HydraDragonAntivirus-main.zip
- SHA256 ad69e83f7ff54cd47b06f55e2ec55612f64ca77f5e8b6a77ce50fb588ed66eb7
Overview
overview
10Static
static
10HydraDrago...er.dll
windows7-x64
1HydraDrago...er.dll
windows10-2004-x64
1HydraDrago...yX.dll
windows7-x64
1HydraDrago...yX.dll
windows10-2004-x64
1HydraDrago...Z4.dll
windows7-x64
1HydraDrago...Z4.dll
windows10-2004-x64
1HydraDrago....E.dll
windows7-x64
1HydraDrago....E.dll
windows10-2004-x64
1HydraDrago....E.dll
windows7-x64
1HydraDrago....E.dll
windows10-2004-x64
1HydraDrago...t..dll
windows7-x64
1HydraDrago...t..dll
windows10-2004-x64
1HydraDrago...t..dll
windows7-x64
1HydraDrago...t..dll
windows10-2004-x64
1HydraDrago...t..dll
windows7-x64
1HydraDrago...t..dll
windows10-2004-x64
1HydraDrago...t..dll
windows7-x64
1HydraDrago...t..dll
windows10-2004-x64
1HydraDrago...t..dll
windows7-x64
1HydraDrago...t..dll
windows10-2004-x64
1HydraDrago...t..dll
windows7-x64
1HydraDrago...t..dll
windows10-2004-x64
1HydraDrago...t..dll
windows7-x64
1HydraDrago...t..dll
windows10-2004-x64
1HydraDrago...on.dll
windows7-x64
1HydraDrago...on.dll
windows10-2004-x64
1HydraDrago...t..dll
windows7-x64
1HydraDrago...t..dll
windows10-2004-x64
1HydraDrago...t..dll
windows7-x64
1HydraDrago...t..dll
windows10-2004-x64
1HydraDrago...t..dll
windows7-x64
1HydraDrago...t..dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/ICSharpCode.Decompiler.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/ICSharpCode.Decompiler.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/ICSharpCode.ILSpyX.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/ICSharpCode.ILSpyX.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/K4os.Compression.LZ4.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/K4os.Compression.LZ4.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/McMaster.E.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/McMaster.E.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/McMaster.E.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/McMaster.E.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win7-20241023-en
Behavioral task
behavioral12
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win7-20241010-en
Behavioral task
behavioral14
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win7-20241010-en
Behavioral task
behavioral20
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft.Extensions.Configuration.dll
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft.Extensions.Configuration.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win7-20241010-en
Behavioral task
behavioral30
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Microsoft..dll
Resource
win10v2004-20241007-en
ps1
http://lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion
https://bigblog.at
http://lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion
http://lockbitsap2oaqhcun3syvbqt6n5nzt7fqosc6jdlmsfleu3ka4k2did.onion
| resource | yara_rule |
|---|---|
| static1/unpack001/HydraDragonAntivirus-main/yara/comment_lines.txt | family_merlin |
Detects HTTP links in interactive objects within PDF files.
| resource | yara_rule |
|---|---|
| static1/unpack004/doc/OpenDetectorDeveloperGuide.pdf | pdf_with_link_action |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/ICSharpCode.Decompiler.dll |
| unpack001/HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/ICSharpCode.ILSpyX.dll |
| unpack001/HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/K4os.Compression.LZ4.dll |
| unpack001/HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/McMaster.Extensions.CommandLineUtils.dll |
| unpack001/HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/McMaster.Extensions.Hosting.CommandLine.dll |
| unpack001/HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Mono.Cecil.Mdb.dll |
| unpack001/HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Mono.Cecil.Pdb.dll |
| unpack001/HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Mono.Cecil.Rocks.dll |
| unpack001/HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/Mono.Cecil.dll |
| unpack001/HydraDragonAntivirus-main/.store/ilspycmd/8.2.0.7535/ilspycmd/8.2.0.7535/tools/net6.0/any/ilspycmd.dll |
| unpack001/HydraDragonAntivirus-main/detectiteasy/die.exe |
| unpack001/HydraDragonAntivirus-main/detectiteasy/diec.exe |
| unpack001/HydraDragonAntivirus-main/detectiteasy/diel.exe |
| unpack001/HydraDragonAntivirus-main/detectiteasy/libcrypto-1_1-x64.dll |
| unpack001/HydraDragonAntivirus-main/detectiteasy/libssl-1_1-x64.dll |
| unpack001/HydraDragonAntivirus-main/hydradownload/7z2409-x64.exe |
| unpack003/$PLUGINSDIR/InstallOptions.dll |
| unpack003/$PLUGINSDIR/LangDLL.dll |
| unpack003/$PLUGINSDIR/System.dll |
| unpack001/HydraDragonAntivirus-main/hydradownload/Snort_2_9_20_Installer.x64.exe |
| unpack004/Uninstall.exe |
| unpack004/bin/Packet.dll |
| unpack004/bin/WanPacket.dll |
| unpack004/bin/npptools.dll |
| unpack004/bin/ntwdblib.dll |
| unpack004/bin/pcre.dll |
| unpack004/bin/snort.exe |
| unpack004/bin/wpcap.dll |
| unpack004/bin/zlib1.dll |
| unpack004/lib/snort_dynamicengine/sf_engine.dll |
