7b298bdf7119f5d6504b636864e4d8074518681614f050c095d5131878a
- SSDEEP 768:dG0M0zM1/Ao2fGeZvkHVH2Fn4ZeWOdpUP356PspSdfKdUq7Fe7tF4L22JkSsKBKd:d57zM1/Ao2fGWQ5LLlLFLHL1LHE88f
- TLSH T1E00444A2BA52F124F412081DD3B55C6FD2A4923131F823B3F6E4B584A6EB48D1DB76F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/minhook/MinHook.def
- SHA256 6f7c105459a8739899a78371a9e962a5b8979170e2a51c06534417e6a04198f6
- MD5 7abc5cf186ab6ab36e0247b3129b1c53
- SHA1 ede6101b6c6126619df7ac691b64ffcc210f9425
- SHA512 ee1419984700c3544c581509684c771a554bb4e799845de1e2d888b0ca02421fafd2db0d19e1fcf632c851e0b5ca1ed5d2409d23b62af42ad0547b70dd2b49ca
- TLSH T14BD0C90C740BED578702C124C76A84A876C88CE39B78123436CAC04C7F15FA45037FB2
- MD5 SHA1 SHA512 TLSH
Temp-Spoofer/minhook/MinHook.h
- SHA256 62dff05e63155c6bf8135c36a0d79dedbdcaaede9da26fe38daf0bea34323e38
- MD5 5201dfb17eea04c3e2cdadd6082f145a
- SHA1 b0cdec77fabe18032274aaa2cd5f6a512de12454
- SHA512 b53491fdf041cfc0bd6333b5f86ed193457f6b209bd52c7c8519821b50e19664c514b01229760a92747035514642c0c7032ca526c183eaedaac6df8dbbd9b763
- SSDEEP 96:4S+rYJIrYJtX3U3jdqdgUosaU3LeM5xIFSQ1xFA8f3Va6lBxH2Va6wxH2Va6AFBn:J+rsIrstX3U3xq0MQF3tjBM2M1m5d8DI
- TLSH T180F13F0C5348A7F3A9436D60A72FF594418580DB7B35E124389F939C2FAB82D943BDDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/minhook/Nouveau Archive WinRAR.rar
- SHA256 4301ec2e9592e7a22262d1c046954545033b73be322b33a8117d201556c4254b
- MD5 c69d0b5902a959577c02e9dcdda77de0
- SHA1 6233724f8b3ac18649dc248d1c778e2bca78a7f2
- SHA512 2e8945172ef567d4ae84d6317efce63502a6d9496caa48b8dc09cf12d1ceec3e89d033d6d9fceeba82f403107d15341bcdb72b4a6f60ba3e6df4d2a2cb6e48cd
- MD5 SHA1 SHA512
Temp-Spoofer/minhook/buffer.c
- SHA256 0ab484d7870c3a8e7a3a1ee61e2070072cf445ed85b619d4c4207fed34356d99
- MD5 ee606c2f4698d69dcb35eaa8bfb07806
- SHA1 8d3f91566b900fe8656acc9d999f0ff02b434aab
- SHA512 a64a121a64af8b524a11fb0e1f14655e77e11627245bb1d6445118b91a92b72602c8156d612fb8623dbce06fa87adb3017e0f7d26318b7ab5ef2e6b1ff8e8cee
- SSDEEP 192:O+rsIrstX3U3xqftrqo/kRulWksjgC7kUbgq8kkZKek37ok0tXMPXj6u/rVZp+Bi:JrsIrstnGxItNWksjgukUbgfkkZpk3c4
- TLSH T19F1210051F770592A5F3EEBE6FE52098E302C03B1B6BC414794ED2A16F0D1AC97BE949
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/minhook/buffer.h
- SHA256 9769702bd625249e59a19ede05c84365fcc7707e1fa0e5df08df42227cee13e3
- MD5 6313e84c0a1c19affd73ab304d3433f2
- SHA1 8deb9e1719e9965d4f22079fb8b6044423e4a665
- SHA512 7977ca2caaea640cd72b1397d7229d139612b5f0f3b06f3be9ca5e9beec0aaa9b82c4e58904861efd6d23370ef9c1209c8f397a377b5513489eb596c43c8e2ee
- TLSH T1ED31640723400FA396F667B229A659C86189903F3A135D083C6EA2655F2B1EEE5FEC00
- MD5 SHA1 SHA512 TLSH
Temp-Spoofer/minhook/hde/hde32.c
- SHA256 5da4941e9044f7b325c7f952b5840089e365f374740b7fe7318805d08c0d6c32
- MD5 555a2cde1052ce7f9711d92c159ba428
- SHA1 2e2081bf5513755c4044e0e35474a780ad6b017b
- SHA512 2074cffb1a8691f1a7a21d3a3bf1927c11bfdda5887e5eaf43cfb79feca639af9d012a8487ac11ef6d1ee592db9b0fe8163f46acd562e144089880b43068fa15
