b2f34ccfcbb7a4c243305260c3d0b0b0351ad49c765189ba0c350e80304f5be1
- SHA256 b2f34ccfcbb7a4c243305260c3d0b0b0351ad49c765189ba0c350e80304f5be1
Static task
static1
Behavioral task
behavioral1
Sample
b2f34ccfcbb7a4c243305260c3d0b0b0351ad49c765189ba0c350e80304f5be1.zip
Resource
win7-20240704-en
Embeds OpenSSL, may be used to circumvent TLS interception.
| resource | yara_rule |
|---|---|
| static1/unpack001/KoalaBuilder/lib/cryptography/hazmat/bindings/_rust.pyd | embeds_openssl |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/KoalaBuilder/KoalaBuilder.exe |
| unpack001/KoalaBuilder/lib/_brotli.cp311-win_amd64.pyd |
| unpack001/KoalaBuilder/lib/_cffi_backend.cp311-win_amd64.pyd |
| unpack001/KoalaBuilder/lib/_win32sysloader.pyd |
| unpack001/KoalaBuilder/lib/bcrypt/_bcrypt.pyd |
| unpack001/KoalaBuilder/lib/charset_normalizer/md.cp311-win_amd64.pyd |
| unpack001/KoalaBuilder/lib/charset_normalizer/md__mypyc.cp311-win_amd64.pyd |
| unpack001/KoalaBuilder/lib/cryptography/hazmat/bindings/_rust.pyd |
| unpack001/KoalaBuilder/lib/pywin32_system32/pythoncom311.dll |
| unpack001/KoalaBuilder/lib/pywin32_system32/pywintypes311.dll |
| unpack001/KoalaBuilder/lib/pywintypes311.dll |
| unpack001/KoalaBuilder/lib/win32api.pyd |
| unpack001/KoalaBuilder/lib/win32evtlog.pyd |
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31935,
count=2, id=257, version=30795,
count=18, id=261, version=31935,
count=10, id=260, version=31935,
count=3, id=259, version=31935,
count=3, id=257, version=32217,
count=74, id=1, productName=Unmarked objects,
count=1, id=264, version=32217,
count=1, id=255, version=32217,
count=1, id=258, version=32217,
Aug 22, 2024
count=1, id=256, version=27412,
count=2, id=260, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Aug 22, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=264, version=30795,
count=1, id=256, version=30795,
count=2, id=260, version=30795,
count=1, id=255, version=30795,
count=1, id=258, version=30795,
Aug 22, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=256, version=30795,
count=1, id=265, version=30795,
count=1, id=258, version=30795,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=12, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=3, id=257, version=31943,
count=2, id=257, version=30795,
count=132, id=1, productName=Unmarked objects,
count=1, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31935,
count=2, id=257, version=30795,
count=13, id=261, version=31935,
count=8, id=260, version=31935,
count=3, id=259, version=31935,
count=3, id=257, version=31944,
count=61, id=1, productName=Unmarked objects,
count=32, id=264, version=32217,
count=1, id=256, version=32217,
count=1, id=255, version=32217,
count=1, id=258, version=32217,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=3, id=253, version=31823,
count=13, id=261, version=31823,
count=8, id=260, version=31823,
count=4, id=259, version=31823,
count=3, id=257, version=31943,
count=2, id=257, version=30795,
count=95, id=1, productName=Unmarked objects,
count=8, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=4, id=253, version=28518,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=4, id=257, version=29395,
count=3, id=257, version=31329,
count=246, id=1, productName=Unmarked objects,
count=4, id=264, version=30145,
count=1, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=256, version=30145,
count=1, id=255, version=30145,
count=1, id=258, version=30145,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=12, id=261, version=31823,
count=8, id=260, version=31823,
count=4, id=259, version=31823,
count=2, id=257, version=31943,
count=1, id=260, version=30795,
count=6, id=257, version=30795,
count=3, id=257, version=31937,
count=245, id=1, productName=Unmarked objects,
count=6, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=13, id=261, version=31823,
count=8, id=260, version=31823,
count=4, id=259, version=31823,
count=3, id=257, version=31943,
count=2, id=257, version=30795,
count=155, id=1, productName=Unmarked objects,
count=1, id=259, version=31943,
count=15, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=13, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=2, id=257, version=31943,
count=3, id=257, version=30795,
count=166, id=1, productName=Unmarked objects,
count=4, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=12, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=2, id=257, version=31943,
count=2, id=257, version=30795,
count=3, id=257, version=31937,
count=135, id=1, productName=Unmarked objects,
count=1, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=12, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=3, id=257, version=31943,