| unpack004/lib/snort_dynamicpreprocessor/sf_dce2.dll |
| unpack004/lib/snort_dynamicpreprocessor/sf_dnp3.dll |
| unpack004/lib/snort_dynamicpreprocessor/sf_dns.dll |
| unpack004/lib/snort_dynamicpreprocessor/sf_ftptelnet.dll |
| unpack004/lib/snort_dynamicpreprocessor/sf_gtp.dll |
| unpack004/lib/snort_dynamicpreprocessor/sf_imap.dll |
| unpack004/lib/snort_dynamicpreprocessor/sf_modbus.dll |
| unpack004/lib/snort_dynamicpreprocessor/sf_pop.dll |
| unpack004/lib/snort_dynamicpreprocessor/sf_reputation.dll |
| unpack004/lib/snort_dynamicpreprocessor/sf_sdf.dll |
| unpack004/lib/snort_dynamicpreprocessor/sf_sip.dll |
| unpack004/lib/snort_dynamicpreprocessor/sf_smtp.dll |
| unpack004/lib/snort_dynamicpreprocessor/sf_ssh.dll |
| unpack004/lib/snort_dynamicpreprocessor/sf_ssl.dll |
| unpack007/$PLUGINSDIR/InstallOptions.dll |
| unpack007/$PLUGINSDIR/SysRestore.dll |
| unpack007/$PLUGINSDIR/System.dll |
| unpack007/$PLUGINSDIR/nsExec.dll |
| unpack001/HydraDragonAntivirus-main/ilspycmd.exe |
| resource | yara_rule |
|---|---|
| static1/unpack001/HydraDragonAntivirus-main/hydradownload/Sandboxie-Classic-x64-v5.70.4.exe | nsis_installer_1 |
| static1/unpack001/HydraDragonAntivirus-main/hydradownload/Sandboxie-Classic-x64-v5.70.4.exe | nsis_installer_2 |
| static1/unpack001/HydraDragonAntivirus-main/hydradownload/Snort_2_9_20_Installer.x64.exe | nsis_installer_1 |
| static1/unpack001/HydraDragonAntivirus-main/hydradownload/Snort_2_9_20_Installer.x64.exe | nsis_installer_2 |
| static1/unpack004/Uninstall.exe | nsis_installer_1 |
| static1/unpack004/Uninstall.exe | nsis_installer_2 |
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Mar 17, 2021
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Jul 19, 2017
Unsigned PE
Checks for missing Authenticode signature.
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Dec 12, 2024
Jul 19, 2017
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=257, version=28619,
count=4, id=199, version=41118,
count=30, id=261, version=28619,
count=8, id=260, version=28619,
count=4, id=259, version=28619,
count=2, id=260, version=27412,
count=1, id=262, version=27412,
count=23, id=257, version=27412,
count=343, id=1, productName=Unmarked objects,
count=44, id=260, productName=VS2019 v16.6.2 build 28806, version=28806,
count=255, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=199, version=41118,
count=8, id=260, version=28619,
count=4, id=259, version=28619,
count=25, id=261, version=28619,
count=6, id=257, version=28619,
count=2, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=261, version=27412,
count=13, id=257, version=27412,
count=1400, id=1, productName=Unmarked objects,
count=16, id=260, productName=VS2019 v16.6.2 build 28806, version=28806,
count=361, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=260, version=27412,
count=8, id=260, version=28619,
count=4, id=259, version=28619,
count=25, id=261, version=28619,
count=6, id=257, version=28619,
count=14, id=257, version=27412,
count=3, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=981, id=1, productName=Unmarked objects,
count=132, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=28619,
count=2, id=257, version=27412,
count=22, id=261, version=28619,
count=8, id=260, version=28619,
count=4, id=259, version=28619,
count=7, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=812, id=1, productName=Unmarked objects,
count=21, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=199, version=41118,
count=22, id=261, version=28619,
count=8, id=260, version=28619,
count=4, id=259, version=28619,
count=4, id=257, version=28619,
count=4, id=257, version=27412,
count=3, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=457, id=1, productName=Unmarked objects,
count=185, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=28619,
count=2, id=257, version=27412,
count=8, id=260, version=28619,
count=4, id=259, version=28619,
count=23, id=261, version=28619,
count=9, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1207, id=1, productName=Unmarked objects,
count=78, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=28619,
count=2, id=257, version=27412,
count=20, id=261, version=28619,
count=8, id=260, version=28619,
count=3, id=259, version=28619,
count=3, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=277, id=1, productName=Unmarked objects,
count=20, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=28619,
count=2, id=257, version=27412,
count=21, id=261, version=28619,
count=8, id=260, version=28619,
count=3, id=259, version=28619,
count=7, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=730, id=1, productName=Unmarked objects,
count=13, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=260, version=28619,
count=4, id=259, version=28619,
count=25, id=261, version=28619,
count=8, id=257, version=28619,
count=1, id=260, version=27412,
count=14, id=257, version=27412,
count=5, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=3085, id=1, productName=Unmarked objects,
