Umbral-Stealer-main.zip
- SHA256 bf8b61c5f383760f71ef9d6bd5ec6a0d08bde14b2cc8ec7960c293df2289226f
Overview
overview
7Static
static
7Umbral-Ste...der.js
windows10-ltsc_2021-x64
3Umbral-Ste...rm.vbs
windows10-ltsc_2021-x64
5Umbral-Ste...orm.js
windows10-ltsc_2021-x64
3Umbral-Ste...rm.vbs
windows10-ltsc_2021-x64
5Umbral-Ste...er.vbs
windows10-ltsc_2021-x64
5Umbral-Ste...es.vbs
windows10-ltsc_2021-x64
5Umbral-Ste...ng.dll
windows10-ltsc_2021-x64
1Umbral-Ste....3.dll
windows10-ltsc_2021-x64
1Umbral-Ste...on.dll
windows10-ltsc_2021-x64
1Umbral-Ste...ox.dll
windows10-ltsc_2021-x64
1Umbral-Ste...ss.dll
windows10-ltsc_2021-x64
1Umbral-Ste...on.dll
windows10-ltsc_2021-x64
1Umbral-Ste...ew.dll
windows10-ltsc_2021-x64
1Umbral-Ste...er.dll
windows10-ltsc_2021-x64
1Umbral-Ste...wn.dll
windows10-ltsc_2021-x64
1Umbral-Ste...ck.dll
windows10-ltsc_2021-x64
1Umbral-Ste...ge.dll
windows10-ltsc_2021-x64
1Umbral-Ste...el.dll
windows10-ltsc_2021-x64
1Umbral-Ste...ox.dll
windows10-ltsc_2021-x64
1Umbral-Ste...on.dll
windows10-ltsc_2021-x64
1Umbral-Ste...el.dll
windows10-ltsc_2021-x64
1Umbral-Ste...es.dll
windows10-ltsc_2021-x64
1Umbral-Ste...el.dll
windows10-ltsc_2021-x64
1Umbral-Ste...ox.dll
windows10-ltsc_2021-x64
1Umbral-Ste...ar.dll
windows10-ltsc_2021-x64
1Umbral-Ste...on.dll
windows10-ltsc_2021-x64
1Umbral-Ste...ng.dll
windows10-ltsc_2021-x64
1Umbral-Ste...ar.dll
windows10-ltsc_2021-x64
1Umbral-Ste...or.dll
windows10-ltsc_2021-x64
1Umbral-Ste...el.dll
windows10-ltsc_2021-x64
1Umbral-Ste...es.dll
windows10-ltsc_2021-x64
1Umbral-Ste...er.dll
windows10-ltsc_2021-x64
1Behavioral task
behavioral1
Sample
Umbral-Stealer-main/Umbral.builder/Components/Build/Builder.js
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Umbral-Stealer-main/Umbral.builder/Components/Forms/AssemblyEditorForm.vbs
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Umbral-Stealer-main/Umbral.builder/Components/Forms/MainForm.js
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Umbral-Stealer-main/Umbral.builder/Components/Forms/MainForm.vbs
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
Umbral-Stealer-main/Umbral.builder/Properties/Resources.Designer.vbs
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
Umbral-Stealer-main/Umbral.builder/Properties/Resources.vbs
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.Licensing.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.1.5.3.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuButton.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCheckBox.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCircleProgress.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuColorTransition.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDataGridView.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDatePicker.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDropdown.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuFormDock.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGauge.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGradientPanel.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGroupBox.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuImageButton.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuLabel.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPages.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPanel.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPictureBox.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuProgressBar.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRadioButton.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRating.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuScrollBar.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSeparator.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShadowPanel.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShapes.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSlider.dll
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
General
- Target Umbral-Stealer-main.zip
- Size 2.9MB
- Sample261011-th3rcach46
- SHA256 bf8b61c5f383760f71ef9d6bd5ec6a0d08bde14b2cc8ec7960c293df2289226f
- MD5 ba9639749e3947b79a5084fda09d357f
- SHA1 6c83ce6ab602d257a1dbf0d7449607f1dd68c067
- SHA512 3bfb6eabb0a11b8d1fd71d4287cf0abe5f545a9f27f799c713750bc36c124622a0cffc8bb3156f9cf21d563a4f35c8dd960a1802f4db6f58f56bdccfee2ae8d2
- SSDEEP 49152:gTkfrozNwoi+9/5r4m/GRF9VBDeqI6Q2GIJVPD5NkMpHs/EC8MsYPp5zNYq4KtBA:GkjozJ9/im8XVBKl6tVJVPjkms/ER+n+
- TLSH T1F2E5332442A0DFC8F0507135398645FAE0987C5428E6DB2D49ED439FEFA794A2DF92EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Obfuscated with Agile.Net obfuscator 33 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
resource yara_rule static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.Licensing.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.1.5.3.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuButton.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCheckBox.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCircleProgress.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuColorTransition.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDataGridView.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDatePicker.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDropdown.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuFormDock.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGauge.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGradientPanel.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGroupBox.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuImageButton.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuLabel.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPages.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPanel.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPictureBox.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuProgressBar.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRadioButton.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRating.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuScrollBar.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSeparator.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShadowPanel.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShapes.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSlider.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSnackbar.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuTextBox.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuToggleSwitch.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuToolTip.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuTransition.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuUserControl.dll agile_net static1/unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.Deprecated.dll agile_net - Insecure Codesign Algorithm 32 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.1.5.3.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuButton.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCheckBox.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCircleProgress.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuColorTransition.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDataGridView.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDatePicker.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDropdown.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuFormDock.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGauge.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGradientPanel.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGroupBox.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuImageButton.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuLabel.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPages.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPanel.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPictureBox.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuProgressBar.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRadioButton.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRating.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuScrollBar.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSeparator.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShadowPanel.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShapes.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSlider.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSnackbar.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuTextBox.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuToggleSwitch.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuToolTip.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuTransition.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuUserControl.dll unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.Deprecated.dll - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.Licensing.dll
File Explorer
-
Umbral-Stealer-main.zip.zip 2.9MB
-
Umbral-Stealer-main/README.md2KB
-
Umbral-Stealer-main/Umbral Stealer.sln1KB
-
Umbral-Stealer-main/Umbral.builder/App.config.xml 163B
-
Umbral-Stealer-main/Umbral.builder/Components/Build/Builder.cs.js 9KB
-
Umbral-Stealer-main/Umbral.builder/Components/Build/Renamer.cs6KB
-
Umbral-Stealer-main/Umbral.builder/Components/Forms/AssemblyEditorForm.Designer.cs71KB
-
Umbral-Stealer-main/Umbral.builder/Components/Forms/AssemblyEditorForm.cs2KB
-
Umbral-Stealer-main/Umbral.builder/Components/Forms/AssemblyEditorForm.resx.vbs 13KB
-
Umbral-Stealer-main/Umbral.builder/Components/Forms/MainForm.Designer.cs123KB
-
Umbral-Stealer-main/Umbral.builder/Components/Forms/MainForm.cs.js 7KB
