dcrat (1).rar
- SHA256 8bc4d422624113b2af547b64fa7df842b821f189ca4d7bad6e75767fec4a9e59
Overview
overview
8Static
static
8123.bat
windows7-x64
1123.bat
windows10-2004-x64
7DCRat.exe
windows7-x64
1DCRat.exe
windows10-2004-x64
7data/7zxa.dll
windows7-x64
3data/7zxa.dll
windows10-2004-x64
3data/DCRAC.exe
windows7-x64
1data/DCRAC.exe
windows10-2004-x64
1data/DCRCC.exe
windows7-x64
3data/DCRCC.exe
windows10-2004-x64
3data/Default.exe
windows7-x64
1data/Default.exe
windows10-2004-x64
1data/NCC2.dll
windows7-x64
1data/NCC2.dll
windows10-2004-x64
1data/NCC3.dll
windows7-x64
3data/NCC3.dll
windows10-2004-x64
3data/NCCheck.dll
windows7-x64
1data/NCCheck.dll
windows10-2004-x64
1data/Rar.exe
windows7-x64
3data/Rar.exe
windows10-2004-x64
3data/RarExt.dll
windows7-x64
1data/RarExt.dll
windows10-2004-x64
3data/RarExt64.dll
windows7-x64
1data/RarExt64.dll
windows10-2004-x64
3data/WinCon.exe
windows7-x64
1data/WinCon.exe
windows10-2004-x64
1data/Zip.exe
windows7-x64
1data/Zip.exe
windows10-2004-x64
1data/dnlib.dll
windows7-x64
1data/dnlib.dll
windows10-2004-x64
1data/dotNE...le.exe
windows7-x64
7data/dotNE...le.exe
windows10-2004-x64
7Behavioral task
behavioral1
Sample
123.bat
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
123.bat
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
DCRat.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
DCRat.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
data/7zxa.dll
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
data/7zxa.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
data/DCRAC.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
data/DCRAC.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
data/DCRCC.exe
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
data/DCRCC.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
data/Default.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
data/Default.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
data/NCC2.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
data/NCC2.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
data/NCC3.dll
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
data/NCC3.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
data/NCCheck.dll
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
data/NCCheck.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
data/Rar.exe
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
data/Rar.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
data/RarExt.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
data/RarExt.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
data/RarExt64.dll
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
data/RarExt64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
data/WinCon.exe
Resource
win7-20240220-en
Behavioral task
behavioral26
Sample
data/WinCon.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
data/Zip.exe
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
data/Zip.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
data/dnlib.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
data/dnlib.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
data/dotNET_Reactor.Console.exe
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
data/dotNET_Reactor.Console.exe
Resource
win10v2004-20240508-en
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
| resource | yara_rule |
|---|---|
| static1/unpack001/php/ext/php_fileinfo.dll | patched_upx |
| resource | yara_rule |
|---|---|
| static1/unpack001/data/upx.exe | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/DCRat.exe |
| unpack001/data/7zxa.dll |
| unpack001/data/DCRAC.exe |
| unpack001/data/DCRCC.exe |
| unpack001/data/Default.SFX |
| unpack001/data/NCC2.dll |
| unpack001/data/NCCheck.dll |
| unpack001/data/WinCon.SFX |
| unpack001/data/Zip.SFX |
| unpack001/data/dnlib.dll |
| unpack001/data/dotNET_Reactor.Console.exe |
| unpack001/data/dotNET_Reactor.exe |
| unpack001/data/upx.exe |
| unpack001/php/deplister.exe |
| unpack001/php/ext/php_bz2.dll |
| unpack001/php/ext/php_com_dotnet.dll |
| unpack001/php/ext/php_curl.dll |
| unpack001/php/ext/php_dba.dll |
| unpack001/php/ext/php_dl_test.dll |
| unpack001/php/ext/php_enchant.dll |
| unpack001/php/ext/php_exif.dll |
| unpack001/php/ext/php_ffi.dll |
| unpack001/php/ext/php_fileinfo.dll |
| unpack001/php/ext/php_ftp.dll |
| unpack001/php/ext/php_gd.dll |
| unpack001/php/ext/php_gettext.dll |
| unpack001/php/ext/php_gmp.dll |
| unpack001/php/ext/php_imap.dll |
| unpack001/php/ext/php_intl.dll |
| unpack001/php/ext/php_ldap.dll |
| unpack001/php/ext/php_mbstring.dll |
| unpack001/php/ext/php_mysqli.dll |
| unpack001/php/ext/php_oci8_19.dll |
| unpack001/php/ext/php_odbc.dll |