- SSDEEP 192:cdfRHYchMfrAkBpYCqvuaW2iUHbLVCM62MwqC7dDJC7d6sC7dOXC7d6UTxC27d3m:OfR4chMfrAkBpYCqmaW2iUHHVpRqEdDS
- TLSH T1D9127C3504A325A29667D63B0FDBE098B37DA04B8355CD363D8CD2A0EF44AB95DA0F71
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/minhook/hde/hde32.h
- SHA256 5132de5be8ac7a9d054420f5caef0fb01437faa892f03b3cdc77f795973bf15a
- MD5 83525a63f3e4840eb8d6eb5f68f96c07
- SHA1 3cb43e09226ba65e4f082d4abbcc56d7c4703083
- SHA512 eb448a60ddfe0f029bc335c2bacb311ce125011ca207649fae3811ebf18687c7dc83ed223fa05d6eeccf6296f59be2395a1972d4a3083c193fa8ff9bc6377eff
- TLSH T173516D5768C66412D2BB485576DD35207014F4F3A5CEE8FA390CB89CAF12C98D8F0AAD
- MD5 SHA1 SHA512 TLSH
Temp-Spoofer/minhook/hde/hde64.c
- SHA256 94178f7cf3685c96e0ac2cf069c876b0ea9c047a39c4b5251b762b69e99b824c
- MD5 4f2c24f96585adb410c691e456db8898
- SHA1 d3495934c97289c66502720430dbfd0be69409ba
- SHA512 465bb299a2d77045bb0a1015d26e4d2a9a972d2af5a3e7ae9a1b2febce07ca4c825c010438176dd4df04c5d7b4cc936ebe6b5602796973d1722ca774a66f460d
- SSDEEP 192:c4xfk6XMfrAkBpYWKbiqxuNWViUHDLVIM62MwqC7dDJC7d6sC7dOXC7d6U8WC27h:fxfk6XMfrAkBpYWKWqYNWViUHfV3RqE9
- TLSH T17C12B03500A321A29667E63B4FCBE098A37D600B8355DD363E5CD2A0EF846B95DE4F31
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/minhook/hde/hde64.h
- SHA256 e99aa4997bda14b534c614c3d8cb78a72c4aca91a1212c8b03ec605d1d75e36e
- MD5 2806747dd2f3cdb16455e620f15714da
- SHA1 6a99901b0071fda1eae5d019dbed2c282fd6f4b0
- SHA512 db08d7a8d39e02300b6c5fdffbfb32ed93e01cf249220e76a41f9101faf50c28e32f21ebc94b4cbd907f4e244e0550a4b671dbcbf504b99978c8127b6e4a18a2
- TLSH T197513A9758D66412D2FA08556A9D3460B014F4B3A5CAE8FA390CB89CAF12CD9D8F06AD
- MD5 SHA1 SHA512 TLSH
Temp-Spoofer/minhook/hde/pstdint.h
- SHA256 604d1cdf45c5a95bc9cf1bbf39ca05ef83013541101d34971c5cd7577e3d5247
- MD5 d26c8df0fadda94894e62870576b607c
- SHA1 b107a7434e3b50ecd29b095ad1174b1b8defff77
- SHA512 1e1cc7043e65bde1c3f13c243020921a8e3408cb3e6c261a4efef96291c0aa23523ed9fde7de4f81126c51a2847cbc75656f7bb1eb06c0da5c52e01d9f15e918
- TLSH T1BB31524719005B8355C366B37A566D8CA4CF803F3E538C0538A961725F374EEF17AD51
- MD5 SHA1 SHA512 TLSH
Temp-Spoofer/minhook/hde/table32.h
- SHA256 43bf687a9fff071b5f46070db4d36c846f8e069cdc57485ee897c499aacdde23
- MD5 edb8b55fa8e3c00a62c594a598ba4421
- SHA1 8733b760efd3d32c29bda6344ba59da040598420
- SHA512 a26898e9ef0f52cfa4cccfbf3f062246d66f9bd43b232c4755c90139f5fc098fb2b23097c98c6d524dd2aae741965608115a7a1a9c7df1eada8f5046ea6d65d5
- TLSH T136714AD7BFC071ADD267C3211B896FF9485EC81241C96C49F8481F5E95ACEE3A5E8388
- MD5 SHA1 SHA512 TLSH
Temp-Spoofer/minhook/hde/table64.h
- SHA256 b774446d2f110ce954fb0a710f4693c5562ddbd8d56fe84106f2ee80db8b50a2
- MD5 2184c13c45ffbf87bf889de41a13db11
- SHA1 2e85c204e6d7ac3b4b2e1c7a02dca5344ac21f6e
- SHA512 4297a73122c8342f66b43fabecc3ff8f065c767f96c947aa057ded3854e012a5115ff2b53fbf2eed5c377e47b7b9db9f7cfd798ad292c1c359184c3de159683b
- TLSH T17A7141D739C13059D27BCB2117896299447FC41245D57C89F8482FAEA5ACFE3B5E838C
- MD5 SHA1 SHA512 TLSH
Temp-Spoofer/minhook/hook.c