-
Umbral-Stealer-main/Umbral.builder/Components/Forms/MainForm.resx.vbs 23KB
-
Umbral-Stealer-main/Umbral.builder/Components/Utilities/Common.cs644B
-
Umbral-Stealer-main/Umbral.builder/Program.cs558B
-
Umbral-Stealer-main/Umbral.builder/Properties/AssemblyInfo.cs1KB
-
Umbral-Stealer-main/Umbral.builder/Properties/Resources.Designer.cs.vbs 3KB
-
Umbral-Stealer-main/Umbral.builder/Properties/Resources.resx.vbs 6KB
-
Umbral-Stealer-main/Umbral.builder/Properties/Settings.Designer.cs1KB
-
Umbral-Stealer-main/Umbral.builder/Properties/Settings.settings249B
-
Umbral-Stealer-main/Umbral.builder/Properties/licenses.licx2KB
-
Umbral-Stealer-main/Umbral.builder/Resources/fluent-emoji-flat_red-circle.png.png 6KB
-
Umbral-Stealer-main/Umbral.builder/Resources/fluent-emoji-flat_yellow-circle.png.png 6KB
-
Umbral-Stealer-main/Umbral.builder/Resources/logo.ico4KB
-
Umbral-Stealer-main/Umbral.builder/Settings.cs1KB
-
Umbral-Stealer-main/Umbral.builder/Umbral.builder.csproj11KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.Licensing.dll.dll 1.3MB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.1.5.3.dll.dll 342KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuButton.dll.dll 107KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCheckBox.dll.dll 102KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCircleProgress.dll.dll 77KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuColorTransition.dll.dll 38KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDataGridView.dll.dll 83KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDatePicker.dll.dll 50KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDropdown.dll.dll 50KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuFormDock.dll.dll 102KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGauge.dll.dll 74KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGradientPanel.dll.dll 60KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGroupBox.dll.dll 46KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuImageButton.dll.dll 155KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuLabel.dll.dll 420KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPages.dll.dll 95KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPanel.dll.dll 42KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPictureBox.dll.dll 36KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuProgressBar.dll.dll 76KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRadioButton.dll.dll 68KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRating.dll.dll 49KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuScrollBar.dll.dll 178KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSeparator.dll.dll 37KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShadowPanel.dll.dll 45KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShapes.dll.dll 41KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSlider.dll.dll 196KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSnackbar.dll.dll 271KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuTextBox.dll.dll 112KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuToggleSwitch.dll.dll 45KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuToolTip.dll.dll 521KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuTransition.dll.dll 92KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuUserControl.dll.dll 81KB
-
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.Deprecated.dll.dll 152KB
-
Umbral-Stealer-main/Umbral.builder/packages.config290B
-
Umbral-Stealer-main/Umbral.payload/App.config.xml 161B
-
Umbral-Stealer-main/Umbral.payload/Components/Algorithms/Aesgcm.cs5KB
-
Umbral-Stealer-main/Umbral.payload/Components/Algorithms/BCrypt.cs7KB
-
Umbral-Stealer-main/Umbral.payload/Components/AntiVM/Detector.cs.js 5KB
-
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Brave.cs.js 7KB
-
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Chrome.cs.js 7KB
-
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Chromium.cs.js 7KB
-
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Comodo.cs.js 7KB
-
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Edge.cs.js 7KB
-
Umbral-Stealer-main/Umbral.payload/Components/Browsers/EpicPrivacy.cs.js 7KB
-
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Format.cs867B
-
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Iridium.cs.js 7KB
-
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Opera.cs.js 7KB
-
Umbral-Stealer-main/Umbral.payload/Components/Browsers/OperaGx.cs.js 7KB
-
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Slimjet.cs.js 7KB
-
Umbral-Stealer-main/Umbral.payload/Components/Browsers/UR.cs.js 7KB
-
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Vivaldi.cs.js 7KB
-
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Yandex.cs.js 7KB
-
Umbral-Stealer-main/Umbral.payload/Components/Crypto/WalletStealer.cs.js 2KB
-
Umbral-Stealer-main/Umbral.payload/Components/Games/Minecraft/Minecraft.cs.js 3KB
-
Umbral-Stealer-main/Umbral.payload/Components/Games/Roblox/Roblox.cs.js 2KB
-
Umbral-Stealer-main/Umbral.payload/Components/Helpers/SQLiteHandler.cs.js 22KB
-
Umbral-Stealer-main/Umbral.payload/Components/Helpers/SimpleJson.cs.js 83KB
-
Umbral-Stealer-main/Umbral.payload/Components/Helpers/WebcamHandler.cs.js 93KB
-
Umbral-Stealer-main/Umbral.payload/Components/Messenger/Discord/Format.cs2KB
-
Umbral-Stealer-main/Umbral.payload/Components/Messenger/Discord/TokenStealer.cs.js 18KB
-
Umbral-Stealer-main/Umbral.payload/Components/Messenger/Telegram/SessionStealer.cs.js 2KB
-
Umbral-Stealer-main/Umbral.payload/Components/Postman/PayloadGen.cs2KB
-
Umbral-Stealer-main/Umbral.payload/Components/Postman/Sender.cs.js 1KB
-
Umbral-Stealer-main/Umbral.payload/Components/SystemInfo/General.cs4KB
-
Umbral-Stealer-main/Umbral.payload/Components/SystemInfo/IpInfo.cs1KB
-
Umbral-Stealer-main/Umbral.payload/Components/Utilities/Common.cs.js 4KB
-
Umbral-Stealer-main/Umbral.payload/Components/Utilities/SaveData.cs.js 5KB
-
Umbral-Stealer-main/Umbral.payload/Components/Utilities/Syscalls.cs.js 5KB
-
Umbral-Stealer-main/Umbral.payload/Components/Webcam/ImageCapture.cs.js 1KB
-
Umbral-Stealer-main/Umbral.payload/Program.cs.js 25KB
-
Umbral-Stealer-main/Umbral.payload/Properties/AssemblyInfo.cs1KB
-
Umbral-Stealer-main/Umbral.payload/Settings.cs.js 3KB
-
Umbral-Stealer-main/Umbral.payload/Umbral.payload.csproj6KB
Umbral-Stealer-main/README.md
- SHA256 b269da833a07e573ee7ec8a0f87f0dd29eb2e6de8955ab2b256c7fc7362614fd
- MD5 1171a48c67c7eb044724db5f465c0a12
- SHA1 b19f6cd064b11e59e780801167e10a5a7365da4f
- SHA512 6fd33122fa20cf59569aec03c7a5cc8f6087cb5b520e853de89fefadcc8a96409b1f5ca39512648762ee7feaaa018669a8cd7dcf557e35ca60fe274222ef65f1
- TLSH T1DF51855E97A133B11A911093560C5AFEFF3EEC28B79B0568581C000DB348F24E37E6AD
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral Stealer.sln
- SHA256 1aba3f1299c9e9449fb95da9f51f828756fb13ac42fbbff677d9df4e4bb40ebc
- MD5 680b91c42d70d1896650386a1fda0b8b
- SHA1 74dc935fcb72bace664f4f2899c503afcff190bc
- SHA512 4d9fe1f6d7f6f091cd86001414a31e2db55ce2ea0806d7421167910cd307ed4749eeea9c6f15477f70a974dfb85f1a2eb4bfbf2ca9d0e9fb4f1c77ae4ad0bb66
- TLSH T1453188BC055C3DF0BD8523DBD2A22DDB6E3BA281129D5D3D015E00A82A2EE1090B7CCF
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.builder/App.config
- SHA256 6862b25736259f7bfd344e43eea10a703885be381eee2a745ceb12916b01a158
- MD5 dccd44fb11b8e4ebdfb822e809a54b6f
- SHA1 1889d5ae8c7c70c051cbde104af6e0f31f8c1b63
- SHA512 dadffe41bdadfc3a79cb34369c9a8b37ce4833aee18058b02dcb13d64007f022b80b63ab404572c60278937cf83b06b00712ff9ee302e725b9d5c7fe14bd5f50
- TLSH T15AC08C5940247D2BDC234F239260C925FBF43262B824002CE46BAB660A2011E8206356
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.builder/Components/Build/Builder.cs
- SHA256 1cf06e955f1cf5857b34c0421f50f28369d1e908bb92d0922e9e59a96757a0f1
- MD5 9a2b1be892d4acd1acb7eb23edca52a8
- SHA1 316694e907775bd49a4b05d6560cfdaefe922acb
- SHA512 fae86c9a95868cc38b13a4f4e14c53527bcfba091cf22b8c624f5939b07668e90d44f1d4f9c578212bb7a4e5c70e14266480bd06c742a50c9877e0191b352e5b
- SSDEEP 192:iDsNRH6g62rESiy6UpyiYv6dfso+IrkiNsh68fXX51ACTqQ4BL:iAHH6XSeUGvFo+cshhfn5It
- TLSH T1BD12FD1BA677CD890CA74037EBFB60448B2164979269FC7A7C4DA040CF9478103F6AF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.builder/Components/Build/Renamer.cs
- SHA256 d5b66b7c5a0dfff96258098a9571a4d731179c1496712860d0702e59668608c1
- MD5 99a13f2e8eb451d850a4245d1eb6425b
- SHA1 e3797765d30cff1346e4a7eb08b8351926bd80c1
- SHA512 03478e3a44b2729f4b04d14256671168bfc420da1d31324a9a0871fee3dc5acbdfd1c2cb9f761a3f7511fd6cf41a31952e3856a59b3744b8bb0353c5cb305215
- SSDEEP 96:Rlj4Y26WPmZ9w3YNgH3zm/I35LZZEw7Iha2Cyb:IFXY9w39C/ELZZQha2Cyb
- TLSH T177E1DB183C93D0448983D938CBDB5D056769A50B565FCCD6B9AC231ECF81634B9B2FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.builder/Components/Forms/AssemblyEditorForm.Designer.cs
- SHA256 ce3b3f0be64080fd5ffdb80d81b9b3ceada9e13ae761c5f29132218360c9e3c9
- MD5 67fa1a063f73eedee391581122accfdc
- SHA1 fb4dc889bba971d1e32aea891c66c18efc6fa255
- SHA512 d1fdad42a1b5c495217c8b9dcecb45afd3781cd81863badd665fbf315aee90198a975946be8b0850a2b5b93a7121059337997facec9fc891c1b4149c771050dd
- SSDEEP 384:XwD4czSyFICJtXB3o0qxF/e/i37owiENL3ul48f2hOlL0QOil4V3qa1WQ3kkV9+n:AD47Ci9tW
- TLSH T10A73DE6CA34F455CCA4A018D9F6A99C19E21B21F6CD3CD3D786F52C1DF26228472CA7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.builder/Components/Forms/AssemblyEditorForm.cs
- SHA256 c00b20cd28b649f6b76ad7640912cb2d21ca90eb6c77eb5cdc429150b6f32395
- MD5 d0366fd5786bb3c4bca5cc63e894a509
- SHA1 f962d2c03f56461be5856ead0279abae39fe378a
