← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Hostname alsgp0.fds.api.xiaomi.com and M$ signed and secured
WHITE dorkingbeauty1 2022-08-12 Modified: 2022-09-11
2593
IOCs
HIGH VOLUME
starfield tech certs still in use despite apple revoking a long time ago yet microsoft secure boot resigning via bootliader ??? maybe
aptruntime datadecrypted sslwindows ntcdn cachepcapzxxzakezaugustunitedosintflagservice nameservicefile sha256https://ocsp.starfieldtech.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSLwBase64Apple revoked Starfield tech certs maybe 2 or more years ago
Indicators of Compromise (50 / 2593 total)
All URL domain hostname FileHash-SHA256 email FileHash-MD5 CVE FileHash-SHA1
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 00fbaedc953d4723ea2a6f3c8fe0b406c8361d1a — 2022-08-12
FileHash-SHA1 06308051527e3dd1df6089d66bb1f28cf8f773b6 — 2022-08-12
FileHash-SHA1 08afdc36927b6c4e03c3088e5c9c812cc4215ede — 2022-08-12
FileHash-SHA1 10c148badd2e671c0697593dc9e76d360b9c88c7 — 2022-08-12
FileHash-SHA1 1125c45d285c360542027d7554a5c442288974de — 2022-08-12
FileHash-SHA1 12ea1f50a641821503f02217d6246f852117a3d8 — 2022-08-12
FileHash-SHA1 16acf2b70417d44d1fde54f071624069053628fc — 2022-08-12
FileHash-SHA1 2b11176aca50c148f1cc6b2ff59afbca5e3bd422 — 2022-08-12
FileHash-SHA1 2e0747e891a877ec51e38d81b20370d836e8943b — 2022-08-12
FileHash-SHA1 3c96c993500690d1a77873cd62bc639b3a10653f — 2022-08-12
FileHash-SHA1 42c5fcc87d2e642efdeced1a945a2148ec17719f — 2022-08-12
FileHash-SHA1 4c93959989da5e96a0fa856a8fc859e760961f81 — 2022-08-12
FileHash-SHA1 4ea1775bbdee00e343246a62c8c42284f4269693 — 2022-08-12
FileHash-SHA1 5429bc02745d06870cd3c18568f23a96e893221d — 2022-08-12
FileHash-SHA1 5862f7180377f1ce428c1bcae8d3af42521abb03 — 2022-08-12
FileHash-SHA1 5b53a5743112a7c21d7d972eda0251c56b606b91 — 2022-08-12
FileHash-SHA1 712e11b0cd01c1c0f2a22c20eed0118eb6f47f36 — 2022-08-12
FileHash-SHA1 78e96731543faaef9586b660954e0419baf4bb47 — 2022-08-12
FileHash-SHA1 7d5e97351631bc2ccda4458127acaa9e1408181c — 2022-08-12
FileHash-SHA1 80016830984ac39f7603f3c34f4ce39734dc8f85 — 2022-08-12
FileHash-SHA1 8133a58236e28bcc01cfa193c80292efced8bbb6 — 2022-08-12
FileHash-SHA1 836bfdfa089d87265e6f6f8c15802f2bf8dafd11 — 2022-08-12
FileHash-SHA1 865e186f6cf0da71e4909031a7099e2c2b9b7de0 — 2022-08-12
FileHash-SHA1 87bf51c959ef41e929d823f692ef355ee0f66834 — 2022-08-12
FileHash-SHA1 8922519881ab06c2a0b8dd1613add53b54a8286a — 2022-08-12
FileHash-SHA1 91220d29c8e6b3077d997ae86c5b523c54449d8b — 2022-08-12
FileHash-SHA1 934e3ace2c81b51f5c804143c2e1a124a6a9b77d — 2022-08-12
FileHash-SHA1 981df6025e7ad88b38a9689372d08f8d7a7afdfd — 2022-08-12
FileHash-SHA1 9ef43f3c7cee694f1741373d35b97b198db598b5 — 2022-08-12
FileHash-SHA1 ac8f660d61fabff30337d1c5dcff8725073c8a75 — 2022-08-12
FileHash-SHA1 b19c6a7a2c352178c883fa69cc1b8c5ff163d431 — 2022-08-12
FileHash-SHA1 b9bdd258461537672b6eeb98424c67160b98e118 — 2022-08-12
FileHash-SHA1 c184893a0428ccc89c358731eb968a0b44e8d05c — 2022-08-12
FileHash-SHA1 c215873941a638a112356cbc8ecb70008bddeac8 — 2022-08-12
FileHash-SHA1 c27dc3a599641a8332cfec6e70749916d1b40068 — 2022-08-12
FileHash-SHA1 c4915255fd4340b47d3814ba06c78135f730aaa0 — 2022-08-12
FileHash-SHA1 cd508c985c44adc0a699ffb2157e4dc4c4cc5800 — 2022-08-12
FileHash-SHA1 cf88cef0662e46dce2222c612b97c5ac98b14b53 — 2022-08-12
FileHash-SHA1 d28bb033e94215a5606185d6a3ece91dcecd532f — 2022-08-12
FileHash-SHA1 d53e34d98f10a0f13077a1606ab8a7fa956eb628 — 2022-08-12
FileHash-SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb — 2022-08-12
FileHash-SHA1 dc294fd521e26721ae611a96ff2376734bec702c — 2022-08-12
FileHash-SHA1 e4f30e49120657d37267c0162fd4a08934800c69 — 2022-08-12
FileHash-SHA1 e5dc219641146d1839557973f348037fa589fd18 — 2022-08-12
FileHash-SHA1 e953525e0f7ba60e5edfdc3cdf0e9e1352e558c8 — 2022-08-12
FileHash-SHA1 ea3df6aa71dda3b73d9c4adfc0a5bbda745d9625 — 2022-08-12
FileHash-SHA1 ecc3c2c4c35c3045b42972df2585a0786d7c416f — 2022-08-12
FileHash-SHA1 f64cb36fa0e59c91b3d6201c32444373efaee6a3 — 2022-08-12
FileHash-SHA1 f9663853ed5046b478c28833b2bf7d5b026600e7 — 2022-08-12
FileHash-SHA1 fdff1cd5df314ecf7a6accc91f757ae658249370 — 2022-08-12
References (6)
↗ https://hybrid-analysis.com/sample/df5b006ffcc47f2d09204068cf9be4fabcd2e978b7537ed7d5081e2283ac643b/62f5832ba20d9e610e54bfda ↗ ** Starfieldtech certs revoked by Apple some time ago but still very much in play!! ↗ http://ocsp.starfieldtech.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1+30c7dH4b0W1Ws3NcQwg6piOcCAzkUhA== No Expiration 0 URL http://ocsp.starfieldtech.com/MEIwQDA+MDwwOjAJBgUrDgMCGgUABBQUwPiEZQ6/sVZNPaFToNfxx8ZwqAQUfAwyH6fZMH/EfWijYqihzqsHWycCAQc= ↗ http://ocsp.starfieldtech.com/MEowSDBGMEQwQjAJBgUrDgMCGgUABBT1ZqtwV0O1KcYi0gdzcFkHM+uArAQUJUWBaFAmOD07LSy+zWrZtj2zZmMCCQC5kPTs88esXw== ↗ https://ocsp.starfieldtech.com/MEQwQjBAMD4wPDAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1+30c7dH4b0W1Ws3NcQwg6piOcCAzkUhA== ↗ BAse 64 encoded