| unpack001/php/ext/php_opcache.dll |
| unpack001/php/ext/php_openssl.dll |
| unpack001/php/ext/php_pdo_firebird.dll |
| unpack001/php/ext/php_pdo_mysql.dll |
| unpack001/php/ext/php_pdo_oci.dll |
| unpack001/php/ext/php_pdo_odbc.dll |
| unpack001/php/ext/php_pdo_pgsql.dll |
| unpack001/php/ext/php_pdo_sqlite.dll |
| unpack001/php/ext/php_pgsql.dll |
| unpack001/php/ext/php_shmop.dll |
| unpack001/php/ext/php_snmp.dll |
| unpack001/php/ext/php_soap.dll |
| unpack001/php/ext/php_sockets.dll |
| unpack001/php/ext/php_sodium.dll |
| unpack001/php/ext/php_sqlite3.dll |
| unpack001/php/ext/php_sysvshm.dll |
| unpack001/php/ext/php_tidy.dll |
| unpack001/php/ext/php_xsl.dll |
| unpack001/php/ext/php_zend_test.dll |
| unpack001/php/ext/php_zip.dll |
| unpack001/php/extras/ssl/legacy.dll |
| unpack001/php/glib-2.dll |
| unpack001/php/gmodule-2.dll |
| unpack001/php/icudt71.dll |
| unpack001/php/icuin71.dll |
| unpack001/php/icuio71.dll |
| unpack001/php/icuuc71.dll |
| unpack001/php/lib/enchant/libenchant2_hunspell.dll |
| unpack001/php/libcrypto-3-x64.dll |
| unpack001/php/libenchant2.dll |
| unpack001/php/libpq.dll |
| unpack001/php/libsasl.dll |
| unpack001/php/libsodium.dll |
| unpack001/php/libsqlite3.dll |
| unpack001/php/libssh2.dll |
| unpack001/php/libssl-3-x64.dll |
| unpack001/php/nghttp2.dll |
| unpack001/php/php-cgi.exe |
| unpack001/php/php-win.exe |
| unpack001/php/php.exe |
| unpack001/php/php8.dll |
| unpack001/php/php8phpdbg.dll |
| unpack001/php/phpdbg.exe |
| unpack001/plugins/BSoDProtection/BSoDProtection.dclib |
| unpack001/plugins/BlockInputPlugin/BlockInputPlugin.dclib |
| unpack001/plugins/BuildInstallationTweaksPlugin/BuildInstallationTweaksPlugin.dclib |
| unpack001/plugins/ClipboardLogger/ClipboardLogger.dclib |
| unpack001/plugins/CrashLogger/CrashLogger.dclib |
| unpack001/plugins/DisableUAC/DisableUAC.dclib |
| unpack001/plugins/FileSearcher/FileSearcher.dclib |
| unpack001/plugins/HostsEditor/HostsEditor.dclib |
| unpack001/plugins/MessageOnStart/MessageOnStart.dclib |
| unpack001/plugins/MiscInfoGrabber/MiscInfoGrabber.dclib |
| unpack001/plugins/OBSGrabber/OBSGrabber.dclib |
| unpack001/plugins/ProcessKiller/ProcessKiller.dclib |
| unpack001/plugins/RegEditorPlugin/RegEditorPlugin.dclib |
| unpack001/plugins/RunOnce/RunOnce.dclib |
| unpack001/plugins/SimpleProcessWatchdog/SimpleProcessWatchdog.dclib |
| unpack001/plugins/SystemRestorePointsCleaner/SystemRestorePointsCleaner.dclib |
| unpack001/plugins/TestDCLIB/file.dclib |
| unpack001/plugins/USBSpread/USBSpread.dclib |
| unpack001/plugins/UserPingCounter/UserPingCounter.dclib |
| unpack001/plugins/VPNGrabber/VPNGrabber.dclib |
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=11, version=8047,
count=8, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=1, id=95, version=2190,
count=57, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=71, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=15, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=13, id=241, version=40116,
count=141, id=243, version=40116,
count=24, id=242, version=40116,
count=2, id=199, version=41118,
count=22, id=259, version=24123,
count=19, id=260, version=24123,
count=44, id=261, version=24123,
count=10, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=268, id=1, productName=Unmarked objects,
count=49, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=1, id=149, productName=VS2008 build 21022, version=21022,
count=13, id=131, productName=VS2008 build 21022, version=21022,
count=5, id=147, productName=VS2008 build 21022, version=21022,
count=48, id=1, productName=Unmarked objects,
count=3, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Mar 16, 2016
Mar 16, 2016
count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=152, version=20115,
count=7, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=87, id=1, productName=Unmarked objects,
count=26, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=34, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
Dec 1, 2020
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Dec 1, 2020
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
count=11, id=241, version=40116,
count=131, id=243, version=40116,
count=24, id=242, version=40116,
count=2, id=199, version=41118,
count=24, id=259, version=24123,
count=43, id=261, version=24123,
count=20, id=260, version=24123,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=174, id=1, productName=Unmarked objects,
count=72, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Dec 1, 2020
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Dec 1, 2020
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
count=11, id=241, version=40116,
count=138, id=243, version=40116,
count=24, id=242, version=40116,