- SHA512 52128bb96128876843346accbbf49c42ddd47ad928e028c6eeddf208bd22eba83dd2bb42411ad85ff48ba6de4f2090d7826c04c7fd64dd41211858c8a05b18d3
- TLSH T139418C6C32AF8628C042513BDF51B6573F69532F267BEC2038DE4541DF165B057B8BA8
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.builder/Components/Forms/AssemblyEditorForm.resx
- SHA256 bbf16750817505ba21d1c9920296411b18c2a95070c6f549ed340ed74f1a1cb1
- MD5 80e03b51930410560a8b032758c9ab03
- SHA1 4680834751fd8a97a94188e16d117d9e6e10cd77
- SHA512 e15c985b117de197e7b55ccbc9028d01a444e94ada3578c9e332cda878b41efc6e1f20eff4645fe108e21c9be5237e4d5642e3c8c547355e66353a1ebf5e6edf
- SSDEEP 384:Zf+tLPQnLvDOiFQXD7UMawUZgwIokPiQ3KokPiCokPimOokPi4uokPi6okUQ3liN:ZfWMnXOiWU+iQ3yi6imGi4miZQ3lHQ44
- TLSH T1835286217296BD1A47936C78E1503B853FE4722B222078457CDF27199F679C1EBE3398
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.builder/Components/Forms/MainForm.Designer.cs
- SHA256 9bc3303b00a6a3eef21eea8775d14d66af09a3cd7bf417a37eef678b61ebdcfd
- MD5 630b412e21d93bb0b2e8d3bccb4a42e4
- SHA1 1cb8271c42a0e4c73e3ebe64506bbdc9db5f6d10
- SHA512 edbae4c24c12bc45da673cfc4b3767485e1437ac2f4113ebb7778adbd754d91afb8ba9d2a072fc4b05b1c8fd850ef69e342a871223c5c98cbeab78a5cbbcd5c4
- SSDEEP 768:gD4uOdgmlQoqs8f9/NKZYjOKUb1zQujUESMosCTqSKGcyy7pmxCd:02NlQoqs8f9/NKZYjOKCtjvTCPqd
- TLSH T1D6C3AB7C631F9508FE7650190F26ABC25E32650F2A87D93D38BF49A18F15638432EE39
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.builder/Components/Forms/MainForm.cs
- SHA256 43b664cdde212570abb8b13708f47b2728cb3b32346ab89d55a224df68a67f61
- MD5 9291c82a222de37e9f4c3436a868919f
- SHA1 7b6dfe9c362b712d48249320a0651fb4c261cbbc
- SHA512 609526fbf408819254be4d62eb9642ce867dc9cef60899da0c56f36c1dc9358de523792ae2e8a2424b1987a05b860661932a06b36d59f74ca2bcb50d64f09962
- SSDEEP 192:ij2Gfwb4Cjf+AgH9g6SwetiKJwefwiOgpSDkbL5XiSC6Jn2n7rtSSCg:ij2+wsLwhckbcrtSE
- TLSH T139E143BD525759585193D430EF86AF9FB721480B0366BC303A8D42B98F046685BFCBEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.builder/Components/Forms/MainForm.resx
- SHA256 fbf5bdc94c026c225ea8851d4ec1de81176d48747d21a6568a98ee2993e5d427
- MD5 2aeafe43f50c1a5ee1b273884e6b3c1e
- SHA1 7ea2ad57d6c4e50ecb9908abf037b69913aa8dc0
- SHA512 81f142cd843b8b6e7ca4db1d204f40058de19cdf9035af75cfa8ba3d4acf4b8616b006056d37327a750c6b965ac578200d6ca40185543c5bee2b170d0f6231bc
- SSDEEP 384:Zf+tLPQnLvDOiFQXD7U3FawvGaw5ZgwSokaXQSDV8okaXQdokaXQhdokaXQUfokX:ZfWMnXOiWaqVXQSDV1XQyXQhyXQU0XQN
- TLSH T143B2B936B2979C6967C30CB9A2112EC52FF463172265642478EE3609CF1B6C1BFE3358
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.builder/Components/Utilities/Common.cs
- SHA256 39e7a5461332b5f826d862fec5e49a8e1aea461d510a28c9ab8652f4fc8267b2
- MD5 15d1f8c283ce7c2fa681ea2bcd8ffc30
- SHA1 298f2c72ce0a6cc113501f93dfb1637e260e5464
- SHA512 9b2e96a0959493e927881e7ab53060157f1195d5427630da76abfc10c393449ae4c2c306bce73cbcb4a2458a45184d2066321c56404ffb451e4ca7ccf2c1314e
- TLSH T1CAF046287A57C60C4593240B8E8E9124A376B32363AA8C60FCCC1611CF6200066F8D88
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.builder/Program.cs
- SHA256 387210c870025623dad10af9250bcc2f0938b4e86193ab73b8e99f7210da9cad
- MD5 0e9665d8e42b7c9752da52d6b3d88ce5
- SHA1 371ac3aec955f2156383631a744b6721c96ed08b
- SHA512 70d87e07dc9b8cc8cef9f87488360a56e8e5c6a7cc6a16eb3c8c33349d3eb216e67380dc03d225094592da836a7da9a5aafb2aa1855a836909348a28cc64b79c
- TLSH T12FF0E9AA318AD7941DB351F7271A90C4D3733A3B49B7A400786D07D1CF360040339E45
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.builder/Properties/AssemblyInfo.cs
- SHA256 694361aa52233264ea67b7b0bd55c515530be042a70dceb848a3d69d474299dc
- MD5 27a2cd1a43177a8e0ead15c49068af12
- SHA1 7e2c41cce9b718e51250d038bff507db760d3899
- SHA512 50a22a0b965f171bc6e2f777b92b8d9a3c9028bcc16906e044ffaaf7ca50e0eb171d6c3d69e6f6f91d36af7985d5e0b900673941a32d1299dd50aea0c7ed3025
- TLSH T19C3170695341A33E4F100593AE6F76C5C37D632892F60C4534BCB453E20163843795BB
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.builder/Properties/Resources.Designer.cs
- SHA256 a5c8c80a2f1d348c69bcb891e9c7095d2a6addf49f8927668986ddc7a9c7245d
- MD5 311d73df3c182e556c964775da6867b5
- SHA1 12bb39b46560f6a8918d02efaf31bada1d13442e
- SHA512 33bbaf6bc7f8b46bb8f98ac91de81006798358a2c2b2c1e2a03ce7886c4dde66e8ab9e60a10cc8816d8ee00aa776989227e5a968508efa146ae9f7bc825a1870
- TLSH T1F271CBBB5F96C5320834D6DB9704F851CB721153C63DD428F8AE43694FB629043BEEAA
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.builder/Properties/Resources.resx
- SHA256 998534fc8cae09a06e6eafc41c864f060904bc2f95f85e2c9691ed2de8912ceb
- MD5 c503b2f5c5121b402729796f61a6d380
- SHA1 0705072ddf1d1cec6fc31c305728578960e14e4c
- SHA512 9a56fd9d328fb4cd4e79a4a6537a9d9adba4fa2d5452f0a25f6a5fa673f40ed0186c7fd8076a05770f7acaa9123712c698bde48ccb1d4fc880e75438b409b46a
- SSDEEP 192:KjrbLPD9sLvIzSvKgIqUyahF8FokwClQEokwCl:KjrbLPxsLvASvKgwyahF8FokwClrokwY
- TLSH T1C7D14455B1C1DD260BB34C2DE6167984F7A8823B0234AC54B4DC621F9F73886A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.builder/Properties/Settings.Designer.cs
- SHA256 c967ced3c7c193eb298360b11c381128e3a346ce9f7cb9278651271dc5e66a4c
- MD5 07a149f16df6453b77f5e23030ebf1bc
- SHA1 5ae7db91294f34fbbb15706132c64f9aced5264a
- SHA512 c4098118c413eb505ebafcc5622369fb5cc7aba20e1e6811559651be7dc41ac46ec3883ed4cecbdd582e520103b50c0475da4b4aaca226dd769b411d1636a2b7
- TLSH T15D119CF52D91C7360562E6A6D605C172CF32122BCB2E9435318D4245EF3544483ADFA5
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.builder/Properties/Settings.settings
- SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
- MD5 8c0f00d7d9b0046695a0255f1b11b061
- SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
- SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
- TLSH T1A4D0A78994C8880693313970F468E13C91106757046A95647164784F15071D612D35E7
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.builder/Properties/licenses.licx
- SHA256 ce3a11a6cd00e9794f422c6b80941eda3ffdd2bd4fbad1f6c92a876cff9776f2
- MD5 a5d12d5864b99c4b5af360190d3160d2
- SHA1 9aec26ced90bc1a62e6327103e15473f4df294cc
- SHA512 3d0d2b3ed6cfc83b7ce9ad87886658f2c52afb85cd40b2fa72b408b5b169dc0cd2b8ef8b57e620718e16319ef54e0a3427c397e2397135b8cfc5184aa984ed9f
- TLSH T128412D52311AB9AC4F1103580C87268ADE6E76AF0FDCCB6E5D1213A9DF29407C72639A
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.builder/Resources/fluent-emoji-flat_red-circle.png
- SHA256 44c1e506fe0fb57a2a0998b68909eb709dda37fe619843e5393e8b42bbcb48b2
- MD5 18503f6266665e8355f01eed8fa2b581
- SHA1 050125e4bf18ba1e539ff07d12d44c4ef6ca346c
- SHA512 2adb1bb2b536694cf454ce2108bde28973d78dc8b24a39b3b7b40c56e9aad4ab3c05a26f1781971cd903e5a7b41a61969f57efae4f8b37ca2292cd424513aa8f
- SSDEEP 192:SNYZxKujLCAPsRo5MQlucWoN+7e3T4zI7Y:SNOPxsSW++7e3AeY
- TLSH T163E1ADCC28CBC95E3E6CE0D70B4D281A9E6AEAADBD14AB01F61962B27105118DB45223
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.builder/Resources/fluent-emoji-flat_yellow-circle.png
- SHA256 7ccffc0a23218b0bc433d88de1b8a722778f303060bddbd0a6f34e67ca1e34aa
- MD5 1ee80cbafc01e623400bbb4264c74846
- SHA1 6d0b824affd9164ac89b8bcda5d0e49f23ac5745
- SHA512 42830b5dd90024446e689fda9a38b13e7ea97fc78e8c2377d156a16efead8851ba63d92c62d14ac4d8b19fbd0e4eeae3d9788c18887740aecd9474459e20e0c2
- SSDEEP 96:HYK/QLvYNXBN2ouPMh+an//njbHlJmhkgtzUy51QqsXMKPKbV1VlDnPI6:+YlBc9annjbHl8h9351QqscKPiK6
- TLSH T1ECE18DE73E9D8D755A2898714A000125802FC7BC5DE3EA5C4CEACA6B4781844D3595D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.builder/Resources/logo.ico
- SHA256 361188db1f370461aa241e1d21bb2bc58beefc57583334d2af104a33f7d94506
- MD5 68b01813f92ba37f8178c635f32c0e35
- SHA1 2f3d7e8e2232d17d28a3246654d20843b75138de
- SHA512 04f419317beb31795cd9197324d4296c470fa03e28010d19ab441db626443f41385b9d061e0454117277ced0f1549e22cb725cb89d842733d38bfb2967282107
- SSDEEP 24:subnnJGKbMndDmnle1tRIoXoahaxRklueaxu5fdbuJjgm2VTq9mKapnj:dJnEmleP+oXUGubmfdb0Zfml
- TLSH T157910C16B37120E2C12881FA2958EF3640579E9CA265962CC6C4BFF736F53A329018B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.builder/Settings.cs
- SHA256 b6ce69b71d47fb59dbd4884d26ad75048e8ecdf13aa6fdcdb082f2f24678c1ed
- MD5 f3712707aa8e95dfbde5393ce63b11cc
- SHA1 3ef610f26c0380ea59e7b8c030b273dfe57c9e59
- SHA512 411265021905db33aac49c29ae72ad580844cc7243288dfe636195af82af97800e2ca13774c4559b967f6e7f2e51759874b7882985d48526aae02d8dea0f78db
- TLSH T17A3163237222C9040CB10836CDE94121977089F387F6DC68FE6D4721DF86C4AA3BCB99
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.builder/Umbral.builder.csproj
- SHA256 bf32e1bef4eef457d2ffcc7becaa6c52d01b2bbccde96d2c0d14ff3f83ed8f15
- MD5 cb5bf4c44cc9a4a2239d0f216cd2108a
- SHA1 80fa94421ca4c81d992c840430643790da782328
- SHA512 cf2383643768170c3cef475e0fc7a12606f09c7afb4cfb18b07a28049a2657dc3ad9c7b56ee4f25d8d824684b559044abec84df0fc35c10ce9795f6f2fc8288d
- SSDEEP 96:7YWnpu5n0rBcax6a46KCOIOm+a4OKGqEGuSueOmTZXZCWmicaGG0eWWMtKHM75KT:7W0rOZXZmitlY1Fzq
- TLSH T10C323225F1DCAEA9037112110D83BB4BDD1A72BF18D980257D6C628BCF72C9A5313A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.Licensing.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a9be91cae167702885a5ca74273db779e3e391e2e604cc03779ed403c53ebe43
- MD5 2b2740e0c34a46de31cf9da8a75d77cf
- SHA1 242324f1112e6387cda41686291b6e9a415eeb8c
- SHA512 605eb300b159e6ed2ee872b6ee378eed7dde6541000221fcd94d52057be91cb3c7dd65c7203f05e0718303b157b6fb941498b5e653501f97f0417d459da6bc40
- SSDEEP 24576:ebkurkdR5uuMeiPUf2lHmdpjrcbYdwcqMw5LTvBrq/WGs1xGUfGUCco:a1roD9MeiUDDjrW4bqD5LDBrqWG0GUfX
- TLSH T16155F150B3FA6F16E1BEB7F56971120807F0BD979835C30C9EDA01EE1B62B848494B67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1332990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.1.5.3.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 012d717b4ac00c3686a772757f49c1908e223624e3974314cdb9fc9291073305