- SHA256 9ed9b756e59e2ebbdd69d6699a6e16ce1d987bc40fa7f019eba55aa77b0cade8
- MD5 0ad0a6f169e5b2847e4b25a779393b9a
- SHA1 2ed390791964e868e5bfaaef552fbf94bb1af667
- SHA512 04a4efd52827a7a950d4a07021bd3576bfad587a702830345c46f681fb11031670fc019dda36caca5e44f655e9ce932eb5bcff4ae9b161a8cbc67726c723709b
- SSDEEP 384:JrsIrstnGxfyKR8hbxodXi6xXk56k7D/yYBI5dygzvas5frkSUQvqkYpn30Tz:J3kGxtAQX2H/yYBI5dygzr5XQ4z
- TLSH T172C2740E2CEB26E01B53D87967DB8010ED5A9443224D9D74BD5D22749F984B0CBBCFAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/minhook/trampoline.c
- SHA256 6bc232a545d32ba565c53c0e8578055922314b2b4b219e3e6658a6f3451824a1
- MD5 bb58a8e8427253bf0161d8cd3643d27e
- SHA1 edfa90c3decc0de441f5667a9e908cf567c5bb8e
- SHA512 978acc29bea0670c025a3795e79a06a7b403c005634091944a9b4d8c0405d0bc2d493532f40c86dbd6909d3b9619f71b4104a5c46e6dc6e68dfd4c38c3b1cd75
- SSDEEP 192:O+rsIrstX3U3xqukcrp4TkKlQwvkXYnTnGkp/1FHTkGMkzEkKm16Ck4gy1k1v6mv:JrsIrstnGxXkcrp6kEvk1k91Fzk9kzEN
- TLSH T1802284062DA111A1E613E574AB8B354AE18CF09B11D1881C3D5EE3F05FB6138D9FDAFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/minhook/trampoline.h
- SHA256 53ed9934492320617a27bfd952ffe7f5b7a4a1d09963d4512447082fe7b727b4
- MD5 ae98505442a0b7aff8cb3fe19cc1369d
- SHA1 d485c7d0fe3f9350d67831cdd0068ba0d0f68b09
- SHA512 6cbebc1b5dbb267e56096ed2fc08b8287cb19864290bbd2d5c7beff9461bd96177d1429f1a3acd4c0ef99c0d90ddf6fdce2d39aecf8d2137ab6c0db7c2112cad
- TLSH T13D71C8043341159776923673A7EFA5CE20CC509721CB8E0538BFB3B01FB666D66636B6
- MD5 SHA1 SHA512 TLSH
Temp-Spoofer/nt.hpp
- SHA256 5921b8ef9fae6ec45a4ad9a2d1e8cc99489d7f892b70d3fda3dfe1c11f14ede3
- MD5 23e999adce18a3e98dffd6a128ea5eb9
- SHA1 4ea846ae5740cf5bf90634f7256ba557fecf1d30
- SHA512 00952d22f38497fb4765aeb2d6d1bed7a80502a1022879e4b19db1034c1c7e6a6bc80d56013a665f9f593f8f507ef7508a636f74d27856cbd477dc34a30ebb3e
- TLSH T1DC41FE74B46E5848E65D413E3870A4CADBFC6284C070E6C864AA63B8F47C0BD0BF9164
- MD5 SHA1 SHA512 TLSH
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/LICENSE.md
- SHA256 b98a397897ff55f76cddc380041507a95a896b2946e0188703bf0496793d6516
- MD5 2db44e8cf3197c52423dbb00a4a82d21
- SHA1 baf95154986cf96a60abc98d14d229f8e698a36e
- SHA512 b25e04f59a2b01df173321ffc79f77f49b70032757d04ef84b6d85674fd5cd5dded584f8eb8d3d3a02b6838777d114ecd46d38551e44efb0e08647baea9af4a3
- TLSH T13D11632E7351136218A627A165A9B889F22AB15F7F5B1B8834ADF305132705CD4FBC48
- MD5 SHA1 SHA512 TLSH
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/Newtonsoft.Json.12.0.3.nupkg
- SHA256 3d21caf909f9db2b5d13249d6728c2506c55e72e2123fbe2af65a056c0a0bf9d
- MD5 a80c7fb0a5437ce4fa16a664bcc95c60
- SHA1 50d8ccef2efbc9b5bfc38f7ae41c989de2011b55
- SHA512 6934665f0479c58bbe996c44f2bf16d435a72f4d92795f0bc1d40cb0bc1358ff0e660ac20b24eabce01ee6145bd553506178e59fbaabd0f2a94b23bfa5c735f5
- SSDEEP 49152:8dvQ6+Wls0DebsFSXuXjKOAUw/UcdMhI55ZvrhvxrRoEKlaAdG9Uc7:CQvN7+wcuSGVbdLyj6
- TLSH T1B9C53366FA044DCDB15E7FE0B29EE5AF94BC53C005B46FB2101C83894B9CBB997C9528