count=187, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=30034,
count=5, id=253, version=28518,
count=10, id=260, version=30034,
count=4, id=259, version=30034,
count=33, id=261, version=30034,
count=1, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=12, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=11, id=257, version=30795,
count=3150, id=1, productName=Unmarked objects,
count=141, id=260, version=30153,
count=612, id=261, version=30153,
count=1, id=255, version=30153,
count=1, id=258, version=30153,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=30034,
count=3, id=253, version=28518,
count=30, id=261, version=30034,
count=10, id=260, version=30034,
count=4, id=259, version=30034,
count=4, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=26, id=260, version=30153,
count=7, id=257, version=30795,
count=572, id=1, productName=Unmarked objects,
count=153, id=261, version=30153,
count=1, id=255, version=30153,
count=1, id=258, version=30153,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=30034,
count=3, id=253, version=28518,
count=30, id=261, version=30034,
count=10, id=260, version=30034,
count=4, id=259, version=30034,
count=1, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=8, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=26, id=260, version=30153,
count=9, id=257, version=30795,
count=981, id=1, productName=Unmarked objects,
count=146, id=261, version=30153,
count=1, id=255, version=30153,
count=1, id=258, version=30153,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=28619,
count=2, id=257, version=27412,
count=20, id=261, version=28619,
count=8, id=260, version=28619,
count=3, id=259, version=28619,
count=5, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=114, id=1, productName=Unmarked objects,
count=3, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=28619,
count=2, id=257, version=27412,
count=21, id=261, version=28619,
count=8, id=260, version=28619,
count=3, id=259, version=28619,
count=5, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=134, id=1, productName=Unmarked objects,
count=3, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=28619,
count=2, id=257, version=27412,
count=1, id=199, version=41118,
count=21, id=261, version=28619,
count=8, id=260, version=28619,
count=3, id=259, version=28619,
count=5, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=199, id=1, productName=Unmarked objects,
count=50, id=260, productName=VS2019 v16.6.2 build 28806, version=28806,
count=3, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=28619,
count=2, id=257, version=27412,
count=21, id=261, version=28619,
count=8, id=260, version=28619,
count=4, id=259, version=28619,
count=5, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=175, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=35, id=260, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
qr http://x64dbg.com
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=156, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=159, id=1, productName=Unmarked objects,
count=3, id=158, productName=VS2010 build 30319, version=30319,
count=649, id=170, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=158, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=5, id=156, productName=VS2010 build 30319, version=30319,
count=485, id=1, productName=Unmarked objects,
count=54, id=170, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Dec 12, 2024
count=2, id=257, version=28900,
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=207, id=1, productName=Unmarked objects,
count=5, id=257, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=142, id=261, version=30034,
count=1, id=256, version=30034,
count=1, id=255, version=30034,
count=1, id=258, version=30034,
Dec 12, 2024
count=2, id=257, version=28900,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=260, version=30034,
count=2, id=259, version=30034,
count=41, id=1, productName=Unmarked objects,
count=5, id=257, version=30034,
count=19, id=261, version=30034,
count=1, id=256, version=30034,
count=1, id=255, version=30034,
count=1, id=258, version=30034,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=199, version=41118,
count=21, id=261, version=28619,
count=8, id=260, version=28619,
count=4, id=259, version=28619,
count=6, id=257, version=28619,
count=3, id=260, version=27412,
count=1, id=262, version=27412,
count=4, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=39, id=260, productName=VS2019 v16.6.2 build 28806, version=28806,
count=21, id=257, version=27412,
count=1709, id=1, productName=Unmarked objects,
count=73, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=28619,
count=2, id=257, version=27412,
count=19, id=261, version=28619,
count=8, id=260, version=28619,
count=4, id=259, version=28619,
count=5, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=311, id=1, productName=Unmarked objects,
count=1, id=260, productName=VS2019 v16.6.2 build 28806, version=28806,
count=3, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Dec 12, 2024