- MD5 41c216d27c71a227774e680e95e99f31
- SHA1 0a2a93d4ecbf4bbec2faf110066c6b4472b0dbf5
- SHA512 e355ba11e41b668e4459f709e87c3e212c8986ea894791d9155791ea9d7315372fb51531eb69204ed2ee38e242de7629e4a2f090c05bf9deeea9ea965ffaf651
- SSDEEP 6144:3e5XJsDZGUbIf5kqw23B1Q8g2iYcHIc6uWXMIFidNw:qMZGUbIf5T37Q8ncHNAMhNw
- TLSH T1C5742DD15AA5ADE1C7D747BAE7103143D77888A07ADAE70BDB8401FC49A2F9BC84D087
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
ac:3d:f6:13:0b:ef:3d:ad:ee:e4:fd:8c:3c:18:68:cf:d7:ef:4c:26
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
347602
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.1.5.3.pdb
mscoree
_CorDllMain
Name
.text
Size
332KB
Virtual Size
331KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuButton.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2a62c78f1f0db2e3258135b50f7885e6734c31c74a8f2f5782f285aa268c2f71
- MD5 21f999e5ac72a16077511d41590822de
- SHA1 d8bb1a8a291f73cdf2b5658b2b65736c87db19dd
- SHA512 e04fe31870f266d772829053a6bb210a9513ff5c8c0f9a3a267ddbe1875125496caa602baf44a4e241ef84d933bd55b79af43d5871ed10c81711adecee78b8e3
- SSDEEP 3072:tgiMibnDED3/7f2ih0xdGzFpzUHgmCFKHUUZP0tTwmnkyY:xDDED3/7f2ih0xdGzFpzUHgmCFKHvF0e
- TLSH T15EB3083F61A45E71C34AF73EB008514247B2EE90FD76C736BD9842D92A837A74C1A297
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
d0:8d:57:1b:52:d7:be:48:23:e9:37:e5:ab:6d:95:2f:4f:bf:24:b8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
106914
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuButton.pdb
mscoree
_CorDllMain
Name
.text
Size
97KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCheckBox.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 390252aeb6fd76a954a03853c3d883e0360dc8b3f2cf8cfed5ba94e4e5a24da4
- MD5 ef11f59a9381df17d7ab94434f79f260
- SHA1 ec11e46a636fe3927fd5fa7c30be65b958853ef0
- SHA512 612b1b0f9204c605ff5e9b91816e674cdaea71fa69f81a5a7f475bf1cc8d5e12687deb1b0118b07b3d7e4764adede0576f8fc799f8155a65a70e5dafff50f73d
- SSDEEP 1536:JiQsfF22IDMxiQ9MOWnce1Cua4JfhwuKeWbZ6YlX52o3tWQFeOvTT:JifF22IoxChnv1CuhW1xCwdeOvX
- TLSH T132A31B7F62E59F60D38E633F65B061005770F450BD3AD77EAEC848884D9375A0BCA29A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
5d:0e:af:b4:4a:c2:89:1e:d7:f0:f6:f2:ad:83:d2:99:ab:9e:73:16
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
101658
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuCheckBox.pdb
mscoree
_CorDllMain
Name
.text
Size
92KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCircleProgress.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d5ed95667aa44a80278b80a90413c0de9d85eeb3ca1fa24a40ae71c3ad88d837
- MD5 bc930a050ca23ea75dbd9deade4189bb
- SHA1 e6878d381ac1c37c331fd01a25b2ec508e1c1a21
- SHA512 20e2bb3661d2817082c2aa01381b5aee8582fea5fc54be486de5b1e48f302a15779ebe5670221774a5a4d031248b342f3c86084de4f023c197cd210857fb3ff3
- SSDEEP 768:A8ioretsy7GQLZvAQFe1zbnprSBaqII0OsWjc1B5Nl4WfWQAz6uJi8B4dgUp2hQf:JixnZYQFe722Wj8l4oL+6uJ/BZ4ZTz
- TLSH T1E7733A5670B5CAB1CB1E2B3E238061400BB2FAD2395EEF177E6C879946833FE5195187
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
98:d6:45:08:d7:ed:c5:1e:c8:d7:eb:fc:59:38:6d:24:a9:db:8c:a4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
75594
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuCircleProgress.pdb
mscoree
_CorDllMain
Name
.text
Size
66KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuColorTransition.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 500adece1fba76dfb2fa628de9886a2661ed1a4e58a7717a5fee607206bb1d81
- MD5 539d803013c0b1592d0e17a740d72687
- SHA1 b0ce15e0f096d027b1d1482afa9d93bafd160f7a
- SHA512 77d8ab7a949db41a79371cf2ebd5d67bd4a38dd040de0073c878f50b2a6409fae2dc5db7cbf375fbc1bc571838b0a6d4848bdecc1420d91633b878585c94b9dd
- SSDEEP 768:2SfWaEnnh2U2DaRIx0qVuQ/90iAzNIewCqyU659bTTvtM/3JhQTifZs:cs0qVb/95+6ewCqyZ9bfvk0TWZs
- TLSH T10A033AD266901E63C39706F934A093165BB4F5E379B1E35BEC1C80815AD33FA5CE92CA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
46:80:21:ec:4e:94:fe:96:ef:43:ca:88:4d:61:d9:63:45:2d:e8:1b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
35482
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuColorTransition.pdb
mscoree
_CorDllMain
Name
.text
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDataGridView.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9e61bd6dbcc8d5866bf3a139ea12f453ef4ca8bab28c08329cbc5f0bf13950df
- MD5 53765ad5b31fd87986a569bbb79f402c
- SHA1 75c7ec63458c79ded533d1d4175de4117036adae
- SHA512 ea129aab13b09e817be6210bc423bcf4e024c83a5a0340941e7658d4dd0ef6f3b40077527f7d168849ad947650a00d360fa6a5f64c4a8f14dfe72cd4d34469d3
- SSDEEP 1536:YNBBIrOTrgVCuiPwacJigM8H+duT0R0xSJQ9FTiIb8EtTG:YNBoGgsPiJfedkvu/IFtC
- TLSH T132832C8672D95F71CA760ABE90F002112BF1E1832A45E31ADEEDF5CA0562FE1D146BC7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
35:92:c1:70:e3:a1:d7:ec:5f:dd:61:1c:cd:a2:98:62:b9:98:cb:11
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
81846
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuDataGridView.pdb
mscoree
_CorDllMain
Name
.text
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDatePicker.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3c1ac3e39665e49327b64887131a53c63379de884b3a6f9a0ab96a36e882ceb7
- MD5 a05882bac172c61b5b1bd3f4a56b4320
- SHA1 9a725973aa498472c253382ff8d766a5d3a41697
- SHA512 a503f5cd0211b123618ecaff83a7930a6b547a1afaad1b93cc5e60bc859e255585a8a94832747422de139f2fe6451b2fcf46b31bac20e12ce60f97983e1af493
- SSDEEP 768:KMzEetGON+bjRFOchYvP0pbwk4LAzn21AXrpKXyvcgq8/i7l5THL8ZFxIZYzUebj:HsONqjRFO2ZxXpHraUNaT0
- TLSH T101333BE232AC9E73C39B8B392050E301B678FB527EA2C7566D5C428C16E3BDE11D549D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
4c:35:4b:dd:1d:b9:62:59:6b:bd:85:8b:81:4e:6b:bd:5a:f3:b0:a5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
48030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuDatePicker.pdb
mscoree
_CorDllMain
Name
.text
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDropdown.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f746eef49caaf23939999a89c86787e6d1f4e4c16f667bcfebcaeacb5276e0c8
- MD5 5bc3c478e3c44caf765c6e998dc621f0
- SHA1 8cd06d3ec991ae3d5c0d935ea03fd7c06d504d53
- SHA512 3990c0a716e2e0619cd969d75666cacf695b6d40a118ead8a810997a594b558250e4a661e303f383f58bc52cac90e84a2049a50a1295f762b2bdbdb8661c33f0
- SSDEEP 768:WxidV98e5TsEQgzWC/Vzv/8vWvLMFZhjd5hQTi7q:Y3ehsEQAWQHgW4Zhx0TN
- TLSH T13B331B72B3E01BB7C75BCF3E34504046AA38B622693FD3567C9C126CD6A3BDD0690296
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
3d:b9:3d:6c:2d:0d:54:f3:4a:96:3a:b2:fe:6e:5a:48:2b:54:e3:a5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
48162
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuDropdown.pdb
mscoree
_CorDllMain
Name
.text
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuFormDock.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f8052b4641fea785ef643bc06d0e5383555c0845bbe695099bc41ab09a180ef6
- MD5 fff8d46f94011c5bfa4bc1d1fbde3eaa
- SHA1 c5e978eb89e9646423c3b2a1d7d2651cdbee90f0
- SHA512 61af0253c05bd33d43d34799eb74d97ae9e3e700281273895026d690f39e3de97034ee51511284a4b6a4150d31977f7ac6fbf4047aa19825564a15eae8be079a
- SSDEEP 3072:wVypYUOJdOb8UD8m1PxGFXflE2BHjvZKDq6CN:wVypYUSXdbBjvZKDq1N
- TLSH T10EA34B3EB1E96EA1C34A377A509183113F7BDB507E72D70B989C40D9AC82BD60C562DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
5f:bf:07:8e:06:07:1c:71:b9:6e:77:18:a5:f2:51:f8:41:4b:8b:9a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
101026
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuFormDock.pdb
mscoree
_CorDllMain
Name
.text
Size
91KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGauge.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 0edc3396eb94c33fca4889c5a379e29aed354469957ee55893f565d8f824cacc
- MD5 161768e00f22118c66a84d22e658b008
- SHA1 7645e52d1aeac19169c8cd1b411200ee808295b8
- SHA512 cfcbc3e642f6f9cf904b993a6112e2304055cd88e9bbe2d818842d4e93a5f71ff6a09f8d36c6a64de8701435cabbddbff765307f8c110dcb5bb14d805aeb3422
- SSDEEP 768:POPW1cKm3/WnwISrek0JCPRjNEp5lW1T31fNEDqz6Zi6EgmaFLGiLjyQXAhQTiQb:PUZewEQRSXlEaDA6w3g7wi3yWLTbb
- TLSH T1F6733A3171E92DA1CE4E0F35A140A2022F34A7C3393BDB65ADBD83A647937EB46D5193
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
c3:56:08:20:e5:8c:51:b6:f1:33:59:33:2c:83:f0:98:13:98:26:27
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
72474
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuGauge.pdb
mscoree
_CorDllMain
Name
.text
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGradientPanel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6811dc0f98d2ce9816475207badd010564b7be460f48b8480664f9184824ce5f
- MD5 58be3fb2879bf2614b7854b0e184521a
- SHA1 fbdce08394b1d11a961c0684d5c0013507dff9e5
- SHA512 a5635f09a943e0dd969b648ab7d929ba16d734ebc13f96ebde95d1a5cd91e14ba1b2e105c7414816f3d535bbe2be4ad861a16e25d84c2d12dd025898f3743b0d
- SSDEEP 1536:FpoDvSiiUiiJiiJiiYiKbfbD7v055J6O5v2wunCT6:aSiiUiiJiiJiiYiKbz+bB0Ce
- TLSH T112532A62F7D40DE1CF8F053A645092025B38F6F3B85ADB4B7D9C41A68B837E611C935A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
66:b6:a2:56:71:31:f8:7c:8a:c0:d0:af:a9:65:82:f4:c3:9e:a8:9b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
58118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuGradientPanel.pdb
mscoree
_CorDllMain
Name
.text
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGroupBox.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 637b5cac86e245c53af91e41e6479de42df1b5fa5a524f931e034f5b5ee1f259
- MD5 e86aafa7c25a2f1654cf95657cacc39c
- SHA1 c9ab7d835b24b294309abed83efff4cdf102906b
- SHA512 8b043a2434681773c6e3d8e73fde70fbb666f57a30f5e3514634ccf5c714979fa89769fc54e3e01fba91c5ac916db44054fdd2a65b4a6c35869b695b8696d96a