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net20/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 500eb5560aae4d3a4d7dc4c61a880906ed0231f1a636113f74778b86eaf979b1
- MD5 2c41a312a9fb88d4d941af966b91510c
- SHA1 488fe552cec6c1eebcd87f13061276bb09f46469
- SHA512 ca4d6314c684df6684fbce099b6ee3cbd0a53a64110e5c996cda13bdd67aa8659bfb4ad806c5509bd6d6f3aa90f1bcda917a62754a78a734cd1d2f9fd08f56af
- SSDEEP 6144:lU3Xko42dAQX23EkyF/D2twQ+87e4YWOXoyRl/2uTkVal/BuCia/WAulFh:Ck3g6EkR2g7eZ9R3keBoAuZ
- TLSH T1E1C44B8423FC9B66EAEE5776F434055857F9F81BA176E74F9684E6B90C83B804C007A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
91:6b:22:aa:e4:f7:7c:b9:0e:b0:59:e4:99:b3:e1:c8:f3:a1:02:f5:03:50:1a:6e:94:66:fa:32:a6:c9:64:51
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 9, 2019
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
567686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net20/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
547KB
Virtual Size
546KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net20/Newtonsoft.Json.xml
- SHA256 52e74d9c346dfe0b7abb46e66c3b162fe86676636fe16530a0e6688883935987
- MD5 40e4e0b15f2acb86157a8d6491e56fe5
- SHA1 579369f7f7ca905bb2a95bc68e272d634a17d30f
- SHA512 72e6813737d905d7d1b31903de5c7883fe25e3b3c461303ab919774d53026be63769dd9c07795ea218b9551a28f7ff33e39258e515530fe4ba57353ec49e0c92
- SSDEEP 6144:XqkUSklR8kDJHuPl0/IwHjpWVIeR0RCRFo9TA82m0Kj+sJjoqoyO185MYFLsgfld:fUj
- TLSH T119D4BF2976C4DF220C7A012A5D1CF0C5FF2009B716193C96358C5DDB9FBAEA252FB6A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net35/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7beb6a951b92af14322a382cf105fff8d0dc63518b33556b98e09daca0cb6d07
- MD5 1390b082700afc53a7aa320f3259325e
- SHA1 8f72572ad084ef145fd3286930af6b70ba622384
- SHA512 ace3b9548bb8d29805673ac4611a141e4c026c5d09a63bd399f904d28ea274f9e0ff682b99adce25a66ccdd7e3f03e0a45ca9ae0a67e88d9d1c83cb34180b8d6
- SSDEEP 12288:ZmKLDa2Tqte5+7OWpP8gkRCj7gBEA+PeKjJc:Die0/pP8gUwcBEAMeKdc
- TLSH T1FEB4191133FC8F15E5EE2732E4344925AAFAF457A6BAD74E694199BE2C937808D00373
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
42:00:b6:ed:de:fd:c3:b8:8b:5c:35:0f:b5:e2:70:78:46:4e:b7:8c:29:d4:e7:fe:a1:2a:bf:f3:d4:ff:3a:05
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 9, 2019
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
502814
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net35/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
483KB
Virtual Size
483KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net35/Newtonsoft.Json.xml
- SHA256 16ce9721632944c24ca30913a5b22c092bb0064552dcac1d57d3e964fe7af7bf
- MD5 0784cdd6068bca11bdab68fbcc5f4333
- SHA1 016d995622f1f1e7ebe7089f77110a9a64747d58
- SHA512 d494418ed7bf5db56dca2fa4fa125e8f3da83839c3de6bdcdafbfa5f89cf61e3a37bb39bf932271deb481baf9e4f6d06d484af74aa01b0944c51444d224a4303
- SSDEEP 6144:Xq9Umk/Rik2rH6dl0/I7HNpOVIeR0R+CRFo9TA82mCKj+sJjoqoyO185MYFLsgfc:sUJ