count=2, id=257, version=28900,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=44, id=1, productName=Unmarked objects,
count=13, id=259, version=30034,
count=16, id=260, version=30034,
count=31, id=261, version=30034,
count=1, id=256, version=30034,
count=1, id=255, version=30034,
count=1, id=258, version=30034,
Dec 12, 2024
count=2, id=257, version=28900,
count=2, id=257, version=30034,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=49, id=1, productName=Unmarked objects,
count=5, id=259, version=30034,
count=7, id=260, version=30034,
count=26, id=261, version=30034,
count=1, id=256, version=30034,
count=1, id=255, version=30034,
count=1, id=258, version=30034,
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=10, version=8047,
count=5, id=14, version=7299,
count=2, id=4, version=8047,
count=2, id=95, version=2190,
count=82, id=1, productName=Unmarked objects,
count=11, id=93, version=2179,
count=13, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=259, productName=VS2019 v16.8.4 build 29336, version=29336,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Sep 30, 2024
CN=Oracle America\, Inc.,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Oracle America\, Inc.,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=15, id=259, version=30795,
count=185, id=261, version=30795,
count=22, id=260, version=30795,
count=18, id=260, version=32420,
count=22, id=259, version=32420,
count=88, id=261, version=32420,
count=1, id=262, version=30795,
count=17, id=257, version=30795,
count=198, id=1, productName=Unmarked objects,
count=23, id=261, version=32537,
count=1, id=255, version=32537,
count=2, id=151,
count=1, id=258, version=32537,
NSIS installer
Dec 18, 2024
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=153, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=72, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=48, version=9044,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Dec 18, 2024
count=2, id=257, version=30157,
count=15, id=257, version=30795,
count=156, id=1, productName=Unmarked objects,
count=42, id=261, version=30034,
count=17, id=260, version=30034,
count=7, id=259, version=30034,
count=147, id=261, version=30795,
count=7, id=259, version=30795,
count=12, id=260, version=30795,
count=1, id=261, version=30157,
count=4, id=260, version=30157,
count=1, id=255, version=30157,
count=1, id=151,
count=1, id=258, version=30157,
Unsigned PE
Checks for missing Authenticode signature.
count=22, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Dec 18, 2024
count=5, id=260, version=30795,
count=5, id=257, version=30795,
count=293, id=1, productName=Unmarked objects,
count=1, id=259, version=30157,
count=6, id=261, version=30157,
count=64, id=260, version=30157,
count=1, id=256, version=30157,
count=1, id=255, version=30157,
count=2, id=151,
count=1, id=258, version=30157,
Dec 18, 2024
count=1, id=255, version=30157,
count=1, id=151,
count=1, id=258, version=30157,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=14, version=7299,
count=19, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=42, version=8803,
count=4, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Dec 18, 2024
count=5, id=260, version=30795,
count=5, id=257, version=30795,
count=293, id=1, productName=Unmarked objects,
count=1, id=259, version=30157,
count=6, id=261, version=30157,
count=64, id=260, version=30157,
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=3, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=256, version=30157,
count=1, id=255, version=30157,
count=2, id=151,
count=1, id=258, version=30157,
Dec 18, 2024
count=10, id=259, version=30795,
count=156, id=261, version=30795,
count=29, id=260, version=30795,
count=2, id=253, version=28518,
count=21, id=260, version=30034,
count=22, id=259, version=30034,
count=45, id=261, version=30034,
count=26, id=257, version=30795,
count=3, id=257, version=30157,
count=455, id=1, productName=Unmarked objects,
count=1, id=260, version=30157,
count=26, id=261, version=30157,
count=1, id=255, version=30157,
count=1, id=151,
count=1, id=258, version=30157,
Dec 18, 2024
count=2, id=257, version=30157,
count=15, id=257, version=30795,
count=156, id=1, productName=Unmarked objects,
count=42, id=261, version=30034,
count=17, id=260, version=30034,
count=7, id=259, version=30034,
count=147, id=261, version=30795,
count=7, id=259, version=30795,
count=12, id=260, version=30795,
count=1, id=261, version=30157,
count=4, id=260, version=30157,
count=1, id=255, version=30157,
count=1, id=151,
count=1, id=258, version=30157,
Dec 18, 2024
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=39, id=261, version=30034,
count=16, id=260, version=30034,
count=9, id=259, version=30034,
count=2, id=257, version=30157,
count=13, id=257, version=30795,
count=125, id=1, productName=Unmarked objects,
count=1, id=260, version=30157,
count=1, id=255, version=30157,
count=1, id=151,
count=1, id=258, version=30157,
Dec 18, 2024
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=1, id=253, version=28518,
count=39, id=261, version=30034,