- SSDEEP 768:jODM3ey49Uo613D9ddld3LTeBNsRfMzIz6FzHGptXZEchQTits:jODM3eySWd3/jRam6FzHG2HT6s
- TLSH T16A231C54BFE83F71CF8F4339A5804201EB38A5DA7C52D79BAD4C828917827E6429536F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
af:b2:9c:be:0b:fc:07:f7:79:17:da:57:08:1f:c1:b8:63:4e:44:c8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
43806
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuGroupBox.pdb
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuImageButton.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 32b8eb2fae4a14e8319448cd173b73a8e63234b3816d6407ef95be204cec226d
- MD5 7d68b8af58c87ee29eca74fe8ef2f093
- SHA1 16e8d2004d2c3a71a8dcb6983b72537079ccfd3b
- SHA512 6c3f90e7596e0a73cc5da77b92b2d4ed248e49aba2c0c299be4400b8841782415820a44bcca1635a224edc90444559ed14de7dc23fbb7133c0bd86fe93ecd236
- SSDEEP 3072:28cu9fbsLqRKynlLWwUGR3BKRqbpqtqzh4E6jt/:zfbsFulLASYqddzcZ/
- TLSH T1C8F35C3EF2B5FDB1C38AF23A3824D1004B35DC94FD66E34FB544C26B4A81B5A095A967
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
85:75:47:e5:a0:ce:56:a4:30:b7:8e:d1:89:d7:a3:25:47:33:bf:06
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
155458
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuImageButton.pdb
mscoree
_CorDllMain
Name
.text
Size
144KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuLabel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a505193910f7b8fd6123c00bb437bff3d2a4f28c970e24207d395554765e6ad4
- MD5 73ca0338c9c3b7901d3621b346c76a7a
- SHA1 79d26ee6e1bf0beb2ee0593562592de8ff01935b
- SHA512 53e0b84dffbec8e465955bc91f1207ba56a55543ba3c00c66997b3ee3d4cb904e027915a12f7a9dc79ffef4cde633c9b7543436c4ab97785ca2169bc3d4aeede
- SSDEEP 6144:IMiEH8iZBKX+7haZYjw1MLZRD0fxrmfD4DJL5f:IMNhZjwKLDCVf5f
- TLSH T161943A58A1FD38E4E27B07BAB15219C2C7ACD8D37DF5C75E888B64EC3662F49C414262
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
e9:6b:55:94:38:84:19:15:53:35:dc:ee:f7:ed:b3:ce:1a:11:dd:05
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
426898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuLabel.pdb
mscoree
_CorDllMain
Name
.text
Size
409KB
Virtual Size
409KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPages.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 633c77cbd4074c428a593e9c9769926ecfd484b40305062c6c268edb1fac44ff
- MD5 170b18df5b12f1eb01c2de4a03e1a043
- SHA1 2fa3dde71cd17bc2a9fbe8dc05f5e50c94f6cb16
- SHA512 8af0aac446d8efbd0b6cfa58093e21b1201e03057df42d922215237adeebee7d5fc9096d526761424092c2131ae3e0ba9696cf2b51b3aff4f91f0e1902b1b053
- SSDEEP 1536:QbEFvWVvz9NOLQ1p7eCweuT2CWvlcHF/BmEwMDc2xgAPWTUh:bvmZkLQ/wLT2LcHZBiMVxgAPWwh
- TLSH T18C932B3AB3656D61CF46733AA131A0015F35F6983C6DD37A8AB488D919D33E70D0E2B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
50:d5:a1:b5:f6:e1:37:52:90:a7:00:93:7a:01:f4:97:46:bb:93:28
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
94862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuPages.pdb
mscoree
_CorDllMain
Name
.text
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
756B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPanel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4404f91ebc3aa2b018dc98039edacd02c4578f7c581e27ab902fb7c8a8eb76fe
- MD5 ba5a73023ac466e78f54fa87460dda16
- SHA1 15b7b81172ef13e72e6b55d93f512d3c660f8238
- SHA512 8eb1ff4d2c420fc2d832f8d7d8c05d0e63145bf132c5b0622d8cbc515a89dd735f985e2a0c723fe8d6b95b37cd7c56c70c2e1cae3d183d600e8b83d2d522ad7c
- SSDEEP 768:j87knLt2VL6NhPxCb6yH4EgrtR8pLBsyv29UFsxztf8gVnzFy+KDj/njd3m7Vejb:47knJ2l6Nh5Cb6yH4EgrtR8pLBsyv29u
- TLSH T164134DD1B3E85EA1C39A163A3AA05DC14BF0FEC63851D317AD7C81492E907FB44DA297
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
39:b5:a2:14:1a:92:82:9c:49:bd:88:24:15:7a:21:7a:5c:6b:37:b4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
39718
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuPanel.pdb
mscoree
_CorDllMain
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPictureBox.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2cee0aff33f80d8db13831c04687dce28a5f4d8356461553a3f51f077bd9f875
- MD5 9c0c94890f9c941bfa9736adc7b8b535
- SHA1 4f8e79cda2c407c7dd0421554bbe24d6a180dae9
- SHA512 349ce7c0b2c068fa1365773052fc8771b37ac2b23b6ea4d8f546471f2e79ea96f945d23b3a96019cf1e72d63ea424c182a064c0d5b5eafbbd8b3e185e9889722
- SSDEEP 768:vqd07rjIiq27vDr920odL5PzQ8fbstfrWHlpmA37nmH4hQTij:/q27vPI0odLpQS4froUugzTs
- TLSH T150F27B6677E1DFB0CF654A3930A2BA05AF70F5839890C777A81C50492BC3BF912D9359
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
85:ed:09:57:90:44:cf:63:de:5b:86:b7:f9:71:05:47:60:1d:8d:4f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
33546
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuPictureBox.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuProgressBar.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7344febb0946f7555127a8dce09b4df3c430a3805bfd5964c477c36f98303be7
- MD5 e08551ac64936f619d33d53de1baaf60
- SHA1 254ce04897946348e25c45d9e22638bf64fec6ce
- SHA512 17e220a1f3b9eb1017f34a9327cde9b8276d5db0eb10c1ad08c68ac2b1c60873c1f5f8dabb8af382ec4d1b83a767c5435837835ef0c2d341555fe21b8948cf4c
- SSDEEP 768:zm6fVYmVH9VRninLAmjl/AurKv77XXwLsp4Ds5Y2XUTunDD+0bO1KNjh1ekrnDuh:E5QAx7NFpS2Ttm+BXQV0zXVVzXuQTT
- TLSH T194733C65F3E55FB1CB8F5339607071005F35A69AB95AC3DAAC8C41A80BE2BF700992D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
6d:2c:0b:e0:d0:de:6b:62:9f:fa:b5:88:92:d2:4d:cc:af:51:cb:26
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
74410
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuProgressBar.pdb
mscoree
_CorDllMain
Name
.text
Size
65KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRadioButton.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c0fd5f368332a8a5794325c89d5e66e2ed74db69a0f592c75d6fd6c3518f73d7
- MD5 2ba0461d0e46a3cdb553230be6d9e9d6
- SHA1 316a26cbc90735a276bc914bc492dd0da2cb7cad
- SHA512 d489eaa8299805923a08e33813f82d61c0d4267cff3fd8eed889f2ca6dd34239a1cc188f7a72b10a0ae04a7eea9a9517f659d8767987229262676bdeeaf84a32
- SSDEEP 1536:vZsbjXEa+pNKSq5c9ugzX7BF0Xh9UVqIrK7Of08WqOSySGvieagbORNIjOwOFnJ0:vZ0jl+jKSq5c9ugzX7BF0Xh9UVqIrK7d
- TLSH T1BE635B35F5B45EF0CBAA0A352090A102AB38FE83FD56C75A6D9E42C947F33E644C61D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
d2:61:90:fe:b1:4e:76:26:ad:f3:0b:ab:9c:93:5c:7d:a6:49:07:ac
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
66858
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuRadioButton.pdb
mscoree
_CorDllMain
Name
.text
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRating.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b0a971f43a25842db9b3c72c10bb6abfed0daae90566df7f23253e3bbcbc4ba9
- MD5 7224c8510e42a78c9bb147e9c30a4df4
- SHA1 0a3022798b8006c5d51cbc7c8cfb4528a2d75c3b
- SHA512 c9119462eeb9c62a0ebaee9a05e017a1cf80f1de37bbea9242460fcb24154c7b3a94dc8a7e19d7e9198c349055c22912eff8417d9a2e1713f48b6b97cc26873d
- SSDEEP 768:UVf5PVg0Ts0+azK7+Eqm0Mvv8JgzNp6x/xCRyifQXSfbKNJ9hQTiAT:AVJTs0+azu10MvJNp6IfQX8KbYTnT
- TLSH T1FF333AB1B6F77E72C71B863AA98041021B75E643BA7EE713EE6D42494183BDD30D10E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
4f:03:b8:1e:73:3e:22:24:93:45:eb:6d:fd:37:63:b6:da:e7:ed:46
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
47014
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuRating.pdb
mscoree
_CorDllMain
Name
.text
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuScrollBar.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cb989842e3c3d9baf79550f6e826ae20226b24178ab4ad279c76a3b4983294f2
- MD5 5d8b299875c4e5f6ef079bd13a15351a
- SHA1 8f4f33d477ca7d3cea872bc4ebfdaae401c3b6fd
- SHA512 7159a79f748e7e947e9d56c17133e2ffabafc5672cd4c0c89fc854fd520df525530795d30b4170eb427a807479414eabc8364700c697c958c305d005c1d34396
- SSDEEP 3072:dqtazpVUOZj1+8vP24DzyY4L+i5flfvCYPaRUKpmFRycau3:wcQghPZDmY4L+i5f1vCYPaRU2mFRz53
- TLSH T127041AA9E0DA5A71C74B4A3BF9C432342338FC907A15D31E99C436E907C2B767A8D15B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
04:e4:b5:77:42:9c:f0:6b:7f:67:23:ad:d1:61:29:d2:99:fa:a0:5f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
179734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuScrollBar.pdb
mscoree
_CorDllMain
Name
.text
Size
168KB
Virtual Size
167KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSeparator.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9c2c4d272ce8fa98a6100fa668190e5084f69ee9e75e0075e267fdf1811c5738
- MD5 5a389e93f449d77bb0b685fa40f14a95
- SHA1 94a5848f149a8b4fd8bbf401d43bcdaae1765829
- SHA512 73efd93390eb188272b922b0a95d28fc7b4a0eb0006dcd62210cd2a2b8265ce804cde5415133f6da6aeeffb179eed2e1e2d0368676173df8fe563e805bf8b00a
- SSDEEP 768:N6/wh8zZ1LDNH8FOXAJyr09GvYBqjs1+Hw5ibkt2fIxaTclu3gpSLUdWUU7CGtOe:2DN57CGUFWKGWkq79Tal
- TLSH T1C703189076E49FB1CBEB5A7534A0A3018F30F233F9B2D767559D80065A823E50DAF54E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
36:97:1d:42:10:04:d8:b9:bf:a7:71:72:bb:15:49:e8:e9:56:fa:ab
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
34810
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuSeparator.pdb
mscoree
_CorDllMain
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShadowPanel.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1858b16074d7f9b73f462e3adcc77309800594fa96f2e0904c810eda4eaf5e86
- MD5 ebaf1a6efa8c7a04d174be7e0df602a7
- SHA1 ce08c80e52b6cf3f62ba82408d8f32ae6bcef0d8
- SHA512 4ffd5dcb59a4a03273c4e88047c7d398f098302b9485d07cf5549ca0d72467102aafa69298e248250df154a8b09f7560e634cca9cb1af2838baf3965aa645b31
- SSDEEP 768:Zq2Z1jRTnTpK4EBwmUy6fRXLvXcU8knpZlvliQVk3+aIS1GzsQxDzpYElRgyszhL:ZNnlK4EBwmUy6fRXLvXD8knPq+lS1cs5
- TLSH T1E0235CD775E05EB2C7CF0A35A19061024F3BF3735A52C763694D029266823E53CF66DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
91:6d:6a:ef:09:36:9a:2f:c3:92:f0:3e:ec:3a:aa:d6:af:09:b2:5f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