- TLSH T15AC4AD2976C4CF220C7A012A4D1CF0C5FF2009B716297C96358C5DDB5FBAEA252FB6A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net40/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f1f01b3474b92d6e1c3d6adfae74ee0ea0eba6e9935565fe2317686d80a2e886
- MD5 8f81c9520104b730c25d90a9dd511148
- SHA1 7cf46cb81c3b51965c1f78762840eb5797594778
- SHA512 b4a66389bf06a6611df47e81b818cc2fcd0a854324a2564a4438866953f148950f59cd4c07c9d40cc3a9043b5ce12b150c8a56cccdf98d5e3f0225edf8c516f3
- SSDEEP 12288:ZzfhypmNGgHA37YyUD1AboTf3xnpJbC8VGSBJjRuz7:ZoI1AbQf3xnpJbC8VLBJjRuz7
- TLSH T173C4182023F89B1EE6EE2734F53045285BF5F897A6BED74F5D40A5AA1C92B418D403E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c7:f8:d3:cb:14:9b:8d:a6:df:0e:56:cd:54:de:2b:1f:7a:4b:2e:47:46:7b:ce:e9:99:4d:2d:6b:a0:9f:d3:8a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 9, 2019
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
571446
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net40/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
550KB
Virtual Size
550KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net40/Newtonsoft.Json.xml
- SHA256 39f6a4db1be658d6baff643fa05aae7809139d9665475bfca10d37dca3384f21
- MD5 928ed37db61c1e98a2831c8c01f6157c
- SHA1 98103c2133ebda28be78bfe3e2d81d41924a23ee
- SHA512 f59387bfa914c7db234161e31ad6075031aca17aaef4b8d4f4b95c78c7a6a8d0e64211566ca2fd4549b9da45231f57a4191fbcd3809404653f86ee2abd4937a4
- SSDEEP 6144:XqqUmk/Rik2rH6dl0/IaHNpOVIeR0R+CRFo9TA82m5Kj+sJjoqoyO185QyMYFLse:DUK
- TLSH T100C49D2976C4CF220C7A012A4D1CF0C5FF2009B716197C96358C5DDB9FBAEA252FB6A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net45/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814
- MD5 6815034209687816d8cf401877ec8133
- SHA1 1248142eb45eed3beb0d9a2d3b8bed5fe2569b10
- SHA512 3398094ce429ab5dcdecf2ad04803230669bb4accaef7083992e9b87afac55841ba8def2a5168358bd17e60799e55d076b0e5ca44c86b9e6c91150d3dc37c721
- SSDEEP 12288:Lf9WGsSVSM2mxL2nRiOr8gUckc6V/g2GhBzj05cH:7XNL2PVh6B+Bzjmc
- TLSH T138E44A41A7F88F27D19E6379B430890A47F6F80BA2B5EF4F5908E9A91C937508D40B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 9, 2019
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
696798
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
673KB
Virtual Size
673KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/net45/Newtonsoft.Json.xml
- SHA256 e3c9cb0cbf4b3be20b6030f3a4872edd81e042048d2d19732eac3eeb9779dc0b
- MD5 ad1a946cdbe4fc83907cf558fb80a37f
- SHA1 9b6ab559cccce89e989259e356c55be6e370f1db
- SHA512 3bbbd262f3fc669bb0709963788ccca67e17fe28828ff72ca32f1d6d410a3cf76950d126feb39f204163eb5b43b07f54bc1dd4df7f4132933dbb61c054e9c1e0
- SSDEEP 6144:XqqUmk/RikFaG0rH3jGHdl0/IBHNpgVIeR0R+CRFo9TA82m5Kj+sJjoqoyO185QA:DUn
- TLSH T13EE4E02577C4CB220C7A012A4D1CF0C5FF205AB316192CA635CC5DDB9F7AEA652FB6A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard1.0/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 90bcd0b2d3a190a885218d44edb6434a431b0c85ba992ba753657f3319bef06f
- MD5 a54b7154ad22f506e27fcd5313c25914
- SHA1 55ee4f0e7c24633ecf1e26cb85e2853fded03553
