Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
4Static
static
4Active Dir....4.pdf
windows7-x64
1Active Dir....4.pdf
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1PingCastle....0.pdf
windows7-x64
1PingCastle....0.pdf
windows10-2004-x64
1PingCastle.exe
windows7-x64
1PingCastle.exe
windows10-2004-x64
1PingCastle.exe.xml
windows7-x64
1PingCastle.exe.xml
windows10-2004-x64
1PingCastle...er.exe
windows7-x64
1PingCastle...er.exe
windows10-2004-x64
1PingCastle...xe.xml
windows7-x64
1PingCastle...xe.xml
windows10-2004-x64
1PingCastleCloud.exe
windows7-x64
1PingCastleCloud.exe
windows10-2004-x64
1license.rtf
windows7-x64
4license.rtf
windows10-2004-x64
1Behavioral task
behavioral1
Sample
Active Directory Security Self Assessment v1.4.pdf
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Active Directory Security Self Assessment v1.4.pdf
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Newtonsoft.Json.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
PingCastle v2.11.0.pdf
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
PingCastle v2.11.0.pdf
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
PingCastle.exe
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
PingCastle.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
PingCastle.exe.xml
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
PingCastle.exe.xml
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
PingCastleAutoUpdater.exe
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
PingCastleAutoUpdater.exe
Resource
win10v2004-20230221-en
Behavioral task
behavioral13
Sample
PingCastleAutoUpdater.exe.xml
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
PingCastleAutoUpdater.exe.xml
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
PingCastleCloud.exe
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
PingCastleCloud.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
license.rtf
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
license.rtf
Resource
win10v2004-20230221-en
Target
PingCastle_2.11.0.1.zip
Size
4.1MB
MD5
21c4b6cbf98b7dea3cb7543dd5172801
SHA1
786f56c1c06b87ed7653472918a3ebfbd7d21424
SHA256
235175349388872210b0d1d5e178bd94a850f5180d63e5c7ccd59101616da5d5
SHA512
a3a5f79026021cd57cf24a570c2dc0517beb6aba58013c76418f1ed090503f58d4763dc62410aab3c3e32f516db57a02d317974597d44c6ee35a288db8c70d9e
SSDEEP
98304:oX309Oqyle86nzJY5CtRFaEWfwOdQCqAJMYxbQXR6CQjc2sH6bXKUk:oH09OJekugEWwrCpHxbpCQjTsabvk
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=Ping Castle SAS,O=Ping Castle SAS,ST=Île-de-France,C=FR
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=Ping Castle SAS,O=Ping Castle SAS,ST=Île-de-France,C=FR
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