d3500266325555c9e777a4c585afc05dfd73b4cbe9dba741c5876593b78059fd.bin
- SHA256 d3500266325555c9e777a4c585afc05dfd73b4cbe9dba741c5876593b78059fd
Overview
overview
10Static
static
10DLLs/_asyncio.dll
windows10-2004-x64
3DLLs/_asyncio.dll
windows11-21h2-x64
3DLLs/_bz2.dll
windows10-2004-x64
3DLLs/_bz2.dll
windows11-21h2-x64
3DLLs/_contextvars.dll
windows10-2004-x64
3DLLs/_contextvars.dll
windows11-21h2-x64
3DLLs/_ctypes.dll
windows10-2004-x64
3DLLs/_ctypes.dll
windows11-21h2-x64
3DLLs/_ctypes_test.dll
windows10-2004-x64
3DLLs/_ctypes_test.dll
windows11-21h2-x64
3DLLs/_decimal.dll
windows10-2004-x64
3DLLs/_decimal.dll
windows11-21h2-x64
3DLLs/_dist...vs.dll
windows10-2004-x64
3DLLs/_dist...vs.dll
windows11-21h2-x64
3DLLs/_elementtree.dll
windows10-2004-x64
3DLLs/_elementtree.dll
windows11-21h2-x64
3DLLs/_hashlib.dll
windows10-2004-x64
3DLLs/_hashlib.dll
windows11-21h2-x64
3DLLs/_lzma.dll
windows10-2004-x64
3DLLs/_lzma.dll
windows11-21h2-x64
3DLLs/_msi.dll
windows10-2004-x64
3DLLs/_msi.dll
windows11-21h2-x64
3DLLs/_mult...ng.dll
windows10-2004-x64
3DLLs/_mult...ng.dll
windows11-21h2-x64
3DLLs/_overlapped.dll
windows10-2004-x64
3DLLs/_overlapped.dll
windows11-21h2-x64
3DLLs/_queue.dll
windows10-2004-x64
3DLLs/_queue.dll
windows11-21h2-x64
3DLLs/_sqlite3.dll
windows10-2004-x64
3DLLs/_sqlite3.dll
windows11-21h2-x64
3DLLs/_ssl.dll
windows10-2004-x64
3DLLs/_ssl.dll
windows11-21h2-x64
3Behavioral task
behavioral1
Sample
DLLs/_asyncio.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral2
Sample
DLLs/_asyncio.dll
Resource
win11-20251015-en
Behavioral task
behavioral3
Sample
DLLs/_bz2.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral4
Sample
DLLs/_bz2.dll
Resource
win11-20251015-en
Behavioral task
behavioral5
Sample
DLLs/_contextvars.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral6
Sample
DLLs/_contextvars.dll
Resource
win11-20251015-en
Behavioral task
behavioral7
Sample
DLLs/_ctypes.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral8
Sample
DLLs/_ctypes.dll
Resource
win11-20251015-en
Behavioral task
behavioral9
Sample
DLLs/_ctypes_test.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral10
Sample
DLLs/_ctypes_test.dll
Resource
win11-20250619-en
Behavioral task
behavioral11
Sample
DLLs/_decimal.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral12
Sample
DLLs/_decimal.dll
Resource
win11-20251015-en
Behavioral task
behavioral13
Sample
DLLs/_distutils_findvs.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral14
Sample
DLLs/_distutils_findvs.dll
Resource
win11-20251015-en
Behavioral task
behavioral15
Sample
DLLs/_elementtree.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral16
Sample
DLLs/_elementtree.dll
Resource
win11-20250502-en
Behavioral task
behavioral17
Sample
DLLs/_hashlib.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral18
Sample
DLLs/_hashlib.dll
Resource
win11-20251015-en
Behavioral task
behavioral19
Sample
DLLs/_lzma.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral20
Sample
DLLs/_lzma.dll
Resource
win11-20250619-en
Behavioral task
behavioral21
Sample
DLLs/_msi.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral22
Sample
DLLs/_msi.dll
Resource
win11-20251015-en
Behavioral task
behavioral23
Sample
DLLs/_multiprocessing.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral24
Sample
DLLs/_multiprocessing.dll
Resource
win11-20251015-en
Behavioral task
behavioral25
Sample
DLLs/_overlapped.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral26
Sample
DLLs/_overlapped.dll
Resource
win11-20251015-en
Behavioral task
behavioral27
Sample
DLLs/_queue.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral28
Sample
DLLs/_queue.dll
Resource
win11-20251015-en
Behavioral task
behavioral29
Sample