count=6, id=199, version=41118,
count=25, id=259, version=24123,
count=17, id=260, version=24123,
count=36, id=261, version=24123,
count=6, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=243, id=1, productName=Unmarked objects,
count=60, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Dec 1, 2020
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Dec 1, 2020
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
count=7, id=241, version=40116,
count=138, id=243, version=40116,
count=13, id=242, version=40116,
count=6, id=199, version=41118,
count=8, id=259, version=24123,
count=20, id=260, version=24123,
count=35, id=261, version=24123,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=248, id=1, productName=Unmarked objects,
count=60, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Unsigned PE
Checks for missing Authenticode signature.
count=13, id=241, version=40116,
count=134, id=243, version=40116,
count=24, id=242, version=40116,
count=2, id=199, version=41118,
count=22, id=259, version=24123,
count=19, id=260, version=24123,
count=44, id=261, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=157, id=1, productName=Unmarked objects,
count=46, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Unsigned PE
Checks for missing Authenticode signature.
count=13, id=241, version=40116,
count=140, id=243, version=40116,
count=24, id=242, version=40116,
count=2, id=199, version=41118,
count=23, id=259, version=24123,
count=19, id=260, version=24123,
count=41, id=261, version=24123,
count=10, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=248, id=1, productName=Unmarked objects,
count=38, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Dec 2, 2020
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Dec 2, 2020
CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE
CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
count=16, id=241, version=40116,
count=148, id=243, version=40116,
count=25, id=242, version=40116,
count=7, id=199, version=41118,
count=26, id=259, version=24123,
count=103, id=261, version=24123,
count=21, id=260, version=24123,
count=11, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=486, id=1, productName=Unmarked objects,
count=152, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=259, version=30795,
count=138, id=261, version=30795,
count=10, id=260, version=30795,
count=39, id=261, version=30034,
count=16, id=260, version=30034,
count=9, id=259, version=30034,
count=5, id=257, version=30795,
count=90, id=1, productName=Unmarked objects,
count=1, id=260, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=7, id=260, productName=VS2019 v16.1.2 build 27702, version=27702,
count=3, id=257, version=30151,
count=117, id=1, productName=Unmarked objects,
count=2, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=260, version=30795,
count=10, id=257, version=30795,
count=3, id=257, version=30151,
count=238, id=1, productName=Unmarked objects,
count=12, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=7, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30146,
count=2, id=257, version=30145,
count=14, id=257, version=30795,
count=4, id=257, version=30147,
count=119, id=260, version=30146,
count=3, id=257, version=30151,
count=577, id=1, productName=Unmarked objects,
count=4, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=7, id=253, version=28518,
count=13, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30795,
count=2, id=260, productName=VS2019 v16.0.0 build 27508, version=27508,
count=3, id=257, version=30151,
count=189, id=1, productName=Unmarked objects,
count=19, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=10, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30795,
count=3, id=257, version=30151,
count=56, id=1, productName=Unmarked objects,
count=1, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=10, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30795,
count=2, id=257, productName=VS2019 v16.5.1 build 28611, version=28611,
count=3, id=257, version=30151,
count=83, id=1, productName=Unmarked objects,
count=1, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30795,
count=3, id=257, version=30151,
count=121, id=1, productName=Unmarked objects,
count=1, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=4, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=1, id=259, productName=VS2019 v16.11.6 build 30137, version=30137,
count=3, id=257, version=30151,
count=129, id=1, productName=Unmarked objects,
count=6, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Patched UPX-packed file
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=1, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=3, id=257, version=30151,