43502
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuShadowPanel.pdb
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShapes.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 77191715d649c33ab2b4e1a976349252abcf6628012515e881f2e65d0d4a9709
- MD5 766bac8424dff377682453d70a9a8ac4
- SHA1 1cea8cb48d0e33c010bce20244520b79491f6e6c
- SHA512 06b00c021342748bf147736ccbc93ab286d985fc0bd26dc3e9ff4290eaa3997b5105a1b4d365fcfe24099333d1d608b06a19456c28c7e4049c29cdf099b317e2
- SSDEEP 768:lsXwjYdAepHnxwo64Giy/UhHPzWByJ9+4jhQTi+P:/sAQHxwoGbUBWByJheTB
- TLSH T155132AA1B2B85FA1C79E0B3A35B092014F31F8873961D71B1A4C01A51B967D31EEEEE5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
a0:f7:d5:0f:6f:c2:25:d4:af:1b:fb:bb:18:48:d6:2a:6a:d3:9e:16
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
39066
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuShapes.pdb
mscoree
_CorDllMain
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSlider.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 22e686373bb1556ec3e044061c727c7b11cb1e6ad3b15862ed7e815e35567df9
- MD5 9914005dedbf5f81be2741ce71cbe63f
- SHA1 493a5a01dabf629192fe90f15194587e5814dba2
- SHA512 be5037ab18c8b45f0661035151f0fc05f387bd69b9b62fb3ba3380204a094f45e78ebb181616e2eeff7347622122bca82a64ecfe4d48aeb6899c4038f1d11fa3
- SSDEEP 6144:ktwUO/j558MwE2ogicLoqP+QBwa/oZnyazz5s:YwUO/j558MwAccqP+c/oZym5s
- TLSH T125141A01E0EA5E72C34B473BF5902182FB789A103E5DDB1AED8A11E84FD376EB54506B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
67:fe:af:0d:6f:0d:9f:87:18:f1:3f:cb:64:89:cb:aa:12:4d:08:6e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
197570
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuSlider.pdb
mscoree
_CorDllMain
Name
.text
Size
185KB
Virtual Size
185KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSnackbar.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 97173a3d47073de685b55faf2d895130e7ca115b7fb23c7b845d176b1659d7a9
- MD5 5381c510a37e3f31f5d90aa321b4bfd1
- SHA1 ae8936a05d58236b3b538712505a353c080d894b
- SHA512 2790e342e6a95cfc3f770fae95530c6eac25ae44cd42609176b5f7aab112622bbde13d91ab56e09dcaaa98575ad8ea1c02a4388863c4bc4063a522fd2fba2cf6
- SSDEEP 6144:6aQw5nUoVWa8EWtwrRM7ffGpUyAWfhmCb4xo:P5nUoVnrRMDGpnVCo
- TLSH T1B7444C2873E82EA7CBFB0779B4485000EBF4D8457666D70D9D8406FC1A8B3B6E52525F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
ac:d0:88:e1:64:83:70:53:42:76:e9:3a:49:3d:f6:93:4a:77:0d:0f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
274194
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuSnackbar.pdb
mscoree
_CorDllMain
Name
.text
Size
260KB
Virtual Size
260KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuTextBox.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4569393e1aad7498c6a7c8a84f79d0cd7a1d0656e912d0ddb607b61163673976
- MD5 fd2042c49df3e74e096b8cee8cc9fe43
- SHA1 4ccdb0e13c24fb71f502d50e34f00c39bcacf307
- SHA512 c93ad9cb411c311b0feeefdf2089c0c13098c7d2bab56345f4e9a7fc515965a3893c613d494adbbb066801eeb3dc32237a8322f7a5f876284a06b447efdad641
- SSDEEP 1536:QjrdQ4aOXffG2ESScROigmC+Voavy5uZJ47b+54T7:QjrddaOPuGxROigBCiQJmy54P
- TLSH T152B32A3E31A55EA6E35EF73A61620200C33098C87F72D73BE758559C1DB2BA60C5A09F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
c0:63:fd:26:57:02:32:82:e0:bf:d3:3d:dd:8a:17:3c:3f:30:70:24
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
112194
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuTextBox.pdb
mscoree
_CorDllMain
Name
.text
Size
102KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuToggleSwitch.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c715af145983f42c0ce74c058bdce5a9a51616b38fd935b05e6be328c014f85a
- MD5 717c285f4eaf6b5072b507b2a15f5fa5
- SHA1 d363fbc7ba468f03681b7af3296b498521050e31
- SHA512 3e615661e23d2f0902b67111f550798587eb15f48bbba166b569b59547d3b93ca5ed7becb11e4b8e1538daebd1e6912823bddb15e6932fe746d6c7b4abc178a2
- SSDEEP 768:WE2vdPqXKq8+jeeMxu2nuyX1z5ZCgfD9EYhQTiCS:52lPqZ8+jP8DXp54YDyTTu
- TLSH T1A8236CA5BDA8EF72C756473526F071011F70F5462612DFBB2EAE80880E81FD105EA1BE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
e6:b9:d6:86:d7:ce:ee:71:9e:85:d6:57:2a:9a:5d:c3:d6:f7:6d:1c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
43186
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuToggleSwitch.pdb
mscoree
_CorDllMain
Name
.text
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuToolTip.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 899eada5705312259c5845b31d62709c377a3083d4578f58d1ec7547809c780c
- MD5 9cd1c29f2d893fda2c48676b92fa35ab
- SHA1 325e7f541f0d2af9def583590a0c1f135206841b
- SHA512 3553c4bf3419c7b91cc41f89eb5765f52aa67bd410f640e9edccdbc9f3fb86bd1a2be774dba1c8f74279cd681b8151c824dc946ac2e7afcdc8724ea81a38e2b5
- SSDEEP 6144:4zuDdMBBdHEhTFCi50KMSvzPdX6ufy1C1j/soY4OkXd1jD6ct1MTXl:4zu5MBBdYkivMSvbdKD1C1jVnjFtOTXl
- TLSH T133B41A1561F59A70C7CE873A9411C422AFB5E8617C6FD70FA84A50EC3192FA743CAAC7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
61:b7:b3:0f:3a:5f:0f:05:20:54:42:45:6b:83:a9:d8:eb:98:f4:a2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
530322
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuToolTip.pdb
mscoree
_CorDllMain
Name
.text
Size
510KB
Virtual Size
510KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuTransition.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c6e038ab3cc0b56551e3613506a5b4028b796a6424ef3c66ef310c901c12f8d7
- MD5 db7e06b950f15c1a799d2a049122aa5d
- SHA1 445ebb73a64bf910bea401192784446d298bf106
- SHA512 b8f9c9b9e487565f0920dba28a6fec75ff9dcf20ec16988d63f2df7ff2a935e117b98f74f780c6f6806a58d217687cbf4bfcd5de19de2a121998f7291900d119
- SSDEEP 1536:WgpjL77cNTSNuma2olzkB8KiqQ1C6sqVzeScHodtu2SMTb:Wgl7oWS2yzkBeqvKiScHStKMX
- TLSH T17D93073FE5ABFFB2C79EB23979115A001731A88B3C72E75BA56400D9C6827560D8C1B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
c5:85:b0:3d:ce:4f:54:f3:98:13:e2:a7:62:3c:ad:e0:85:03:42:48
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
91714
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuTransition.pdb
mscoree
_CorDllMain
Name
.text
Size
82KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuUserControl.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 41e5f33d14adbfe149d129b42deb826e9dde1c0ed89d91f472a9888219c60692
- MD5 7119e268ba9553cf35b3ad0cd4ac9443
- SHA1 97e4dd5546b524b92bd92285ac5a841e45890791
- SHA512 a6f5d8e78b211aa2c32f3736af48e8994fe88d3790d7f76638df78751ab617096865981b3abbed151f673a8db9c0d234a7678b9430ce42888ff1b0bed0f284cd
- SSDEEP 768:AEerVJm7yq158UZnVtfp3mufZlTAdkgKVgEyeGKHEVbqFgFlZXVEJAWsotSZqzbD:yxrMZnVtfFQKA2jn/udsWMA3iYT4
- TLSH T12883195CB1B56EE1F3864279725076010B38EBC2BA67D35EBE9C03A91AC17DA018D673
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
49:c0:1c:f1:00:6b:cc:5a:af:05:30:f8:9f:46:ff:d4:9e:1e:90:5b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
79738
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.BunifuUserControl.pdb
mscoree
_CorDllMain
Name
.text
Size
70KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.Deprecated.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 54c16cfc20bd184f0001bc7fec49cfd89734445535736fc762484ceac6f527c1
- MD5 2355a855dcc59b110ea5530510bd7dcb
- SHA1 edd5ab7d84363b985cabd9e6354ebb336bcfad34
- SHA512 d0836091ad1aefc5e8cded83f2efd6a3044a402daed9ffb15cdcead8a6e4792eaa1d6cfbb875005e10b62457319ead014d7176b64a6db0d83a778e525c5f6075
- SSDEEP 1536:vNFe7lwYaAgsQaSLWT1OpjIectBCMb6sfMGmeIiTra8id2V/0jhK9mHKhjCQgTU:vNI5ZSQ03LG5Iii86wCoNgY
- TLSH T12BE31B22FDE67D75C3CB4A7FE1D11202673AA9917A9AC30A894401BD0FD2B5B314D2DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
1f:1a:d3:cf:4e:65:95:88:7e:6f:85:2d:21:87:4c:98:7d:15:a4:b0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Chains
Apr 23, 2021
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=CPR/2014/141232,CN=Bunifu Technologies Limited,O=Bunifu Technologies Limited,L=Ngong,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45
Serial Number
5c:a8:2f:f3:e2:49:8f:60:ba:9b:0f:ad:f3:bc:d4:87
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 31, 2021 - Mar 31, 2022
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 3, 2014 - Dec 2, 2029
Minor OS version
0
Major OS version
4
Entry point
152690
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Willy\source\repos\bunifu\bunifu_framework\backup_branch\__build__\__secured__\Bunifu UI WinForms\Bunifu.UI.WinForms.Deprecated.pdb
mscoree
_CorDllMain
Name
.text
Size
141KB
Virtual Size
141KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Umbral-Stealer-main/Umbral.builder/packages.config
- SHA256 b707717ed529ff1bfc12099592822efc5a7e5d8387a44bf99c1989bfa2eb4881
- MD5 8d27d393afa23117e10adccd73a0db08
- SHA1 8743df90b8f1f7fedf5cd74142ce40d38b66168e
- SHA512 2ecb46f66164eadf07be2f92f813b4c6cff411541b18b9f71dc183fa0a1c2f6f0cec27852a0d5bffce31ecaae22b1aa34efebe5d29ff4269d3b522c22725f5d2
- TLSH T101D0C20403ADAAB3C3712ED0BBEE01441B7C7066F22109CCBCA012A943AB4298517B5A
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.payload/App.config
- SHA256 d524761c17cf0dea94109f3fcdacd2ecb67550115ff9e0307f78c05055419efe
- MD5 fa7dab2218c3ab0be0feda07b975d8aa
- SHA1 2fe77bb2627c6a2df6b433cc10699c629412d40c
- SHA512 14a3ce4345cd45f4e5e28478886da4756f9b78423663f051388a5cf380c3f642f3bccb80d0051eab5fa2c50e3f2ab4cee52c6b208b38a914c92bfece15ba4fa0
- TLSH T1BDC08C5940347C2BDD224F239260C925FBF83262E424000CE06BAB660A2012E8206356
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.payload/Components/Algorithms/Aesgcm.cs
- SHA256 7c3ad31aa36689301e450ed89a0d623acae25a6b3a349888c53b6c5fca928ee5
- MD5 48eae062d85ad7e81d6e3190348008af
- SHA1 ee9c4e5bb927e51c8f5e91bb1d477c775c6d9b4d