DLLs/_sqlite3.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral30
Sample
DLLs/_sqlite3.dll
Resource
win11-20251015-en
Behavioral task
behavioral31
Sample
DLLs/_ssl.dll
Resource
win10v2004-20251016-en
Behavioral task
behavioral32
Sample
DLLs/_ssl.dll
Resource
win11-20251015-en
| resource | yara_rule |
|---|---|
| static1/unpack001/command.py | family_pylangghost |
| static1/unpack001/config.py | family_pylangghost |
| static1/unpack001/nvidia.py | family_pylangghost |
| static1/unpack001/update.vbs | family_pylangghost |
| static1/unpack001/util.py | family_pylangghost |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack003/pip/_vendor/distlib/t32.exe |
| unpack003/pip/_vendor/distlib/t64.exe |
| unpack003/pip/_vendor/distlib/w32.exe |
| unpack003/pip/_vendor/distlib/w64.exe |
| unpack004/setuptools/cli-32.exe |
| unpack004/setuptools/cli-64.exe |
| unpack004/setuptools/cli.exe |
| unpack004/setuptools/gui-32.exe |
| unpack004/setuptools/gui-64.exe |
| unpack004/setuptools/gui.exe |
| unpack002/Lib/site-packages/Crypto/Cipher/_ARC4.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_Salsa20.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_chacha20.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_pkcs1_decode.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_raw_aes.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_raw_aesni.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_raw_arc2.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_raw_blowfish.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_raw_cast.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_raw_cbc.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_raw_cfb.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_raw_ctr.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_raw_des.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_raw_des3.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_raw_ecb.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_raw_eksblowfish.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_raw_ocb.pyd |
| unpack002/Lib/site-packages/Crypto/Cipher/_raw_ofb.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_BLAKE2b.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_BLAKE2s.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_MD2.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_MD4.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_MD5.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_RIPEMD160.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_SHA1.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_SHA224.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_SHA256.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_SHA384.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_SHA512.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_ghash_clmul.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_ghash_portable.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_keccak.pyd |
| unpack002/Lib/site-packages/Crypto/Hash/_poly1305.pyd |
| unpack002/Lib/site-packages/Crypto/Math/_modexp.pyd |
| unpack002/Lib/site-packages/Crypto/Protocol/_scrypt.pyd |
| unpack002/Lib/site-packages/Crypto/PublicKey/_curve25519.pyd |
| unpack002/Lib/site-packages/Crypto/PublicKey/_curve448.pyd |
| unpack002/Lib/site-packages/Crypto/PublicKey/_ec_ws.pyd |
| unpack002/Lib/site-packages/Crypto/PublicKey/_ed25519.pyd |
| unpack002/Lib/site-packages/Crypto/PublicKey/_ed448.pyd |
| unpack002/Lib/site-packages/Crypto/Util/_cpuid_c.pyd |
| unpack002/Lib/site-packages/Crypto/Util/_strxor.pyd |
| unpack002/Lib/site-packages/_cffi_backend.cp37-win32.pyd |
| unpack002/Lib/site-packages/bin/normalizer.exe |