count=161, id=1, productName=Unmarked objects,
count=20, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=4, id=257, version=30795,
count=4, id=257, version=30147,
count=3, id=257, version=30151,
count=157, id=1, productName=Unmarked objects,
count=2, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=4, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30795,
count=288, id=260, productName=VS2019 v16.10.3 build 30038, version=30038,
count=72, id=260, productName=VS2019 v16.4.3 build 28315, version=28315,
count=25, id=260, version=30140,
count=49, productName=Unmarked objects (old),
count=46, id=260, productName=VS2019 v16.9.4 build 29914, version=29914,
count=3, id=257, version=30151,
count=279, id=1, productName=Unmarked objects,
count=67, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=1, id=253, version=28518,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=4, id=257, version=30795,
count=3, id=257, version=30151,
count=95, id=1, productName=Unmarked objects,
count=22, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=252, id=260, productName=VS2019 v16.0.0 build 27508, version=27508,
count=3, id=257, version=30151,
count=101, id=1, productName=Unmarked objects,
count=1, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=253, version=28518,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=12, id=257, version=30795,
count=21, id=260, productName=VS2019 v16.11.9 build 30139, version=30139,
count=3, id=257, version=30151,
count=262, id=1, productName=Unmarked objects,
count=1, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=30034,
count=20, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=6, id=257, version=30145,
count=3, id=257, version=30151,
count=716, id=1, productName=Unmarked objects,
count=70, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=253, version=28518,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=4, id=257, version=30795,
count=2, id=257, version=30145,
count=52, id=260, version=30145,
count=4, id=257, version=30147,
count=3, id=257, version=30151,
count=285, id=1, productName=Unmarked objects,
count=1, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=42, id=260, version=30141,
count=3, id=257, version=30151,
count=172, id=1, productName=Unmarked objects,
count=61, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30795,
count=3, id=257, version=30151,
count=163, id=1, productName=Unmarked objects,
count=9, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=2, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=2, id=257, version=29114,
count=3, id=257, version=30151,
count=242, id=1, productName=Unmarked objects,
count=6, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=253, version=28518,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=4, id=257, version=30795,
count=3, id=257, version=30151,
count=156, id=1, productName=Unmarked objects,
count=2, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=7, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=4, id=257, version=30795,
count=3, id=257, version=30151,
count=388, id=1, productName=Unmarked objects,
count=13, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=1, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30795,
count=4, id=257, version=30147,
count=3, id=257, version=30151,
count=579, id=1, productName=Unmarked objects,
count=2, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30795,
count=2, id=156, productName=VS2010 build 30319, version=30319,
count=3, id=257, version=30151,
count=123, id=1, productName=Unmarked objects,
count=3, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30795,
count=3, id=257, version=30151,
count=88, id=1, productName=Unmarked objects,
count=3, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=2, id=257, version=29114,
count=3, id=257, version=30151,
count=117, id=1, productName=Unmarked objects,
count=3, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=4, id=257, version=30795,
count=3, id=257, version=30151,
count=115, id=1, productName=Unmarked objects,
count=3, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=4, id=257, version=30795,
count=2, id=257, version=30145,
count=3, id=257, version=30151,
count=156, id=1, productName=Unmarked objects,
count=3, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30795,
count=2, id=257, version=30146,
count=3, id=257, version=30151,
count=141, id=1, productName=Unmarked objects,
count=3, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=2, id=257, version=30145,
count=3, id=257, version=30151,
count=249, id=1, productName=Unmarked objects,
count=1, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30795,
count=3, id=257, version=30151,
count=61, id=1, productName=Unmarked objects,