- SHA512 1df0bf437b95f87d5842d3e8d59cc0fe78de26aa777b6f7ad64c9bc5ea342c171b6ba8d924ffe62d54f9f2fb18301ed98c5396150ee3f5e44694e26c1abee6c5
- SSDEEP 96:JjMXGOlva3l1IMFelAlUgQldKlySSfd1FC4M3aUa8Ib:mS3PIeSYUgIdmySUGZaUa1b
- TLSH T10CB10D05995799980BC310692FEAE55DFF1A40275A31EF7ABA4F01137FC8A30C62CBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Algorithms/BCrypt.cs
- SHA256 121f17f4e20d59af7b97d02ae05bdbf13eb0c193c716dc575e9d1d6e50be70a6
- MD5 dc6862be33f5ea9533730e1412bb3b6f
- SHA1 eab1966171e9185efb051c95d70bbe03e3faa2a3
- SHA512 1a97bcfb2c85cc0c2edfc3cf36734e18cb2ca9d1a6619e23f729fbddae273f3339a53b60d69f03c82427c34c29c364cb57149cdae14d59cf79fe3a8ddf23f203
- SSDEEP 96:JjpRZQelhlDS1NrYVWlFd4n4N5YAfDpM4HtSC5:d5bDbim+DXHtSC5
- TLSH T153F1106426128C7656835024BFD9A5CBB60790233BEEF9553E8F0EB04F87219E170F5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/AntiVM/Detector.cs
- SHA256 d18f96137f9b0a12d8975d3a9552bf7277c60238243bf896df79e202e9917718
- MD5 1ce293933417e50e4c7e431e491edf7a
- SHA1 07ee34305bda37f9d8af4f5df913b250bedb28f9
- SHA512 c99f697c9bbd946862c0afc29577f7a8e58932b56322378ed3d94f0c0b55e258b42541405ea68fe975c6535bea31f6a094530799bff5ec6df752155bea1d5809
- SSDEEP 96:Jj4YN268KWt0X9x7Y8+cZU1m8VC6s0TNFi21oWZ/6PYSxCwyL:iLb0r7Yh0UW6LNFRtyPYSxCwyL
- TLSH T181C18869F8A61D1399E104BA9B6B60116F9C76070FE95E2C77DDC3089F0DC260978F4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Brave.cs
- SHA256 28405d4dcd604dc09ac1900237f57b0690b57e831d8d07a5f9bfb9724e4cf3e0
- MD5 39d7848dcc5fa856ebe9b05946239a47
- SHA1 7d40d36ce887a3c12e231d8d209bc0d11ea1da1b
- SHA512 b160db24c56304e35eaa2392d1e0eaf1cea8617afae7eeec9a5c55ee6c46e868441c6872d414073cce5f2a4bd85c6f1be10c525f3b075a2e614f75dbd8eaff67
- SSDEEP 192:iD3Bxd+XJCTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7/d+/YKDmVw+T4K
- TLSH T160F19404BDB7693A07A30776ABEEC4423325E71B43974E94BF9E16009F54918CAF8399
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Chrome.cs
- SHA256 d0bc322b25097164b1e705aa079c9f356d2eceb2a036be1e1f3aaf1ba9e2b15c
- MD5 e3bb36d56bcb7c1ba09dd11a0186d4aa
- SHA1 b7ca34a36dc13b81ac0c87f48c2378de2a651b93
- SHA512 23c18138d2451253d0d6e7e254c5981a5aa1550c0603d7714bc6393ecee6dde9aa7fe5ef95e55442fd1610e969409c382565568226c023348707b6d3245d1485
- SSDEEP 192:iD3Bxk+XJCTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7/k+/YKDmVw+T4K
- TLSH T1D2F1A404BCB3692A07E34776ABEEC4433725E71B43934E94BF9E16009F54518CAF8399
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Chromium.cs
- SHA256 f697255ebef84203f3413f6e77e3d4e3a1950be210289d6e675ac254ad475e83
- MD5 2c500febc8684b167c43a1a46b61daf9
- SHA1 17cd2311ca523bb7a110abe7f7ad6350ce8c792b
- SHA512 761b220d47de7bfde5be6285b3610178ed10b210c4604813f5efe595025ff0697bd33dafd4654eb6a6b9e593f63b690b17a3c7ac8823a8359134b1d7c02e6cbf
- SSDEEP 192:iD3lxP+XJCTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7DP+/YKDmVw+T4K
- TLSH T11CF19404BDB3692A07A34776ABEEC4433725E71B43934E94BF9E16009F54518CAF8399
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Comodo.cs
- SHA256 9f1ed5694ff564aed71574da55a44af3177532595c8cae5aa291d38d35778c5d
- MD5 730f0a558350d0f3228472fb15d293d5
- SHA1 3bf8bcd897634ba848e020d8a9cdaadf1c4e77b7
- SHA512 092c3d9f2cbdec11285f99034ed9ddbe18242d2a5501ce1cbe5829ed1c2644ce795ffb20f640ca09f6e13aa1bb8704e169dca623573fb3b05f45d68d3ae58f9e
- SSDEEP 192:iD3BxP+XJCTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7/P+/YKDmVw+T4K
- TLSH T192F19504BDB3692A07E30775ABFEC4423325E71B43934E94BF9E16009F54518CAF8399
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Edge.cs
- SHA256 f0f890d78b1d05769720b53e7459ee32e6219b83e2c11ef4b7e971839ee7b2b7
- MD5 fc513a6741b5ddf40f7646964920d27c
- SHA1 ab5a605703b6da194dee43d15b0de74f5f8fbd1f
- SHA512 6a1130a327755adc10fba90437301a564cd6d3db8e7ac29ddfdbb942fd8bc1b78fffc35b6d0b781a83dd634c6bfda3be28fb430ccc46aa9da519b6ad76c0bbef
- SSDEEP 192:iD3ZxU+XJCTNIYKtt6EnqlUC0oRj6K0phsaHoRprvSwawb:i7HU+/YKDmVS+puI
- TLSH T13AF19404BCB3692A07A34776ABEEC4423325E70B43938E94BF9D16009F54518CAF839A
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Browsers/EpicPrivacy.cs
- SHA256 d62285e8dbb2074136e40e942dc0c6546fe184538622af4400138d173abf0cd8
- MD5 6e37be149f0a4042b1a1d3fd9c601edd
- SHA1 4c639dfc4e20f6f8cb384b7900cee3ef03365331
- SHA512 64c6b1a4c34c455410c7e5da596250517bd7740ee4286c6b0fb0d67845889615e85e2a8519f07d664b2dcd7b25c318b15091350ecddcd67a5fe17ff04862926c
- SSDEEP 192:iD3/xVK+XJCTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i75VK+/YKDmVw+T4K
- TLSH T1D9F19408BDB7692A07E30776ABFEC4423325E71B43974E94BF9E16009F54518CAF8399
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Format.cs
- SHA256 6b4893d32d8f6c68f27f443337009fa51b543d110e6d1d9c4a9a0fe67a6429e9
- MD5 d7cd557df5e6983291a0a38b9df86541
- SHA1 9369f0a4a59dfd99b09f50bb9abb1b7cfc2be31f
- SHA512 950aa59e3338db886df31815d092c933eca6eb26444e0c232eecfec558f3169e995217c6b817be3b6d71d010675a74ccdf9fa0a92e3b5dc28c8f94b770293524
- TLSH T1A3118F6B115B590419414294DFD818162980E46353EAF8A5FDEC5730AFE7D0AEB3839E
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Iridium.cs
- SHA256 fb859b5ca9b2742197eeebf4516684993f557bf07ef7ee5826a37e9daf5e2642
- MD5 8ebcc05dbbc0da629f047f408d72e28c
- SHA1 12689e02b0077fe247739acc99999c42963b568b
- SHA512 75228056e64552281cd9953d7335aea0813e2b30842e474e5b66557c12181f7fb7350441e463d6bf7b747b10e15200357dfde19d0297a485ac9ae062e83091ef
- SSDEEP 192:iD3Xxz6+XJCTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7BO+/YKDmVw+T4K
- TLSH T1B4F19404BDB3692A17A30776ABEEC4423325E71B43974E94BF9D16009F54518CAF8399
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Opera.cs
- SHA256 c6ce6c66ce9936c60b3f0654fb44630c4ccae26303cfd2103c14d1474ee98e09
- MD5 4fd5059faa8bc2ea05edc903e215ccc3
- SHA1 24e940e1b69896649fd9b53ce09fa68551808a79
- SHA512 ca600a468fa02b433d056736c6c0e9b76cc5299abdf7c5fd7635d9bf4076c445db9693653c5adbc03e697dfe2eedf0272e068e390e22dc81628d0443332ed2a8
- SSDEEP 192:iD3jXT+XJCTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7jj+/YKDmVw+T4K
- TLSH T19CF1A604BDB36A2A07A34775ABEEC4433325E71B43934E94BF9E16009F54518CAF8799
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Browsers/OperaGx.cs
- SHA256 6f1aa51444c5f603bb055c9300b9a1bdcf8a421b0034bcde794aa6bd08d0cf6c
- MD5 1bdbcb15eb8a10b2f4fc26dcc609148f
- SHA1 2ce95added689d16ba861d5a1f7c24b500663f3e
- SHA512 65875db4604eb906cde62818bd72c2687938ea6cf4e95717638fd5e63f30448b3d6d9408de576be8b1d369a6381378929326588ebe2451165f709f7b572e7518
- SSDEEP 192:iD3jdG+XJCTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7j4+/YKDmVw+T4K
- TLSH T163F1A604BDB36A2A07A34776ABEEC4433325E71B43934E94BF9D16009F54518CAF8799
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Slimjet.cs
- SHA256 919b9fc85ad2e9fdf976916af2bd7b3a2afd37e6b3f0b2f49c8a329b2517fecb
- MD5 fe44e7fa4efcafad04fd072b5f8fc9cf
- SHA1 a060867fceb6c77030fe0f64cd2cc4d413f7369e
- SHA512 eba70c35b97a45e7704c327d96841251b017bfd25d0b65c281881df936afa4219c8f90661fa9ac3d923a86a10654e1145217692b1ab149705e5bd039563bf689
- SSDEEP 192:iD3txn+XJCTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7bn+/YKDmVw+T4K
- TLSH T1DEF19404BDB36A3A07A30776ABEEC4433325E71B43934E94BF9D16009F54518CAF8399
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Browsers/UR.cs
- SHA256 6dbe53927c2444947e9877b5d8afa0bd89a277e3508cad84dc227e89c1e28184
- MD5 97429f00e49fba3fd3f9876793615522
- SHA1 aa29659a14be51f95a0e1033d39065e1df872d32
- SHA512 d3d344de4dd490a410d72c6b72b01c1a39fbfacc8a2c3cfddd0a3e7786dbb9fe2fb9fc33231c2cdf85d5ee60dafc110dd5fca5e84715ddbd41774ec22b2d3038
- SSDEEP 192:iD39xC+XJCTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7LC+/YKDmVw+T4K
- TLSH T1AFF1A404BCB3692A07A34376ABEEC8433325E71B43934E94BF9E16009F54508CAF8399
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Vivaldi.cs
- SHA256 26b986c1426935bee82d78e74a1bca996315c1a74c13134e0ed8ed34dffaf3aa
- MD5 5911be5388c25b8ab2b3ada6c3a01a82
- SHA1 54cc9633f29b8143776d538cd03b7f043bb8df81
- SHA512 3dfc362d18f51bc26364f360c9effc7c0fa8ee31ff2a93b81251e4465d923fd35efad985b6245f8b3b42f726ae2e0537a24d19ddd0224dec98464ed712f005a8
- SSDEEP 192:iD3vxK+XJCTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7JK+/YKDmVw+T4K
- TLSH T14BF19404BDB3692A07A30776ABEEC8423325E71B43D34E94BF9E16009F54518CAF8399
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Browsers/Yandex.cs
- SHA256 9f65162b3db6dd17e1f6f1db1877a751f3821ebf6f41322860d689e24bce234d
- MD5 dca7362df121bf7b43bb2bd4fde5e1df
- SHA1 2edafd4ace1459e80c933c5887e9cc46f37ab806
- SHA512 db1207749aceb59e85c787e470f22972bfaea5ecb92533ff42ab5415971c60f3363c9ba9f8d774df7b1ac5f065c317efc54073c474790f16211a23f5f84ebbcd
- SSDEEP 192:iD3Jxj+XJCTNIYKtt6EnqlUC0oRR6K0phsaHoRTrvsqawb:i7Xj+/YKDmVw+T4K
- TLSH T1CBF1A604BCB36A2A07A30775ABEEC8433725E71B43974E94BF9D16009F54508CAF8399
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Crypto/WalletStealer.cs
- SHA256 2079c34af2052910fb9381d21606581c07e4778d3568df36c2f69e6632ee50fe
- MD5 ca58afcfc3ab7ea5d95fb722ff31df33
- SHA1 3944714e606c9e46917ea1a87050381442664e7a
- SHA512 4d1e4e74c2e4dececc7edc9d46df169f04ddb180ae35d3bc6954b6473653c86e35ea568688dd7f73ec71ef156ecd79e15f7fb3bd961f02539a160e8722701572
- TLSH T11E51DF74EA67A601118B2768335F6A6537B1E37B07A7CC50BB4C67408F1F11C2AB4699
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.payload/Components/Games/Minecraft/Minecraft.cs
- SHA256 959a2c661eedf4db2910c3703dc5e85b572e7d695f50f99de72692fb7f0755d3
- MD5 e90ff3a01455241dba40104f6e76c349
- SHA1 7c7dc3ba61071f0a1a29e3b639026e5a4f25a7a3
- SHA512 3f7c69be327f30df9d4e1d81b3b73f6760ec2943f972772006661cf8e2daf2773b97607fac10a423b8845baece3bf962bd1d32204be6fe4c7167d430a59785a6
- TLSH T12261BB6095A20F5622DB6321371A69623B70C3B357EBDCC8FA8CA30C6F5E09C2471659
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.payload/Components/Games/Roblox/Roblox.cs