- SHA512 c3ee26810062255be9096eb2976f13092f1ddaadc572e8de2d8bdaca4ba8a622d11e7e30f6172a358ec01eb3370b86425b8534bf5e4a8b9df02e6c9f2cbd973f
- SSDEEP 6144:ajQLu6eR/8HEjm4y3QggkYZs8xdmkaC/L1LiKHxo/SKpzxRGZz53YWDkdBMVy7WY:a8ZeRtq4PIYZ2ooqAkfY2da2AWAl
- TLSH T1E5E44B0023ED9A17E6DF537AA0B44A18A7F6F426A37BEB9F4644D2F92C837114D40367
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
63:73:1f:85:8f:02:73:3c:d4:ca:cd:36:5e:47:5c:c4:01:53:d1:00:89:9a:4f:68:8e:65:df:79:4f:9b:80:f0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 9, 2019
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
665630
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/netstandard1.0/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
643KB
Virtual Size
642KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard1.0/Newtonsoft.Json.xml
- SHA256 b58af5bf905548d5c8f23ad60a9d74e7d768635981e064e3c333f8c176e47960
- MD5 b29c18a27007771cd255b16a2c2fbb64
- SHA1 9b293a335dff07a1e9e87f4dcc5cd236c44fab36
- SHA512 dd096485414751c46708db928f0f19521dabaadea0036f9f4ccf4c3b7c14c9a2d5cf91b91c4439d8144e1e5ec0abb0cf0304fd30a8f0725941f5987b1e482a83
- SSDEEP 6144:XqgUmk/Rxk1aG0rH3jGHdD0/IfHNpgVIeR0R+CRFo9TA82mBKj+sJjoqoyO1QyMH:RU0
- TLSH T194E4DF2577C8CB210C7A012A4D1CF0C5FF205AB316192CA635CC5DDB9F7AEA652FB6A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard1.3/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7fb7842edcf315f09b9bd3d3664454148562f09d5cbfb1f2e64de914dc4c8a60
- MD5 35ed5ebd574d619b52041dabd496c632
- SHA1 05c08405fcdc423eedf85d4a6db054720e3c4544
- SHA512 8ba72977b84f645e230d1b1bc6373c3051d993add7576825ab31ed4b2c0e28df5e40842ca190d38dae95f28599a93d366fa06c671e0c812cf7dc1c9d7d8ae785
- SSDEEP 12288:bFGG5+vT3hQ0zJjVNKHuTZDfJLjmQDCB5p:gGiTJzN7TZ1LjxCB5p
- TLSH T135E44A0463F88A26DAEF6BB1A5310A294BF6F867D3B9EB4F1508D4F91C877405C447A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e8:bd:c2:f6:74:be:a3:82:a2:a3:b3:63:e8:46:44:33:c8:a2:dd:b5:e4:74:2a:30:ef:83:3e:36:2d:c7:78:ee
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 9, 2019
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
684538
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/netstandard1.3/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
661KB
Virtual Size
661KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard1.3/Newtonsoft.Json.xml
- SHA256 9ed5dce4e9a3f30c69e9633c98b19c6304cf4fc1a5089ece304785b0d4e81487
- MD5 e33ce6133ebada1ccac4a8946244a5ac
- SHA1 adea1bb8b1f50f5c321a169a87414f16a647077a
- SHA512 dd22ace94f2536b5dec469bb6c12987684669bf307e0a29fb1b40f8b758697da023e871432fb3d6774ea951d8343556a4d52ee953af7fcc7a3f107ebeba8b7d5
- SSDEEP 6144:XqgUmk/Rwk1aG0rH3jGHdD0/IsHNpgVIeR0R+CRFo9TA82m4Kj+sJjoqoyO185QZ:RUO
- TLSH T1BAE4E02577C8CB210C7A012A4D1CF0C5FF205AB316192CA635CC5DDB9F7AEA652FB6A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard2.0/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 99177a4cbe03625768d64a3d73392310372888f74c3eb271cf775e93057a38e6
- MD5 9454ae6eb0c6ad77e93a95074ba29266