count=2, id=257, version=30795,
count=102, id=1, productName=Unmarked objects,
count=58, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=13, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=2, id=257, version=31943,
count=89, id=1, productName=Unmarked objects,
count=5, id=257, version=30795,
count=2, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=12, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=2, id=257, version=31943,
count=116, id=1, productName=Unmarked objects,
count=5, id=257, version=30795,
count=1, id=260, version=30795,
count=1, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=12, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=3, id=257, version=31943,
count=2, id=257, version=30795,
count=74, id=1, productName=Unmarked objects,
count=1, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=13, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=2, id=257, version=31943,
count=184, id=1, productName=Unmarked objects,
count=7, id=257, version=30795,
count=1, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=13, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=2, id=257, version=31943,
count=4, id=257, version=31937,
count=399, id=1, productName=Unmarked objects,
count=7, id=257, version=30795,
count=2, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=13, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=3, id=257, version=31943,
count=2, id=257, version=30795,
count=350, id=1, productName=Unmarked objects,
count=1, id=264, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=11, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=3, id=257, version=31943,
count=2, id=257, version=30795,
count=83, id=1, productName=Unmarked objects,
count=1, id=264, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=13, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=2, id=257, version=31943,
count=2, id=257, version=30795,
count=5, id=257, productName=VS2019 v16.11.9 build 30139, version=30139,
count=210, id=1, productName=Unmarked objects,
count=2, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=2, id=257, version=27412,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=3, id=257, version=30147,
count=42, id=1, productName=Unmarked objects,
count=1, id=265, version=30147,
count=1, id=256, version=30147,
count=1, id=258, version=30147,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31616,
count=16, id=261, version=31616,
count=7, id=260, version=31616,
count=3, id=259, version=31616,
count=2, id=257, version=30795,
count=3, id=257, productName=VS2017 v15.9.4 build 27025, version=27025,
count=111, id=1, productName=Unmarked objects,
count=208, productName=Unmarked objects (old),
count=1, id=256, version=31630,
count=1, id=258, version=31630,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=2, id=257, version=30795,
count=11, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=3, id=257, version=31935,
count=38, id=1, productName=Unmarked objects,
count=1, id=264, version=31942,
count=1, id=256, version=31942,
count=1, id=255, version=31942,
count=1, id=258, version=31942,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=2, id=257, version=30795,
count=13, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=3, id=257, version=31935,
count=231, id=1, productName=Unmarked objects,
count=1, id=264, version=31942,
count=1, id=256, version=31942,
count=1, id=255, version=31942,
count=1, id=258, version=31942,
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33218,
count=17, id=261, version=33218,
count=8, id=260, version=33218,
count=4, id=259, version=33218,
count=2, id=257, version=33135,
count=545, id=1, productName=Unmarked objects,
count=17, id=257, version=30151,
count=886, id=260, version=33135,
count=1, id=260, version=33523,
count=146, productName=Unmarked objects (old),
count=1, id=256, version=33523,
count=1, id=258, version=33523,
Feb 9, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=12, id=261, version=31823,
count=8, id=260, version=31823,
count=4, id=259, version=31823,
count=159, id=1, productName=Unmarked objects,
count=11, id=257, version=30795,
count=29, id=259, version=31937,
count=634, id=260, version=31937,
count=1, id=256, version=31937,
count=1, id=255, version=31937,
count=1, id=258, version=31937,
Feb 9, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=3, id=257, version=30795,
count=41, id=1, productName=Unmarked objects,
count=13, id=261, version=31823,
count=8, id=260, version=31823,
count=4, id=259, version=31823,
count=7, id=260, version=31937,
count=1, id=259, version=31937,
count=1, id=256, version=31937,
