c11525ae7776cbc8be18d014e5d54107
- SHA256 1e88af7a351ca27eaa87253d1537b8a4d2ead0e03f9d33f2f4edcf00c00e0cb6
Overview
overview
7Static
static
3QQLive3.5.exe
windows7-x64
7QQLive3.5.exe
windows10-2004-x64
7$PLUGINSDI...ne.dll
windows7-x64
3$PLUGINSDI...ne.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3ADManage.dll
windows7-x64
3ADManage.dll
windows10-2004-x64
3BalloonTip.dll
windows7-x64
1BalloonTip.dll
windows10-2004-x64
1COMToolKit.dll
windows7-x64
1COMToolKit.dll
windows10-2004-x64
1CacheFile/...ds.htm
windows7-x64
1CacheFile/...ds.htm
windows10-2004-x64
1CacheFile/ShowPay.htm
windows7-x64
1CacheFile/ShowPay.htm
windows10-2004-x64
1CacheFile/...ex.htm
windows7-x64
1CacheFile/...ex.htm
windows10-2004-x64
1ExceptCatch.dll
windows7-x64
3ExceptCatch.dll
windows10-2004-x64
3GdiPlus.dll
windows7-x64
3GdiPlus.dll
windows10-2004-x64
3LiveAPI.dll
windows7-x64
1LiveAPI.dll
windows10-2004-x64
1LiveStream.dll
windows7-x64
1LiveStream.dll
windows10-2004-x64
MagicFlash.exe
windows7-x64
1MagicFlash.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
QQLive3.5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
QQLive3.5.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/CmdLine.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/CmdLine.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/procdll.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/procdll.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
ADManage.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
ADManage.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
BalloonTip.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
BalloonTip.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
COMToolKit.dll
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
COMToolKit.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
CacheFile/ScrWords.htm
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
CacheFile/ScrWords.htm
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
CacheFile/ShowPay.htm
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
CacheFile/ShowPay.htm
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
CacheFile/index_loge_normal/index.htm
Resource
win7-20240215-en
Behavioral task
behavioral22
Sample
CacheFile/index_loge_normal/index.htm
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
ExceptCatch.dll
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
ExceptCatch.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
GdiPlus.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
GdiPlus.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
LiveAPI.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
LiveAPI.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
LiveStream.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
LiveStream.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
MagicFlash.exe
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
MagicFlash.exe
Resource
win10v2004-20240226-en
Checks for missing Authenticode signature.
| resource |
|---|
| unpack002/$PLUGINSDIR/CmdLine.dll |
| unpack002/$PLUGINSDIR/InstallOptions.dll |
| unpack002/$PLUGINSDIR/KillProcDLL.dll |
| unpack002/$PLUGINSDIR/procdll.dll |
| unpack002/ADManage.dll |
| unpack002/BalloonTip.dll |
| unpack002/COMToolKit.dll |
| unpack002/ExceptCatch.dll |
| unpack002/LiveAPI.dll |
| unpack002/LiveStream.dll |
| unpack002/MagicFlash.exe |
| unpack002/MiniQQLive.exe |
| unpack002/P2PDownload.dll |
| unpack002/Picture.dll |
| unpack002/Proxy.dll |
| unpack002/QQLive.dll |
| unpack002/QQLive.exe |
| unpack002/QQLive.ocx |
| unpack002/QQLiveInstaller.dll |
| unpack002/QQLiveOneClick.exe |
| unpack002/QQLivePlayer.exe |
| unpack002/QQLiveSrcDec.dll |
| unpack002/QQLiveUp.exe |
| unpack002/SetupShell.dll |
| unpack002/SoundCtrl.dll |
| unpack002/TNProxy.dll |
| unpack002/TVLoge.exe |
| unpack002/VCodec.dll |
| unpack002/VideoAdjust.dll |
| unpack002/VideoDsp.dll |
| unpack002/mfc42.dll |
| unpack002/miniqqlivesetup.exe |
| unpack003/$PLUGINSDIR/CmdLine.dll |
| unpack003/$PLUGINSDIR/InstallOptions.dll |
| unpack003/$PLUGINSDIR/KillProcDLL.dll |
| unpack003/MiniQQLive.exe |
| unpack003/MiniQQLiveUninstall.exe |
| unpack004/$PLUGINSDIR/procdll.dll |
| unpack002/msvcp60.dll |
| unpack002/msvcr71.dll |
| unpack002/msvcrt.dll |
| unpack002/multiLogin.dll |
| unpack002/riched20.dll |
| unpack002/vqqsdl.dll |
| resource | yara_rule |
|---|---|
| static1/unpack001/QQLive3.5.exe | nsis_installer_1 |
| static1/unpack002/miniqqlivesetup.exe | nsis_installer_1 |
| static1/unpack003/MiniQQLiveUninstall.exe | nsis_installer_1 |
NSIS installer
Mar 11, 2024
count=1, id=95, version=2179,
count=1, id=28, version=9178,
count=2, id=93, version=2067,
count=10, id=93, version=2179,
count=5, id=25, version=9210,
count=155, id=1, productName=Unmarked objects,
count=9, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=10, version=8047,