- SHA1 df83fcb3639596ad42d5be8314ef9d672079198b
- SHA512 8d1d2bedde2d5f33179560e1a4f72206ee1984b3f5eb96e93f94329c4c4a8044dd74d62f9e708293132de8c8f351f0e7fed74a450a251a8ade205702b29d9de1
- SSDEEP 12288:SW7laYjrY+5lqoa34DOyPsoD2AgBSjq13P:xP0iqoi4DpEBSjqVP
- TLSH T1FCE42A0067FC8B17D2DE93B9B9304D0646F6E417A3B6EFCF990899A91C93B509D413A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
69:13:59:16:4c:8e:cc:8d:d3:88:7d:1a:11:9d:63:ed:f6:04:94:fb:56:bd:8b:f7:8e:fa:42:fe:6b:9b:a5:ad
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 9, 2019
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
690214
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/netstandard2.0/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
667KB
Virtual Size
666KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/netstandard2.0/Newtonsoft.Json.xml
- SHA256 81338a8b5909dba044524bc89f5a9548bcfb050bc37977fc6825004896bdc5b5
- MD5 cc413ccb2a05cffd5d8fa1c01089cfc8
- SHA1 de7eb1f3f82c73af9b80fc707a2992f31c082772
- SHA512 8be2a051c1c07d3097253fd67943a281afbe710bf63af770eb1f0841ed69da374320172c144384fa6486af5db6898a1def21db504db75f75698a094f83bb8e31
- SSDEEP 6144:XqqUmk/RikFaG0rH3jGHdl0/IBHNpgVIeR0R+CRFo9TA82m5Kj+sJjoqoyO185Q9:DUS
- TLSH T19EE4E02577C4CB220C7A012A4D1CF0C5FF205AB316192CA635CC5DDB9F7AEA652FB6A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/portable-net40+sl5+win8+wp8+wpa81/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b2ecad4214e4f033387284edfa345dbf119be82193ba14f5373d1532d13adafc
- MD5 d5178a9a304c0e069250584352b2ffde
- SHA1 7f882cdf5d8bf4c9cb778d7e4f7acc6898daafdd
- SHA512 21eec59addd91393181503c0d59e5904a12318f68d3578f52f4479253a5038b144e8f78420ecdfc94ea5b2e6c3af969028b1ec6c3f43a788ab603ace54927d73
- SSDEEP 6144:12GQyV6/vgHVeM50fIiHWzFU8atXySolOQv383n+GcRYYalZ+sYd5A8QNjUdY:12GQFvVO0VV9VQvM3+ZRYkA8gS
- TLSH T16AA44A5063FC9B26EAEF5735E0304905A7F9F467A27AD38E6984A5BE1C43B509C007B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b4:78:1a:cc:49:d5:0e:02:02:29:92:84:6e:ed:7c:3e:e7:17:da:8e:ee:dd:14:32:06:fb:5b:fb:d9:98:4c:ba
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 9, 2019
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
466118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/portable-net40+win8+wpa81+wp8+sl5/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
447KB
Virtual Size
447KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/portable-net40+sl5+win8+wp8+wpa81/Newtonsoft.Json.xml
- SHA256 46e309c3ab9db47c64ef778b81894e4af98b0b08b3cf399a29bcb77067f28aeb
- MD5 8eb5f16bc20e395f8d066c4c86214b0e
- SHA1 5df6dc0880dc7d87f21db1e02c83d5d2316266ef
- SHA512 c19d8df9f22ee5265c7eb9cefb4e745bdbc19777e1eab4605f745309020210829647d0dfa73a6406136165e0b9641dc075b57cc0d75e807a1a4d89ecfe5fd5f1
- SSDEEP 6144:Xq+UTk/RhkerH6dD0/IpHNpOVIeR0R+CRFo9TA82m3Kj+sJjoqoyO1MYFLsgflU:XUl
- TLSH T1F0B4BE2976C4CF220C7A012A4D1CF0C5FF2009B716197C96368C5DDB5FBAEA252FB6A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/portable-net45+win8+wp8+wpa81/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bfa3658d682a2fc64456bc3df44129db122f5be256d930c06c39474b7d108972