count=17, id=260, version=30034,
count=9, id=259, version=30034,
count=8, id=257, version=30795,
count=3, id=257, version=30157,
count=129, id=1, productName=Unmarked objects,
count=1, id=260, version=30157,
count=1, id=255, version=30157,
count=1, id=151,
count=1, id=258, version=30157,
Dec 18, 2024
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=39, id=261, version=30034,
count=16, id=260, version=30034,
count=9, id=259, version=30034,
count=8, id=257, version=30795,
count=3, id=257, version=30157,
count=127, id=1, productName=Unmarked objects,
count=1, id=260, version=30157,
count=1, id=255, version=30157,
count=1, id=151,
count=1, id=258, version=30157,
Dec 18, 2024
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=39, id=261, version=30034,
count=16, id=260, version=30034,
count=9, id=259, version=30034,
count=10, id=257, version=30795,
count=3, id=257, version=30157,
count=174, id=1, productName=Unmarked objects,
count=4, id=260, version=30157,
count=1, id=255, version=30157,
count=1, id=151,
count=1, id=258, version=30157,
Dec 18, 2024
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=39, id=261, version=30034,
count=16, id=260, version=30034,
count=9, id=259, version=30034,
count=8, id=257, version=30795,
count=3, id=257, version=30157,
count=120, id=1, productName=Unmarked objects,
count=1, id=264, version=30157,
count=1, id=255, version=30157,
count=1, id=151,
count=1, id=258, version=30157,
Dec 18, 2024
count=18, id=259, version=30795,
count=38, id=260, version=30795,
count=201, id=261, version=30795,
count=1, id=262, version=30795,
count=18, id=260, version=30034,
count=44, id=257, version=30795,
count=3, id=257, version=30157,
count=907, id=1, productName=Unmarked objects,
count=11, id=259, version=30034,
count=400, id=261, version=30034,
count=6, id=260, version=30157,
count=59, id=261, version=30157,
count=1, id=255, version=30157,
count=1, id=258, version=30157,
Dec 18, 2024
count=5, id=260, version=30795,
count=5, id=257, version=30795,
count=293, id=1, productName=Unmarked objects,
count=1, id=259, version=30157,
count=6, id=261, version=30157,
count=64, id=260, version=30157,
count=1, id=256, version=30157,
count=1, id=255, version=30157,
count=2, id=151,
count=1, id=258, version=30157,
Dec 12, 2024
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=3, id=261, version=29395,
count=1, id=262, version=29395,
count=11, id=257, version=29395,
count=204, id=1, productName=Unmarked objects,
count=6, id=259, version=29395,
count=16, id=260, version=29395,
count=1, id=259, version=30157,
count=36, id=260, version=30157,
count=1, id=255, version=30157,
count=1, id=258, version=30157,
Dec 18, 2024
count=5, id=259, version=30795,
count=143, id=261, version=30795,
count=10, id=260, version=30795,
count=39, id=261, version=30034,
count=16, id=260, version=30034,
count=9, id=259, version=30034,
count=2, id=257, version=30795,
count=3, id=257, version=30157,
count=99, id=1, productName=Unmarked objects,
count=4, id=264, version=30157,
count=1, id=255, version=30157,
count=1, id=151,
count=1, id=258, version=30157,
Dec 18, 2024
count=1, id=255, version=30157,
count=1, id=151,
count=1, id=258, version=30157,
Dec 18, 2024
count=5, id=259, version=30795,
count=153, id=261, version=30795,
count=19, id=260, version=30795,
count=2, id=253, version=28518,
count=18, id=260, version=30034,
count=9, id=259, version=30034,
count=45, id=261, version=30034,
count=26, id=257, version=30795,
count=3, id=257, version=30157,
count=467, id=1, productName=Unmarked objects,
count=1, id=260, version=30157,
count=26, id=261, version=30157,
count=1, id=255, version=30157,
count=1, id=151,
count=1, id=258, version=30157,
Dec 18, 2024
count=5, id=259, version=30795,
count=135, id=261, version=30795,
count=10, id=260, version=30795,
count=15, id=260, version=30034,
count=9, id=259, version=30034,
count=38, id=261, version=30034,
count=10, id=257, version=30795,
count=3, id=257, version=30157,
count=114, id=1, productName=Unmarked objects,
count=3, id=265, version=30157,
count=1, id=256, version=30157,
count=1, id=255, version=30157,
count=1, id=151,
count=1, id=258, version=30157,
Dec 18, 2024
count=2, id=260, version=30157,
count=2, id=257, version=30157,
count=1, id=262, version=30795,
count=23, id=257, version=30795,
count=262, id=1, productName=Unmarked objects,
count=145, id=261, version=30795,
count=7, id=259, version=30795,
count=13, id=260, version=30795,
count=42, id=261, version=30034,
count=17, id=260, version=30034,
count=7, id=259, version=30034,
count=10, id=261, version=30157,
count=1, id=255, version=30157,
count=1, id=258, version=30157,
Dec 18, 2024
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=30034,
count=10, id=260, version=30034,
count=4, id=259, version=30034,
count=17, id=257, version=30795,
count=259, id=1, productName=Unmarked objects,
count=26, id=261, version=30034,
count=8, id=264, version=30157,
count=1, id=255, version=30157,
count=1, id=151,
count=1, id=258, version=30157,
Unsigned PE
Checks for missing Authenticode signature.