count=1, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=5, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30795,
count=51, id=260, version=30145,
count=2, id=257, version=30147,
count=3, id=257, version=30151,
count=213, id=1, productName=Unmarked objects,
count=1, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=8, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=3, id=257, version=30151,
count=293, id=1, productName=Unmarked objects,
count=7, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=13, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30795,
count=3, id=257, version=30151,
count=164, id=1, productName=Unmarked objects,
count=5, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30795,
count=2, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=3, id=257, version=30151,
count=171, id=1, productName=Unmarked objects,
count=2, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30795,
count=2, id=257, version=30146,
count=3, id=257, version=30151,
count=181, id=1, productName=Unmarked objects,
count=1, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=10, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30795,
count=3, id=257, version=30151,
count=68, id=1, productName=Unmarked objects,
count=1, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=23, id=260, productName=VS2019 v16.0.0 build 27508, version=27508,
count=3, id=257, version=30151,
count=135, id=1, productName=Unmarked objects,
count=1, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=28, id=260, version=30146,
count=3, id=257, version=30151,
count=388, id=1, productName=Unmarked objects,
count=2, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=1, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30795,
count=3, id=257, version=30151,
count=158, id=1, productName=Unmarked objects,
count=3, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30795,
count=54, id=260, productName=VS2019 v16.5.5 build 28614, version=28614,
count=7, id=260, productName=VS2019 v16.1.2 build 27702, version=27702,
count=105, id=260, version=30141,
count=3, id=257, version=30151,
count=206, id=1, productName=Unmarked objects,
count=2, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=2, id=257, version=30795,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=3, id=257, version=30147,
count=141, id=1, productName=Unmarked objects,
count=2, productName=Unmarked objects (old),
count=36, id=260, version=30147,
count=1, id=256, version=30147,
count=1, id=255, version=30147,
count=1, id=258, version=30147,
Unsigned PE
Checks for missing Authenticode signature.
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=7, id=253, version=28518,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=13, id=257, version=26715,
count=247, id=1, productName=Unmarked objects,
count=131, id=264, version=30141,
count=1, id=256, version=30141,
count=1, id=255, version=30141,
count=1, id=151,
count=1, id=258, version=30141,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=1, id=253, version=28518,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30141,
count=3, id=257, version=26715,
count=73, id=1, productName=Unmarked objects,
count=1, id=264, version=30141,
count=1, id=256, version=30141,
count=1, id=255, version=30141,
count=1, id=151,
count=1, id=258, version=30141,
Unsigned PE
Checks for missing Authenticode signature.
count=1, productName=Unmarked objects (old),
count=1, id=256, version=30145,
count=1, id=255, version=30145,
count=1, id=258, version=30145,
Unsigned PE
Checks for missing Authenticode signature.
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=30034,
count=23, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=26715,
count=3, id=257, version=30145,
count=999, id=1, productName=Unmarked objects,
count=240, id=265, version=30145,
count=1, id=256, version=30145,
count=1, id=255, version=30145,
count=1, id=151,
count=1, id=258, version=30145,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=13, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30034,
count=2, id=257, version=26715,
count=5, id=257, version=30145,
count=133, id=1, productName=Unmarked objects,
count=12, id=265, version=30145,
count=1, id=256, version=30145,
count=1, id=255, version=30145,
count=1, id=151,
count=1, id=258, version=30145,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=20, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30034,
count=2, id=253, version=28518,
count=4, id=257, version=26715,
count=3, id=257, version=30145,
count=104, id=1, productName=Unmarked objects,
count=198, id=265, version=30145,
count=1, id=256, version=30145,
count=1, id=255, version=30145,
count=1, id=151,
count=1, id=258, version=30145,
Unsigned PE
Checks for missing Authenticode signature.