- MD5 5132aa8a39fd5a53ff491e3931d2fc0c
- SHA1 5cfe9782649c73e704cac00cb6b3d99e409bd80e
- SHA512 5a0a0cf39dbe4a4488c6e564f7238e78d7fb8759a06fb0160f6b5befca50ad216d8212b2eb6628559c2e9ef450032043971dfdb9ea2767a988e0428c6eb40a30
- SSDEEP 12288:4mg+s4QIqDCWk8bhhdngX3X3X3XQMsATXO:VoIqDC58Nh5gX3X3X3XtsATe
- TLSH T1E0E45B40A3F89A17E6DF9379A8300E1D97F5F512A3BAE75FA948E1E91C837114C407A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8c:5e:ad:47:ca:1a:9e:4e:9f:fa:9b:b8:13:68:69:3b:10:f9:50:25:62:71:ec:1c:0b:20:63:ee:99:e8:ea:f7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Nov 9, 2019
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
665062
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/portable-net45+win8+wpa81+wp8/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
642KB
Virtual Size
642KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/lib/portable-net45+win8+wp8+wpa81/Newtonsoft.Json.xml
- SHA256 b58af5bf905548d5c8f23ad60a9d74e7d768635981e064e3c333f8c176e47960
- MD5 b29c18a27007771cd255b16a2c2fbb64
- SHA1 9b293a335dff07a1e9e87f4dcc5cd236c44fab36
- SHA512 dd096485414751c46708db928f0f19521dabaadea0036f9f4ccf4c3b7c14c9a2d5cf91b91c4439d8144e1e5ec0abb0cf0304fd30a8f0725941f5987b1e482a83
- SSDEEP 6144:XqgUmk/Rxk1aG0rH3jGHdD0/IfHNpgVIeR0R+CRFo9TA82mBKj+sJjoqoyO1QyMH:RU0
- TLSH T194E4DF2577C8CB210C7A012A4D1CF0C5FF205AB316192CA635CC5DDB9F7AEA652FB6A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/packages/Newtonsoft.Json.12.0.3/packageIcon.png
- SHA256 2eed317ee726bf5f06df0e7ae1fcfddc1991e14122e86cb761deb2158e4ffcdf
- MD5 4867cb362a67fa746c49c9b6a4f61656
- SHA1 301e2a0b5b970ab06fe4eae374f4940e66e0c654
- SHA512 427a4967f8888c2c8f18ed82046b51d260e9d73018473da642869e483572f2b937bd4435d67e7963197478a002acf6304309d4d53f047442bd430445f9a94ba5
- SSDEEP 192:d/tqDI8CMTb3qx4r7qBYB2pgMrf1Q4mFOqtadouJiM9G6Sdcx1/J:tgpBTb6x43qRpgMrWF/sd1iXPdcx1B
- TLSH T1DD028EE89564D229AA6D558EC87474F3D4DD89B2F877ACC31B74C0C788DC28B34296C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Temp-Spoofer/portable_executable.cpp
- SHA256 32ab27b0f55849df945e170aa8ca7fe041a303a7ce9619e773eba1c3f7aedbf5
- MD5 f34dcec86290a9215673d6f5c72e84fe
- SHA1 cfc8700392a80b4de70a9ca991511477c247b328
- SHA512 6c043da615753cfa1b68aac24b1775a61c47c3fb012877d5bc4e92212cb0e79309b63bee78926d69fb2eb315a3a9b38c9b88b181d4811391f932158257e38ceb
- TLSH T1FE7144FF24A7F8F2CF224820B925C9754562C5C9224283A3633CC35E13D46DDCA5756E
- MD5 SHA1 SHA512 TLSH
Temp-Spoofer/portable_executable.hpp
- SHA256 e1d79209568942e033ac2a5a57dc0422db5a85fb249632eecfd316454c805605
- MD5 9b9ef7a655d323768ff766ac671e8977
- SHA1 a9c5af436606bedd5eb2e4d00bfcb170af1588e1
- SHA512 de4f027e1f602b3008efdf550be9c2e675c927eb84b92e33ca1644dd44c9ea8df121688a8c0728cd207ba12039cf3fb2d769f5dc26206a33526315d90fa8d733
- TLSH T1C20110457879BD921C2B28B291B6000048E030C577C2BBD0E43703B96AB07A4DF37C0A
- MD5 SHA1 SHA512 TLSH