NSIS installer
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=159, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
NSIS installer
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=159, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=68, id=1, productName=Unmarked objects,
count=11, id=93, version=2179,
count=3, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=22, id=14, version=7299,
count=1, id=95, version=2190,
count=82, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=2, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=65, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=108, id=1, productName=Unmarked objects,
count=1, id=92, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=16, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Unsigned PE
Checks for missing Authenticode signature.
count=1, productName=Unmarked objects (old),
count=2, id=11, version=8769,
count=2, id=14, version=7299,
count=2, id=4, version=8397,
count=7, id=12, version=7291,
count=9, id=19, version=8034,
count=104, id=1, productName=Unmarked objects,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=62, id=10, version=8769,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=11, version=8047,
count=20, id=14, version=7299,
count=91, id=10, version=8047,
count=3, id=19, version=8034,
count=76, id=1, productName=Unmarked objects,
count=8, id=10, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=14, id=199, version=41118,
count=19, id=261, version=26706,
count=10, id=260, version=26706,
count=3, id=259, version=26706,
count=2, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,
count=8, id=257, version=26213,
count=3, id=221, productName=VS2013 UPD5 build 40629, version=40629,
count=227, id=1, productName=Unmarked objects,
count=6, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=241, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=151,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=12, version=7291,
count=6, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=5, id=93, version=2179,
count=123, id=1, productName=Unmarked objects,
count=21, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=93, version=2179,
count=1, id=14, version=7299,
count=5, id=10, version=8047,
count=3, id=4, version=8047,
count=22, id=1, productName=Unmarked objects,
count=12, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
file http://DC.serviceStatus.in
file http://DetectorPackageInfo.name
file http://craftbeerfestdc.com
file http://gDetector.open
file http://lua-users.org/wiki/DebuggingLuaCode
file http://mdcraftbeerfestival.com
file http://27.directory
file http://ExampleThisexamplelooksfortheIPIDof31337.id:31337
file http://RPCprocessing.cl
file http://alert.fast
file http://alert.smbAlertoneventsrelatedtoSMBprocessing.co
file http://andSerialsections.email
file http://appearinasession.sd
file http://cnn.com
file http://cvalue.id
file http://distanceorwithin.fast
file http://dnp3_funcdnp3_objdnp3_inddnp3_dataThepreprocessormustbeenabledfortheseruleoptiontowork.dnp
file http://edcontentasthefastpatterncontentfortherule.fast
file http://example.com
file http://gen-msg.map
file http://globaliis_unicode_mapunicode.map
file http://google.com
file http://guration.net
file http://i.e.no
file http://i.e.stream
file http://inmeta-datainYAMLformat.3.appMapping.data
file http://intolibsfdynamicpreprocessorexample.so
file http://itistruncatedbeforebeingaddedtothedefragmentationmodule.Theallowedrangeforthisoptionis1514-65535.events
file http://marc.theaimsgroup.com/?l=snort-usersatsnort-users@lists.snort.orgprovideinformativeannouncementsaswellasavenueforcommunitydiscussionandsupport.There'salottoSnort,sositbackwithabeverageofyourchoosingandreadthedocumentationandmailinglistarchives.27
file http://myurl.com/?id=configreferencenet
file http://orcommas.ApplicationnamesinrulesarethenamesyouwillseeinlastcolumninappMapping.data