count=2, id=4, version=8047,
count=18, id=1, productName=Unmarked objects,
count=5, id=19, version=8034,
count=1, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=63, id=1, productName=Unmarked objects,
count=11, id=93, version=2179,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=1, id=10, version=8047,
count=3, id=14, version=7299,
count=12, id=1, productName=Unmarked objects,
count=5, id=19, version=8034,
count=1, id=11, version=8966,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=1, id=10, version=8047,
count=3, id=14, version=7299,
count=10, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=1, id=11, version=8966,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=12, version=7291,
count=5, id=19, version=8022,
count=4, productName=Unmarked objects (old),
count=16, id=19, version=8034,
count=2, id=11, version=8047,
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=2, id=11, version=8569,
count=250, id=1, productName=Unmarked objects,
count=3, id=4, version=8569,
count=15, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=12, version=7291,
count=1, id=29, version=9037,
count=2, id=25, version=9043,
count=11, id=19, version=8022,
count=14, productName=Unmarked objects (old),
count=16, id=19, version=8034,
count=3, id=14, version=7299,
count=3, id=11, version=8047,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=466, id=1, productName=Unmarked objects,
count=8, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=19, version=8034,
count=1, id=11, version=8047,
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=113, id=1, productName=Unmarked objects,
count=4, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=12, version=7291,
count=4, id=19, version=8022,
count=6, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=2, id=11, version=8569,
count=277, id=1, productName=Unmarked objects,
count=3, id=4, version=8569,
count=1, id=10, version=8966,
count=7, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Mar 11, 2024
count=11, id=25, version=9210,
count=338, id=1, productName=Unmarked objects,
count=19, id=64, version=9210,
count=207, id=28, version=9178,
count=1, id=63, version=9210,
count=1, id=69, version=9111,
count=287, id=29, version=9178,
count=1, id=61, version=9210,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=12, version=7291,
count=10, id=19, version=8022,
count=4, productName=Unmarked objects (old),
count=14, id=19, version=8034,
count=3, id=14, version=7299,
count=3, id=11, version=8047,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=240, id=1, productName=Unmarked objects,
count=6, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=24, id=11, version=8047,
count=27, id=14, version=7299,
count=147, id=10, version=8047,
count=5, productName=Unmarked objects (old),
count=10, id=19, version=8022,
count=170, id=1, productName=Unmarked objects,
count=15, id=19, version=8034,
count=10, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=10, version=8966,
count=34, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=11, version=8798,
count=12, id=19, version=8022,
count=5, productName=Unmarked objects (old),
count=8, id=19, version=8034,
count=3, id=11, version=8569,
count=2, id=4, version=8569,
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=12, id=10, version=8047,
count=3, id=4, version=8047,
count=225, id=1, productName=Unmarked objects,
count=7, id=10, version=8966,
count=8, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=12, version=7291,
count=9, id=19, version=8022,
count=10, productName=Unmarked objects (old),
count=3, id=14, version=7299,
count=11, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=11, version=8569,
count=2, id=4, version=8569,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=520, id=1, productName=Unmarked objects,
count=21, id=19, version=8034,
count=18, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=12, version=7291,
count=11, id=11, version=8047,
count=21, id=14, version=7299,
count=103, id=10, version=8047,
count=2, id=4, version=8449,
count=19, productName=Unmarked objects (old),
count=8, id=19, version=8022,
count=189, id=1, productName=Unmarked objects,
count=13, id=19, version=8034,
count=8, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=96, version=2190,
count=2, id=25, version=9210,
count=2, id=93, productName=VS2003 (.NET) build 3077, version=3077,
count=3, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=3, id=95, version=2179,
count=2, id=93, version=2067,
count=15, id=93, version=2179,
count=209, id=1, productName=Unmarked objects,
count=10, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=10, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=12, version=7291,
count=3, id=19, version=8022,
count=12, productName=Unmarked objects (old),
count=16, id=19, version=8034,
count=1, id=11, version=8047,
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=11, version=8569,