| unpack002/Lib/site-packages/bin/pyspnego-parse.exe |
| unpack002/Lib/site-packages/charset_normalizer/md.cp37-win32.pyd |
| unpack002/Lib/site-packages/charset_normalizer/md__mypyc.cp37-win32.pyd |
| unpack002/Lib/site-packages/cryptography/hazmat/bindings/_rust.pyd |
| unpack002/Lib/site-packages/isapi/PyISAPI_loader.dll |
| unpack002/Lib/site-packages/psutil/_psutil_windows.pyd |
| unpack002/Lib/site-packages/pythonwin/Pythonwin.exe |
| unpack002/Lib/site-packages/pythonwin/dde.pyd |
| unpack002/Lib/site-packages/pythonwin/scintilla.dll |
| unpack002/Lib/site-packages/pythonwin/win32ui.pyd |
| unpack002/Lib/site-packages/pythonwin/win32uiole.pyd |
| unpack002/Lib/site-packages/pywin32_system32/pythoncom37.dll |
| unpack002/Lib/site-packages/pywin32_system32/pywintypes37.dll |
| unpack002/Lib/site-packages/spnego/_sspi_raw/sspi.cp37-win32.pyd |
| unpack002/Lib/site-packages/spnego/_sspi_raw/text.cp37-win32.pyd |
| unpack002/Lib/site-packages/win32/_win32sysloader.pyd |
| unpack002/Lib/site-packages/win32/_winxptheme.pyd |
| unpack002/Lib/site-packages/win32/mmapfile.pyd |
| unpack002/Lib/site-packages/win32/odbc.pyd |
| unpack002/Lib/site-packages/win32/perfmon.pyd |
| unpack002/Lib/site-packages/win32/perfmondata.dll |
| unpack002/Lib/site-packages/win32/pythonservice.exe |
| unpack002/Lib/site-packages/win32/servicemanager.pyd |
| unpack002/Lib/site-packages/win32/timer.pyd |
| unpack002/Lib/site-packages/win32/win32api.pyd |
| unpack002/Lib/site-packages/win32/win32clipboard.pyd |
| unpack002/Lib/site-packages/win32/win32console.pyd |
| unpack002/Lib/site-packages/win32/win32cred.pyd |
| unpack002/Lib/site-packages/win32/win32crypt.pyd |
| unpack002/Lib/site-packages/win32/win32event.pyd |
| unpack002/Lib/site-packages/win32/win32evtlog.pyd |
| unpack002/Lib/site-packages/win32/win32file.pyd |
| unpack002/Lib/site-packages/win32/win32gui.pyd |
| unpack002/Lib/site-packages/win32/win32help.pyd |
| unpack002/Lib/site-packages/win32/win32inet.pyd |
| unpack002/Lib/site-packages/win32/win32job.pyd |
| unpack002/Lib/site-packages/win32/win32lz.pyd |
| unpack002/Lib/site-packages/win32/win32net.pyd |
| unpack002/Lib/site-packages/win32/win32pdh.pyd |
| unpack002/Lib/site-packages/win32/win32pipe.pyd |
| unpack002/Lib/site-packages/win32/win32print.pyd |
| unpack002/Lib/site-packages/win32/win32process.pyd |
| unpack002/Lib/site-packages/win32/win32profile.pyd |
| unpack002/Lib/site-packages/win32/win32ras.pyd |
| unpack002/Lib/site-packages/win32/win32security.pyd |
| unpack002/Lib/site-packages/win32/win32service.pyd |
| unpack002/Lib/site-packages/win32/win32trace.pyd |
| unpack002/Lib/site-packages/win32/win32transaction.pyd |
| unpack002/Lib/site-packages/win32/win32ts.pyd |
| unpack002/Lib/site-packages/win32/win32wnet.pyd |
| unpack002/Lib/site-packages/win32comext/adsi/adsi.pyd |
| unpack002/Lib/site-packages/win32comext/authorization/authorization.pyd |
| unpack002/Lib/site-packages/win32comext/axcontrol/axcontrol.pyd |
| unpack002/Lib/site-packages/win32comext/axdebug/axdebug.pyd |
| unpack002/Lib/site-packages/win32comext/axscript/axscript.pyd |
| unpack002/Lib/site-packages/win32comext/bits/bits.pyd |
| unpack002/Lib/site-packages/win32comext/directsound/directsound.pyd |
| unpack002/Lib/site-packages/win32comext/ifilter/ifilter.pyd |
| unpack002/Lib/site-packages/win32comext/internet/internet.pyd |
| unpack002/Lib/site-packages/win32comext/mapi/exchange.pyd |
| unpack002/Lib/site-packages/win32comext/mapi/mapi.pyd |
| unpack002/Lib/site-packages/win32comext/propsys/propsys.pyd |
| unpack002/Lib/site-packages/win32comext/shell/shell.pyd |
| unpack002/Lib/site-packages/win32comext/taskscheduler/taskscheduler.pyd |
Codesigned binary was signed by an untrusted entity.