file http://packetstorm.securify.com/mag/phrack/phrack49/p49-062http://www.nmap.org3http://public.pacbell.net/dedicated/cidr.html4http://www.whitehats.com5http://www.incident.org/snortdb6http://www.pcre.org268
file http://snort.org
file http://sourcefire.com
file http://www.ietf.org/internet-drafts/draft-ietf-ftpext-mlst-16.txt
file http://www.pcre.org
file http://www.securityfocus.com/bid/cvehttp://cve.mitre.org/cgi-bin/cvename.cgi?name=nessushttp://cgi.nessus.org/plugins/dump.php3?id=arachnids
file http://www.snort.org
file http://www.snort.org/dl/contrib/.4!NOTERememberthatthiscongurationisfortheglobalIISUnicodemap,individualserverscanreferencetheirownIISUnicodemap.2.detectanomalousserversThisglobalcongurationoptionenablesgenericHTTPservertrafcinspectiononnon-HTTPconguredports,andalertsifHTTPtrafcisseen.Don'tturnthisonifyoudon'thaveadefaultservercongurationthatencompassesalloftheHTTPserverportsthatyourusersmightaccess.Inthefuture,wewanttolimitthistospecicnetworkssoit'smoreuseful,butforrightnow,thisinspectsallnetworktrafc.Thisoptionisturnedoffbydefault.3.proxyalertThisenablesglobalalertingonHTTPserverproxyusage.ByconguringHTTPInspectserversandenablingallowproxyuse,youwillonlyreceiveproxyusealertsforwebusersthataren'tusingtheconguredproxiesorareusingarogueproxyserver.Pleasenotethatifusersaren'trequiredtocongurewebproxyuse,thenyoumaygetalotofproxyalerts.So,pleaseonlyusethisfeaturewithtraditionalproxyenvironments.Blindrewallproxiesdon'tcount.4.compressdepth
file http://www.snort.org/dl/contrib/directory.ExecutingthisprogramgeneratesaUnicodemapforthesystemthatitwasrunon.So,togetthespecicUnicodemappingsforanIISwebserver,yourunthisprogramonthatserverandusethatUnicodemapinthisconguration.Whenusingthisoption,theuserneedstospecifythelethatcontainstheIISUnicodemapandalsospecifytheUnicodemaptouse.ForUSservers,thisisusually1252.Butthemsunicodegeneratorprogramtellsyouwhichcodemaptouseforyouserver;it'stheANSIcodepage.Youcanselectthecorrectcodepagebylookingattheavailablecodepagesthatthemsunicodegeneratoroutputs.4.extendedresponseinspectionThisenablestheextendedHTTPresponseinspection.ThedefaulthttpresponseinspectiondoesnotinspectthevariouseldsofaHTTPresponse.ByturningthisoptiontheHTTPresponsewillbethoroughlyinspected.ThedifferenteldsofaHTTPresponsesuchasstatuscode,statusmessage,headers,cookie
file http://www.snort.org/docs/idspaper/.Thebasicideabehindtarget-basedIDSisthatwetelltheIDSinformationabouthostsonthenetworksothatitcanavoidPtacek&NewshamstyleevasionattacksbasedoninformationabouthowanindividualtargetIPstackoperates.VernPaxsonandUmeshShankardidagreatpaperonthisverytopicin2003thatdetailedmappingthehostsonanet-workanddetermininghowtheirvariousIPstackimplementationshandledthetypesofproblemsseeninIPdefragmen-tationandTCPstreamreassembly.Checkitoutathttp://www.icir.org/vern/papers/activemap-oak03.pdf.WecanalsopresenttheIDSwithtopologyinformationtoavoidTTL-basedevasionsandavarietyofotherissues,butthat'satopicforanotherday.Oncewehavethisinformationwecanstarttoreallychangethegameforthesecomplexmodelingproblems.Frag3wasimplementedtoshowcaseandprototypeatarget-basedmodulewithinSnorttotestthisidea.Frag3CongurationThereareatleasttwopreprocessordirectivesrequiredtoactivatefrag3,aglobalcongurationdirectiveandanengineinstantiation.Therecanbeanarbitrarynumberofenginesdenedatstartupwiththeirownconguration,butonlyoneglobalconguration.GlobalCongurationPreprocessorname:frag3globalAvailableoptions:NOTE:Globalcongurationoptionsarecommaseparated.�maxfrags
file http://www.snort.org/pub-bin/sigs-search.cgi/forasystemthatisindexingdescriptionsofalertsbasedonofthesid
file http://www.w3.org/1999/xhtml
file http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd
file http://www.whitehats.com/info/IDSmcafeehttp://vil.nai.com/vil/content/vosvdbhttp://osvdb.org/show/osvdb/msbhttp://technet.microsoft.com/en-us/security/bulletin/urlhttp://Formatreference:
file http://zone.info
Unsigned PE
Checks for missing Authenticode signature.
