Cert Graveyard Report

Certificate Signer: Tongliao Chuangfa Education Consulting Service Co., Ltd.
Certificate Serial: D2 2F E8 9B 21 1B DB 42 E2 70 56 9F D2 4D A3 0A

All Cert Graveyard entries are considered malware. Other files by the same certificate serial number should be considered suspect.

Malware Family:

Golden Gh0st Loader

SHA256 Hash:

4ca3a0088c63497d7fce4a305c3fd98646badb2278cbca85571b0831f915adde

Certificate Serial:

D2 2F E8 9B 21 1B DB 42 E2 70 56 9F D2 4D A3 0A

Certificate Signer:

Tongliao Chuangfa Education Consulting Service Co., Ltd.

Certificate Issuer:

Sectigo Public Code Signing CA EV R36

Valid From:

2026-07-15 00:00:00

Valid To:

2027-07-15 23:59:59

Reported:

2026-09-01 11:13:52 UTC