count=230, id=1, productName=Unmarked objects,
count=3, id=4, version=8569,
count=12, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=29, id=14, version=7299,
count=13, id=11, version=8047,
count=6, id=10, version=8047,
count=178, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=4, productName=Unmarked objects (old),
count=8, id=19, version=8022,
count=9, id=19, version=8034,
count=144, id=1, productName=Unmarked objects,
count=86, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=29, version=9037,
count=2, id=25, version=9043,
count=15, id=19, version=8022,
count=18, id=19, version=8034,
count=3, id=11, version=8569,
count=2, id=4, version=8569,
count=24, productName=Unmarked objects (old),
count=6, id=12, version=7291,
count=3, id=11, version=8047,
count=3, id=14, version=7299,
count=11, id=10, version=8047,
count=4, id=4, version=8047,
count=972, id=1, productName=Unmarked objects,
count=11, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=11, id=10, version=8966,
count=81, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=12, version=7291,
count=12, id=19, version=8022,
count=24, productName=Unmarked objects (old),
count=2, id=4, version=8569,
count=18, id=19, version=8034,
count=3, id=11, version=8047,
count=4, id=14, version=7299,
count=4, id=10, version=8047,
count=5, id=4, version=8047,
count=866, id=1, productName=Unmarked objects,
count=4, id=11, version=8569,
count=58, id=11, version=8966,
count=10, id=10, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=5, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=11, version=8047,
count=24, id=14, version=7299,
count=82, id=10, version=8047,
count=11, productName=Unmarked objects (old),
count=10, id=19, version=8022,
count=9, id=19, version=8034,
count=115, id=1, productName=Unmarked objects,
count=3, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=8, id=19, version=8034,
count=2, id=14, version=7299,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=11, version=8569,
count=46, id=1, productName=Unmarked objects,
count=3, id=4, version=8569,
count=2, id=11, version=8966,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=12, version=7291,
count=8, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=5, id=19, version=8022,
count=12, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=11, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=693, id=1, productName=Unmarked objects,
count=10, id=10, version=8966,
count=33, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=36, id=14, version=7299,
count=118, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=4, productName=Unmarked objects (old),
count=4, id=19, version=8022,
count=134, id=1, productName=Unmarked objects,
count=13, id=19, version=8034,
count=1, id=28, version=9178,
count=67, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=19, version=8022,
count=14, productName=Unmarked objects (old),
count=10, id=19, version=8034,
count=3, id=14, version=7299,
count=1, id=11, version=8047,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=293, id=1, productName=Unmarked objects,
count=15, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=12, version=7291,
count=5, id=19, version=8022,
count=5, productName=Unmarked objects (old),
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=11, version=8569,
count=2, id=4, version=8569,
count=449, id=1, productName=Unmarked objects,
count=19, id=19, version=8034,
count=21, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=12, version=7291,
count=9, id=19, version=8022,
count=4, productName=Unmarked objects (old),
count=10, id=19, version=8034,
count=3, id=14, version=7299,
count=3, id=11, version=8047,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=11, version=8569,
count=3, id=4, version=8569,
count=140, id=1, productName=Unmarked objects,
count=5, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=5, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=23, id=11, version=8047,
count=28, id=14, version=7299,
count=133, id=10, version=8047,
count=17, id=10, version=8966,
count=2, id=93, version=2179,
count=5, productName=Unmarked objects (old),
count=13, id=19, version=8034,
count=137, id=1, productName=Unmarked objects,
count=61, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=11, version=8798,
count=6, id=12, version=7291,
count=2, id=25, version=9043,
count=20, id=19, version=8022,
count=33, productName=Unmarked objects (old),
count=18, id=19, version=8034,
count=3, id=11, version=8047,
count=4, id=14, version=7299,
count=11, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=11, version=8569,
count=2, id=4, version=8569,
count=880, id=1, productName=Unmarked objects,
count=7, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=57, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=42, version=8803,
count=4, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=1, id=42, version=9030,