- SHA256 0b81ebba2bba9b54758710e2071a7bafcbf3fdf2ad352ae950d790c6408ed5e0
- MD5 8fa2032d21ca0acd9de28f867eed60de
- SHA1 652e7c41b773ab2985c687bacb2ffd2ca0c6ba49
- SHA512 c647900352a2c6f2d2a82f2e28084823ddc66e1f172e5a07a6c322dcf5f159588d4c1e4bd1ce779b397e22f16b5d0472c1c8e4ed64607d802d9a46670884a23e
- TLSH T1F551F07AB97F290E55974029154902235F1A611312DBCD24BFBDB2288F04C7B4E7DE9F
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.payload/Components/Helpers/SQLiteHandler.cs
- SHA256 2760d63e9dd967034eaadb4127b2ea36794255bffd62fa7941deec6752820014
- MD5 1b7b47afa5c6a2c98588e3c2644a7d44
- SHA1 c3b459050782114dbcf5e1c2baea80ecf539ab13
- SHA512 83bf175194d808e88ecd806ac15ea5aea16d34e564e9895b96a4a9c47a7fefd52026bf52069ef44a942ea1b607c62055eed414d02b59d943254c2c865b5dfdc6
- SSDEEP 192:ilY/TxdeEcwr/l7zPMpqs6DyK9nbfbBXUWUGm5t5n5SC42cKyaa1eyR953qzl6QW:ilY/T3rMsnLNXpHmnlK2M5zM8+UzR
- TLSH T164A28D68179305B4037F6EB8D34E850A6B245413A8CF6EE1FA7D1E804F42D2766B4FB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Helpers/SimpleJson.cs
- SHA256 eda88dc4966ce6d5f40597a308ca69d8e8fcf44cae868861215e4b5c715f1b09
- MD5 3522eb4dff5691200502d9cd6ebcc548
- SHA1 2d98beb645ea66014fd921d64de328c118e13424
- SHA512 8cc579540b5d2b4a70e594ea4c3a742569bb825f19c9dcb81eaebb81e25a7b8512520b570f6d8544f5eb30078d0fa12f090f54c55ecae97d2c29cf37ccf083ce
- SSDEEP 768:uFQfY28C9x2P+YDr7NFlyroiklaS5mDmFtgVlexEsR2RHa:uQwjlMitgg
- TLSH T1C483D7687993D5314A47C0B4575BA081E7228413A25DEC20BBEC8BB0AF855705FBEF9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Helpers/WebcamHandler.cs
- SHA256 142bd5b5c0eb39fa14a54616a04672c24ee3fb0711a68c8b6e77f42c8a2194c7
- MD5 a771ebfc3b5a5f6f558a2161b927b3dc
- SHA1 77607a49ce3134ae05c90c6bf3b2155df7cb28dd
- SHA512 22199a6962f1320ade02e0a04847468384a77ec59600baa9e45c069dba2827ec528b35a7c237996ab916db8967969e28b244a1965dc084d94a90dbfb1538a2ca
- SSDEEP 1536:NLAIf8dbXn0Kqhwtitv+/VtHgEUH2V1CEpMTTgTc9+V89:N9StitW71evMVG
- TLSH T12093C69D1FA300250953D0397F8F6582D613982752BFEC153A6DA7389F12588A27CBBF
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Messenger/Discord/Format.cs
- SHA256 8b4689f12a96d8c9da5a7154aa7da4a97e2884e2842c2c6e4770581fbbfcc60d
- MD5 f33cd75d80e27abd65ab3086397864cd
- SHA1 5751a4dfbcf4a59f35fcdcafc55fbfe8020a2b56
- SHA512 09c8f3358727d4d69e5c23f605132b12671b82594b7ef4ae5bca1b3c8ce4a38b8b6f0a019289b7598a65400a23d237427c625b65cc696e18e4530afaff64ff75
- TLSH T1F741A37721A74900094118B0DED8544526A0A6B3A3EBF8A9FDED4730CFD6C49BBB978D
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.payload/Components/Messenger/Discord/TokenStealer.cs
- SHA256 6406ac5d1936320e57fa47af6d092bd5ae777b192b7cfd17d45d1fa8f5a34487
- MD5 97ccd5b64f9b5afca83bd4262d38008c
- SHA1 879ec7938374ae3aa8ce1787baf9a1033717deca
- SHA512 ca9d57031fd1e965e6d5ddb7e3a262266594140434ef102fa92e9e7203319d5cead2f4c0ad0d2e8e4cc4b715656530197d003aac14df49ae62127f84778e2c01
- SSDEEP 384:i/0oJ3/FyFqtLfaCa9r6UXNDTX8rjQOzaHXki:Do2LHTMrUOz4Xki
- TLSH T1D38271219CB325511E8BA379EBCB59123B32921B57EE5C61FF8C954C0FC851C89B17AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Messenger/Telegram/SessionStealer.cs
- SHA256 3a8e056761bbb969c5eb846590076c1ca1d4bff0d022c03a5de754cd97d59323
- MD5 3c1b6ec754635e9dc98f210b64847f4e
- SHA1 1bfbdb13c30e3a4c1b0a79b8c4ef5a6bdb1941e7
- SHA512 18b004550534cb056063337f52632defbd7d61d1fc9f38ef1c6908b0049e571b295a651e42f32c5369cc03f93c448f7a22b97b8602ec1763cbe7de1e1cd826a2
- TLSH T1F751AA29AEAE2112259332313B4AA8421775F753079FCC08BE8C6750DF455292BF9BE8
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.payload/Components/Postman/PayloadGen.cs
- SHA256 00c73ee3093ff4ca2d59a86bb4d6be8a979f642553278e1f3e69464da9d9d550
- MD5 ca068dbb140bd75b2a2d8d011a37b438
- SHA1 50707bb56da22262178c23e73169164ba83084d8
- SHA512 aa4d264bc80fedc2ad143007800d312f67179a8f17ba0b6ac55c26b7abac1657855e910d320cec83955baa657bed38cdce26d06cbf7cd766054b91181de43e9c
- TLSH T19651D113263585261C265431A287C24A3736B68F5F99ED54BADC0229DF13D48BAF0F79
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.payload/Components/Postman/Sender.cs
- SHA256 75a980cc65d426b2838d0c2f7143158b9fbdbb17d4c19c9da3f60ec398ef3883
- MD5 45e3d935cd6fabd915a73761160a0275
- SHA1 1197f6b7eb49a9e607c21ffba62cef2a1a263a14
- SHA512 30cfc8d4f8972805aa9957e7b363e9ef5f8b106070df83553d8a1fcb8f1d2967f0078b057898169a959f8ba448de2218b451f7bd01b349bf6e54336f1c5e47e9
- TLSH T1AE31BC3534A3A2A50A47E171DA1AEA543331762B2A83E821BE9C104EDFD310816F8BDC
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.payload/Components/SystemInfo/General.cs
- SHA256 c4802f5025c082a7fddbad159c826cb7dc61f9a2004b4b1d2213b4f1c25bc38f
- MD5 738eb6bc58133a987024352d1f1860a9
- SHA1 8a9bedc0d5d11ecd98dce8a3f466cf4c2e3740b5
- SHA512 f6c292d9de97a844b72128c0c6c76e8d306aecc777e6421a4e90fb2484e2cd5b46f9bc5c8d429e25e7ba18ee5b5ff04f6470cd06d00c8caa7fe835a5ed79b005
- SSDEEP 96:JjNVK8uMa9beBb48T+fjWvTr7XgZbIhgYN7b:1tbzUbi7b
- TLSH T16A81545BDA7F4925C4AA241E778702430AE861036312DE387ABCDB096F4EA7484B1F4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/SystemInfo/IpInfo.cs
- SHA256 ff8deeca76f17623d252f0b4e3530099646f22f7421e94425a3310b95793b01f
- MD5 0ff8105f261276deaef6d6300777ffa7
- SHA1 a1e37f071b909aa3cb6cd195629a70ec22e8de79
- SHA512 dcdef384ae6a2e42edc4dd50be5714c5ddc256568dc98b80324a74a5c3d001dc731b0e464185b94ee1fcf7b4bd9b1289cc35051d0d6b88d6b0a9544f2cadf725
- TLSH T10721572B72719426093B9A34A0D4E0403B715D936BB6BC19FAED02444F87D4C96B4BDC
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.payload/Components/Utilities/Common.cs
- SHA256 a618e3044e42648d5119a10bb2e1156abffb91650006df739444044a98c1e3ef
- MD5 ce76ed842b5c15a8bd528d987ef412ef
- SHA1 cad12144f7f0b4f16b2541d76146c03673e42237
- SHA512 45b7a0d394257746993ca8c656618fa50c424ccd092ae76abbb1ba56957a1569609f74df537dad338f0f3ccc793949b3a2fa8133df40c020aff63ae52ea4b19b
- SSDEEP 96:Jj4YrP8MKV7BzvhyZ+pICw9aqLAWC+O+K/G94ancYFBK5691aA4Crsl+7PSqkO6o:iNh8/CwQqMWe+Kehc8BK56b05ySqjRY+
- TLSH T15DA1FFA97CA795284A232236AB5FA81063369353239E9CA5FE4C4614DF0042C5FF8A9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Utilities/SaveData.cs
- SHA256 5a7e01c45e907cab108b47b629af5ea0f394e40c487f1a0ef9178840f2df0724
- MD5 1a4f6522c500af633106459892d298b2
- SHA1 c307d66b76b319d1d920bff1bdc5e620dea4f37e
- SHA512 ad6014d8459bfe0e9a80a085d3e4240f65da390f90e7e2561e18debd0143f1987ee98ee8739d9fec4b801145e10ce541de27ca322964146be2408be1b8f3c3e5
- SSDEEP 96:Jj4YzvzzP26VsNOSc+w1Ow9/MS9+z1JvCiS9+wl1Dy8kqiS9+X1GICyS9QzQfqCw:i2rqGsMSk2S6JCiSDHHpiS6hSoEqCVOp
- TLSH T120C10F1A1D93464B0A832632FFD689016326A23707BE7C94BDCDE0299F0790D5D787EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Utilities/Syscalls.cs
- SHA256 d2aba2abe3d98a3e282b68758f2d6e5fc8153d021c5aeb71369dedefcff8d71f
- MD5 526480cee6add39a822a349d464e938d
- SHA1 084accc41c12c047b80464bb675055daceb3d3c7
- SHA512 a0499680921f0a30432e47459e7b3e6ba8a3f00ca3b66261abfe9a558ed9c313131c344dfda76def2c4491e43d5aba99396c4e3d48971a8fcac13bbf1548c66a
- SSDEEP 96:JjNPMMJKVvmvVmFsDqX+7W/iF951BjBX9NeNoTyKDPi8N9s5N99G6uEUyL:E9Ok+7WqF1NRGa+KDPiWKz8yL
- TLSH T1A6B10F4BADBF5A1085E7242EBF4B12032A7D51231395CD30B93CC608EF499759A79B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Components/Webcam/ImageCapture.cs
- SHA256 556726cc41010375b6c093f188e8afd78b0eb9da897c961b5a1af7848dc238a9
- MD5 8840f486490b6da5dc05c85ba8b79ad2
- SHA1 ef3ab502cf1fd1dc5631b410728bffdbef6e15fa
- SHA512 a6372e41fa7a2baab55a3dcdba33a2b83c307154e92db38f4f8da1fd5bbb5307103a43e63eb6e0454f1f3f48ef7ad282e41c1170a1ccad87cb01fec921c51c7b
- TLSH T13A21B1243DB39A47089325253F6F46884BB1EA3B0BDACD447D9C9128CF40D085BB6F9C
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.payload/Program.cs
- SHA256 42d844de072162ac88e8843201624e43c15fccdfa95c1601c6ba80d7eb834a21
- MD5 b6040337ce2def254559ad73eb0826fd
- SHA1 5cc108d7b33301294cb97ff1eddf778cb90294b2
- SHA512 b33e5d7b0828accef3dbcf4563cb3dec3c3520f484324f142138ba903fbd5757b11a28b8dcdc788c05dc8fb6ab4902833cb9f1fee1b475151c73de4b6ad1f25e
- SSDEEP 768:aZkAw0Jkg9xK6sfu7Ai/ZD0O3JDQ9iN3MoT:3Aw0Jkg9xK6sfu7Ai/ZD0O3JDQ9iN3Mm
- TLSH T159C2301D7836294D2472E1A1BF55465FFF85D82316EB6210BEEC72281F32D530EA89D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Umbral-Stealer-main/Umbral.payload/Properties/AssemblyInfo.cs
- SHA256 6cdde89736e6828143e0dd2a25c910c540ea86bec2e83580430e9366e1179fb8
- MD5 6c0383831015613a350a16dbbfa4df35
- SHA1 cf88750c4ac582355682fa846b601cd12f560b34
- SHA512 a5a301732c3b2db91abf282ed74503c9056c170dc6b98cc1708c44020adea5639ca4070addcd476802ce41f347fe299f35dd3148876cd186d860db5f2750cad7
- TLSH T1A3319B2D6741E33E8F110193AEAB76C4837D732896F60C4934B8B453E201B3843A9AB7
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.payload/Settings.cs
- SHA256 1055303a26192c143fbacd7699f81738a3c415bd477c8a486d1b4b6b99c75a9e
- MD5 08f85bd3fc424b06932d93796e82a44a
- SHA1 c78463796e362eebe33df6c62be5aae56e949f2a
- SHA512 ee84feb7925ccdd74e17c100d98e7f96a728cf550685de88aefcac0c94d2e58f9142fbd969f6ce590da6a323be0da90dd55d917aeea8ecce7137b57a4e068f51
- TLSH T1C2718067BE63CC1889B18033CEBCC0529BB04A6B8B6EC8647E9E85105F44D5613FDBD5
- MD5 SHA1 SHA512 TLSH
Umbral-Stealer-main/Umbral.payload/Umbral.payload.csproj
- SHA256 95903a72e70b0d0ec72170b210d734225ae47cee8e3194d718e6435c3fd0d1f6
- MD5 d7dabe0974f0f2ff0ef92f6fbb797580
- SHA1 d267cfb4cf909aecb2faef9edf83c01a951c5326
- SHA512 379fda438bd353b14d25217122e2780fa61a3c47b195ea1c5aeb686a6c08cf099adcb71a7b6807b04216e81eb5cd6d007a96b3351a03ee17a064c488c3bd2e22
- SSDEEP 96:7YWnpu5fOju8c9x6a46VVHME5vsHbV5uSBCODcAeDtbfnzGW6Gb1YeH5jdeGz8Fm:7Wf+uXUfcAeDtbfnzGW6GbvD2m
- TLSH T173C17C34C6EC6EA803F0107697AAED0BDEE8B3D35C510455775F828F9F72A081153A67
- MD5 SHA1 SHA512 SSDEEP TLSH