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=199, version=41118,
count=8, id=260, version=28427,
count=3, id=259, version=28427,
count=26, id=261, version=28427,
count=6, id=257, version=28427,
count=2, id=257, productName=VS2019 v16.5.1 build 28611, version=28611,
count=2, id=257, version=26715,
count=3, id=257, productName=VS2019 v16.0.0 build 27508, version=27508,
count=164, id=1, productName=Unmarked objects,
count=11, id=265, version=28611,
count=1, id=256, productName=VS2019 v16.5.1 build 28611, version=28611,
count=1, id=255, productName=VS2019 v16.5.1 build 28611, version=28611,
count=1, id=258, productName=VS2019 v16.5.1 build 28611, version=28611,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=197, id=1, productName=Unmarked objects,
count=13, id=257, version=30795,
count=33, productName=Unmarked objects (old),
count=875, id=260, version=30147,
count=1, id=256, version=30147,
count=1, id=255, version=30147,
count=1, id=258, version=30147,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=28427,
count=1, id=199, version=41118,
count=11, id=261, version=28427,
count=8, id=260, version=28427,
count=2, id=259, version=28427,
count=2, id=257, version=26715,
count=5, id=257, productName=VS2019 v16.0.0 build 27508, version=27508,
count=116, id=1, productName=Unmarked objects,
count=2, id=264, version=28611,
count=1, id=256, productName=VS2019 v16.5.1 build 28611, version=28611,
count=1, id=255, productName=VS2019 v16.5.1 build 28611, version=28611,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.5.1 build 28611, version=28611,
Unsigned PE
Checks for missing Authenticode signature.
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=4, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=12, id=257, version=26715,
count=5, id=257, version=30145,
count=241, id=1, productName=Unmarked objects,
count=40, id=260, version=30145,
count=1, id=256, version=30145,
count=1, id=255, version=30145,
count=1, id=151,
count=1, id=258, version=30145,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=264, version=30145,
count=7, id=257, version=26715,
count=2, id=257, version=30145,
count=127, id=1, productName=Unmarked objects,
count=13, id=260, version=30145,
count=1, id=256, version=30145,
count=1, id=255, version=30145,
count=1, id=258, version=30145,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=28619,
count=12, id=261, version=28619,
count=8, id=260, version=28619,
count=4, id=259, version=28619,
count=5, id=257, version=26715,
count=57, id=1, productName=Unmarked objects,
count=106, id=260, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=29395,
count=113, id=1, productName=Unmarked objects,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=1, id=264, version=30146,
count=1, id=256, version=30146,
count=1, id=258, version=30146,
Unsigned PE
Checks for missing Authenticode signature.
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=26213,
count=8, id=260, version=30141,
count=3, id=257, version=30145,
count=204, id=1, productName=Unmarked objects,
count=24, id=260, version=30145,
count=1, id=256, version=30145,
count=1, id=255, version=30145,
count=1, id=151,
count=1, id=258, version=30145,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=2, id=257, version=30795,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=3, id=257, version=30147,
count=539, id=1, productName=Unmarked objects,
count=49, id=260, version=30147,
count=1, id=256, version=30147,
count=1, id=255, version=30147,
count=1, id=258, version=30147,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=26213,
count=47, id=1, productName=Unmarked objects,
count=23, id=260, version=30146,
count=1, id=256, version=30146,
count=1, id=255, version=30146,
count=1, id=151,
count=1, id=258, version=30146,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=10, id=253, version=28518,
count=19, id=261, version=30034,
count=10, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30795,
count=3, id=257, version=30151,
count=256, id=1, productName=Unmarked objects,
count=2, id=269, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=253, version=28518,
count=18, id=261, version=30034,
count=10, id=260, version=30034,
count=3, id=259, version=30034,
count=4, id=257, version=30795,
count=3, id=257, version=30151,
count=194, id=1, productName=Unmarked objects,
count=3, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=5, id=253, version=28518,
count=18, id=261, version=30034,
count=10, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=257, version=30795,
count=3, id=257, version=30151,
count=277, id=1, productName=Unmarked objects,
count=5, id=264, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=24, id=253, version=28518,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=6, id=260, productName=VS2019 v16.1.2 build 27702, version=27702,
count=41, id=260, version=30146,
count=18, id=260, version=30141,
count=427, id=1, productName=Unmarked objects,
count=17, id=257, version=30795,
count=131, id=269, version=30151,
count=264, id=260, version=30151,
count=2, id=259, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=2, id=257, version=30795,
count=9, id=253, version=28518,
count=13, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=3, id=257, version=30151,
count=293, id=1, productName=Unmarked objects,
count=20, id=260, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=2, id=257, version=30795,
count=9, id=253, version=28518,
count=20, id=261, version=30034,
count=10, id=260, version=30034,
count=4, id=259, version=30034,
count=3, id=257, version=30151,
count=306, id=1, productName=Unmarked objects,
count=20, id=260, version=30151,
count=1, id=256, version=30151,
count=1, id=255, version=30151,
count=1, id=258, version=30151,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.