count=81, productName=Unmarked objects (old),
count=3, id=19, version=8034,
count=25, id=1, productName=Unmarked objects,
count=2, id=48, version=9044,
count=24, id=49, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=12, version=7291,
count=5, id=19, version=8022,
count=5, productName=Unmarked objects (old),
count=16, id=19, version=8034,
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=2, id=11, version=8569,
count=356, id=1, productName=Unmarked objects,
count=3, id=4, version=8569,
count=8, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=12, version=7291,
count=2, id=14, version=7299,
count=3, id=11, version=8047,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=49, version=9044,
count=2, id=25, version=9210,
count=4, productName=Unmarked objects (old),
count=10, id=19, version=8022,
count=104, id=1, productName=Unmarked objects,
count=11, id=19, version=8034,
count=5, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=218, productName=Unmarked objects (old),
count=6, id=19, version=8034,
count=5, id=14, version=7299,
count=6, id=10, version=8569,
count=659, id=1, productName=Unmarked objects,
count=234, id=11, version=8569,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=4, id=4, version=8569,
Unsigned PE
Checks for missing Authenticode signature.
NSIS installer
count=1, id=95, version=2179,
count=1, id=28, version=9178,
count=2, id=93, version=2067,
count=10, id=93, version=2179,
count=5, id=25, version=9210,
count=155, id=1, productName=Unmarked objects,
count=9, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=10, version=8047,
count=2, id=4, version=8047,
count=18, id=1, productName=Unmarked objects,
count=5, id=19, version=8034,
count=1, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=63, id=1, productName=Unmarked objects,
count=11, id=93, version=2179,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=1, id=10, version=8047,
count=3, id=14, version=7299,
count=12, id=1, productName=Unmarked objects,
count=5, id=19, version=8034,
count=1, id=11, version=8966,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=12, version=7291,
count=9, id=19, version=8022,
count=10, productName=Unmarked objects (old),
count=3, id=14, version=7299,
count=11, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=11, version=8569,
count=2, id=4, version=8569,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=520, id=1, productName=Unmarked objects,
count=21, id=19, version=8034,
count=18, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
NSIS installer
count=1, id=95, version=2179,
count=1, id=28, version=9178,
count=2, id=93, version=2067,
count=10, id=93, version=2179,
count=5, id=25, version=9210,
count=155, id=1, productName=Unmarked objects,
count=9, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=12, version=7291,
count=1, id=10, version=8047,
count=3, id=14, version=7299,
count=10, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=1, id=11, version=8966,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=19, version=8034,
count=2, id=14, version=7299,
count=87, id=1, productName=Unmarked objects,
count=18, id=11, version=8047,
count=36, id=10, version=8047,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=4, id=4, version=8047,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=25, version=9210,
count=155, id=1, productName=Unmarked objects,
count=23, id=96, version=3052,
count=77, id=15, version=3052,
count=527, id=95, version=3052,
count=1, id=92, version=3052,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, version=3052,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=19, version=8034,
count=141, id=1, productName=Unmarked objects,
count=19, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=67, id=14, version=7299,
count=501, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=12, version=7291,
count=3, id=19, version=8022,
count=1, productName=Unmarked objects (old),
count=16, id=19, version=8034,
count=1, id=11, version=8047,
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=2, id=11, version=8569,
count=2, id=4, version=8569,
count=235, id=1, productName=Unmarked objects,
count=17, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=15, version=2179,
count=2, id=77, version=2155,
count=9, id=93, version=2179,
count=289, id=1, productName=Unmarked objects,
count=3, id=95, version=2190,
count=1, id=92, version=2179,
count=63, id=96, version=2190,
count=1, id=94, version=2179,
count=1, id=90, version=2179,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=11, version=8047,
count=4, id=4, version=8047,
count=8, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=9, productName=Unmarked objects (old),
count=10, id=19, version=8022,
count=9, id=19, version=8034,
count=215, id=1, productName=Unmarked objects,
count=89, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,