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=2, id=199, version=41118,
count=11, id=261, version=26706,
count=8, id=260, version=26706,
count=3, id=259, version=26706,
count=5, id=257, version=26213,
count=57, id=1, productName=Unmarked objects,
count=16, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=3, id=199, version=41118,
count=12, id=261, version=26706,
count=8, id=260, version=26706,
count=3, id=259, version=26706,
count=5, id=257, version=26213,
count=69, id=1, productName=Unmarked objects,
count=26, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=11, id=261, version=26706,
count=8, id=260, version=26706,
count=2, id=259, version=26706,
count=5, id=257, version=26213,
count=45, id=1, productName=Unmarked objects,
count=10, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=3, id=257, version=26213,
count=45, id=1, productName=Unmarked objects,
count=1, id=199, version=41118,
count=10, id=261, version=26706,
count=7, id=260, version=26706,
count=1, id=259, version=26706,
count=3, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=2, id=199, version=41118,
count=12, id=261, version=26706,
count=8, id=260, version=26706,
count=3, id=259, version=26706,
count=5, id=257, version=26213,
count=67, id=1, productName=Unmarked objects,
count=26, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=2, id=199, version=41118,
count=12, id=261, version=26706,
count=8, id=260, version=26706,
count=2, id=259, version=26706,
count=5, id=257, version=26213,
count=58, id=1, productName=Unmarked objects,
count=10, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=2, id=199, version=41118,
count=11, id=261, version=26706,
count=8, id=260, version=26706,
count=3, id=259, version=26706,
count=5, id=257, version=26213,
count=55, id=1, productName=Unmarked objects,
count=19, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=10, id=261, version=26706,
count=7, id=260, version=26706,
count=1, id=259, version=26706,
count=5, id=257, version=26213,
count=42, id=1, productName=Unmarked objects,
count=7, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=2, id=199, version=41118,
count=11, id=261, version=26706,
count=8, id=260, version=26706,
count=3, id=259, version=26706,
count=5, id=257, version=26213,
count=56, id=1, productName=Unmarked objects,
count=19, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=2, id=199, version=41118,
count=12, id=261, version=26706,
count=8, id=260, version=26706,
count=3, id=259, version=26706,
count=5, id=257, version=26213,
count=63, id=1, productName=Unmarked objects,
count=14, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=3, id=257, version=26213,
count=61, id=1, productName=Unmarked objects,
count=2, id=199, version=41118,
count=11, id=261, version=26706,
count=8, id=260, version=26706,
count=2, id=259, version=26706,
count=8, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=3, id=199, version=41118,
count=12, id=261, version=26706,
count=8, id=260, version=26706,
count=2, id=259, version=26706,
count=5, id=257, version=26213,
count=64, id=1, productName=Unmarked objects,
count=13, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=3, id=199, version=41118,
count=11, id=261, version=26706,
count=8, id=260, version=26706,
count=3, id=259, version=26706,
count=5, id=257, version=26213,
count=58, id=1, productName=Unmarked objects,
count=21, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=2, id=199, version=41118,
count=10, id=261, version=26706,
count=7, id=260, version=26706,
count=1, id=259, version=26706,
count=5, id=257, version=26213,
count=46, id=1, productName=Unmarked objects,
count=3, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=2, id=199, version=41118,
count=11, id=261, version=26706,
count=8, id=260, version=26706,
count=3, id=259, version=26706,
count=5, id=257, version=26213,
count=46, id=1, productName=Unmarked objects,
count=9, id=260, version=27034,
count=1, id=256, version=27034,
count=1, id=255, version=27034,
count=1, id=258, version=27034,
Sep 16, 2024
SERIALNUMBER=6397588,CN=Nmap Software LLC,O=Nmap Software LLC,L=Beaverton,ST=Oregon,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=6397588,CN=Nmap Software LLC,O=Nmap Software LLC,L=Beaverton,ST=Oregon,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=166, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=81, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=48, version=9044,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Aug 28, 2024
SERIALNUMBER=6397588,CN=Nmap Software LLC,O=Nmap Software LLC,L=Beaverton,ST=Oregon,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=6397588,CN=Nmap Software LLC,O=Nmap Software LLC,L=Beaverton,ST=Oregon,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=10, id=259, version=30795,
count=160, id=261, version=30795,
count=20, id=259, version=33731,
count=18, id=260, version=33731,
count=45, id=261, version=33731,
count=23, id=260, version=30795,
count=21, id=257, version=30795,
count=153, id=1, productName=Unmarked objects,
count=11, id=265, version=33811,
count=1, id=255, version=33811,
count=1, id=151,
count=1, id=258, version=33811,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=257, version=30795,
count=15, id=1, productName=Unmarked objects,
count=1, id=263, version=30795,
count=2, id=260, version=30795,
count=1, id=48, version=9044,
count=1, id=260, version=33811,
count=1, id=256, version=33811,
count=1, id=258, version=33811,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=45, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Aug 28, 2024
SERIALNUMBER=6397588,CN=Nmap Software LLC,O=Nmap Software LLC,L=Beaverton,ST=Oregon,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=6397588,CN=Nmap Software LLC,O=Nmap Software LLC,L=Beaverton,ST=Oregon,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=10, id=259, version=30795,
count=160, id=261, version=30795,
count=20, id=259, version=33731,
count=18, id=260, version=33731,
count=45, id=261, version=33731,
count=23, id=260, version=30795,
count=21, id=257, version=30795,
count=153, id=1, productName=Unmarked objects,
count=11, id=265, version=33811,
count=1, id=255, version=33811,
count=1, id=151,
count=1, id=258, version=33811,
Unsigned PE
Checks for missing Authenticode signature.
count=1, productName=Unmarked objects (old),
count=12, id=260, version=33218,
count=18, id=259, version=33218,
count=86, id=261, version=33218,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=30795,
count=201, id=1, productName=Unmarked objects,
count=10, id=265, version=33321,
count=1, id=258, version=33321,
Merlin payload