count=1, id=258, version=31937,
Feb 9, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=2, id=257, version=30795,
count=12, id=261, version=31823,
count=8, id=260, version=31823,
count=4, id=259, version=31823,
count=3, id=257, version=31937,
count=486, id=1, productName=Unmarked objects,
count=44, id=260, version=31937,
count=1, id=256, version=31937,
count=1, id=255, version=31937,
count=1, id=258, version=31937,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=13, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=2, id=257, version=31943,
count=3, id=257, version=30795,
count=116, id=1, productName=Unmarked objects,
count=4, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=30034,
count=23, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=13, id=260, version=27412,
count=4, id=257, version=30147,
count=9, id=257, version=27412,
count=339, id=1, productName=Unmarked objects,
count=81, id=265, version=30147,
count=1, id=256, version=30147,
count=1, id=258, version=30147,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=30034,
count=1, id=253, version=28518,
count=20, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=1, id=260, version=27412,
count=2, id=257, version=30147,
count=11, id=257, version=27412,
count=228, id=1, productName=Unmarked objects,
count=13, id=265, version=30147,
count=1, id=256, version=30147,
count=1, id=258, version=30147,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=30034,
count=1, id=253, version=28518,
count=20, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=1, id=260, version=27412,
count=2, id=257, version=30147,
count=11, id=257, version=27412,
count=228, id=1, productName=Unmarked objects,
count=13, id=265, version=30147,
count=1, id=256, version=30147,
count=1, id=258, version=30147,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=12, id=261, version=31823,
count=8, id=260, version=31823,
count=4, id=259, version=31823,
count=2, id=257, version=31943,
count=66, id=1, productName=Unmarked objects,
count=5, id=257, version=30795,
count=1, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Feb 28, 2022
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
count=2, id=257, version=30034,
count=3, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=260, version=29395,
count=13, id=257, version=29395,
count=281, id=1, productName=Unmarked objects,
count=173, id=264, version=30139,
count=1, id=256, productName=VS2019 v16.11.9 build 30139, version=30139,
count=1, id=255, productName=VS2019 v16.11.9 build 30139, version=30139,
count=1, id=258, productName=VS2019 v16.11.9 build 30139, version=30139,
file http://www.zzz.org/mailman/listinfo/ppp
Feb 28, 2022
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=3, id=260, version=29395,
count=1, id=260, productName=VS2019 v16.11.9 build 30139, version=30139,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=257, version=29395,
count=329, id=1, productName=Unmarked objects,
count=142, id=264, version=30139,
count=1, id=256, productName=VS2019 v16.11.9 build 30139, version=30139,
count=1, id=255, productName=VS2019 v16.11.9 build 30139, version=30139,
count=1, id=258, productName=VS2019 v16.11.9 build 30139, version=30139,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=13, id=261, version=31823,
count=8, id=260, version=31823,
count=3, id=259, version=31823,
count=3, id=257, version=31943,
count=2, id=257, version=30795,
count=81, id=1, productName=Unmarked objects,
count=1, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=4, id=257, version=30147,
count=23, id=261, version=30034,
count=11, id=257, version=27412,
count=342, id=1, productName=Unmarked objects,
count=2, id=265, version=30147,
count=1, id=256, version=30147,
count=1, id=258, version=30147,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=4, id=257, version=30147,
count=19, id=261, version=30034,
count=5, id=257, version=27412,
count=162, id=1, productName=Unmarked objects,
count=1, id=265, version=30147,
count=1, id=256, version=30147,
count=1, id=255, version=30147,
count=1, id=258, version=30147,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=1, id=264, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,
Apr 5, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=2, id=257, version=31823,
count=14, id=253, version=31823,
count=12, id=261, version=31823,
count=8, id=260, version=31823,
count=4, id=259, version=31823,
count=26, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=257, version=30795,
count=357, id=1, productName=Unmarked objects,
count=198, id=269, version=31943,
count=1, id=256, version=31943,
count=1, id=255, version=31943,
count=1, id=258, version=31943,