| resource |
|---|
| unpack001/DLLs/_asyncio.pyd |
| unpack001/DLLs/_bz2.pyd |
| unpack001/DLLs/_contextvars.pyd |
| unpack001/DLLs/_ctypes.pyd |
| unpack001/DLLs/_ctypes_test.pyd |
| unpack001/DLLs/_decimal.pyd |
| unpack001/DLLs/_distutils_findvs.pyd |
| unpack001/DLLs/_elementtree.pyd |
| unpack001/DLLs/_hashlib.pyd |
| unpack001/DLLs/_lzma.pyd |
| unpack001/DLLs/_msi.pyd |
| unpack001/DLLs/_multiprocessing.pyd |
| unpack001/DLLs/_overlapped.pyd |
| unpack001/DLLs/_queue.pyd |
| unpack001/DLLs/_socket.pyd |
| unpack001/DLLs/_sqlite3.pyd |
| unpack001/DLLs/_ssl.pyd |
| unpack001/DLLs/_testbuffer.pyd |
| unpack001/DLLs/_testcapi.pyd |
| unpack001/DLLs/_testconsole.pyd |
| unpack001/DLLs/_testimportmultiple.pyd |
| unpack001/DLLs/_testmultiphase.pyd |
| unpack001/DLLs/_tkinter.pyd |
| unpack001/DLLs/libcrypto-1_1.dll |
| unpack001/DLLs/libssl-1_1.dll |
| unpack001/DLLs/pyexpat.pyd |
| unpack001/DLLs/select.pyd |
| unpack001/DLLs/sqlite3.dll |
| unpack001/DLLs/tcl86t.dll |
| unpack001/DLLs/tk86t.dll |
| unpack001/DLLs/unicodedata.pyd |
| unpack001/DLLs/winsound.pyd |
| unpack001/ppp.exe |
| unpack001/python3.dll |
| unpack001/python37.dll |
| unpack001/pythonw.exe |
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=118, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=199, version=41118,
count=2, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=83, id=1, productName=Unmarked objects,
count=8, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=35, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=6, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=262, version=25203,
count=7, id=257, version=25203,
count=213, id=1, productName=Unmarked objects,
count=9, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=4, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=5, id=257, version=25203,
count=42, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=5, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=150, id=1, productName=Unmarked objects,
count=15, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=7, id=257, version=25203,
count=46, id=1, productName=Unmarked objects,
count=1, id=265, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=3, id=257, version=25203,
count=152, id=1, productName=Unmarked objects,
count=5, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=3, id=257, productName=VS2017 v15.6.3 build 26129, version=26129,
count=87, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=5, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=85, id=1, productName=Unmarked objects,
count=58, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=11, id=257, version=25203,
count=106, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=5, id=257, version=25203,
count=79, id=1, productName=Unmarked objects,
count=2, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=262, version=25203,
count=5, id=257, version=25203,
count=101, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=59, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=5, id=257, version=25203,
count=166, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=199, version=41118,
count=2, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=5, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=207, id=1, productName=Unmarked objects,
count=9, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=4, id=257, productName=VS2017 v15.6.3 build 26129, version=26129,
count=7, id=257, version=25203,
count=336, id=1, productName=Unmarked objects,
count=2, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=88, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=245, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=3, id=257, version=25203,
count=40, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=30, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=54, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=5, id=257, productName=VS2017 v15.5.6 build 25835, version=25835,
count=198, id=1, productName=Unmarked objects,
count=2, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Apr 13, 2018
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=25930,
count=10, id=259, version=25930,
count=10, id=261, version=25930,
count=11, id=260, version=25930,
count=9, id=257, version=25203,
count=163, id=1, productName=Unmarked objects,
count=603, id=260, productName=VS2017 v15.6.3 build 26129, version=26129,
count=1, id=256, productName=VS2017 v15.6.3 build 26129, version=26129,
count=1, id=255, productName=VS2017 v15.6.3 build 26129, version=26129,
count=1, id=258, productName=VS2017 v15.6.3 build 26129, version=26129,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Apr 13, 2018
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=25930,
count=2, id=257, version=25203,
count=4, id=259, version=25930,
count=11, id=261, version=25930,
count=11, id=260, version=25930,
count=3, id=257, productName=VS2017 v15.6.3 build 26129, version=26129,
count=467, id=1, productName=Unmarked objects,
count=39, id=260, productName=VS2017 v15.6.3 build 26129, version=26129,
count=1, id=256, productName=VS2017 v15.6.3 build 26129, version=26129,
count=1, id=255, productName=VS2017 v15.6.3 build 26129, version=26129,
count=1, id=258, productName=VS2017 v15.6.3 build 26129, version=26129,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=3, id=257, version=25203,
count=111, id=1, productName=Unmarked objects,
count=5, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=5, id=257, version=25203,
count=56, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=13, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, version=25203,
count=104, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Feb 22, 2018
count=2, id=257, version=25810,
count=4, id=199, version=41118,
count=12, id=259, version=25810,
count=10, id=261, version=25810,
count=11, id=260, version=25810,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=262, version=25203,
count=13, id=257, version=25203,
count=278, id=1, productName=Unmarked objects,
count=175, id=264, version=25835,
count=1, id=256, productName=VS2017 v15.5.6 build 25835, version=25835,
count=1, id=255, productName=VS2017 v15.5.6 build 25835, version=25835,
count=1, id=258, productName=VS2017 v15.5.6 build 25835, version=25835,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Feb 22, 2018
count=2, id=257, version=25810,
count=4, id=259, version=25810,
count=10, id=261, version=25810,
count=11, id=260, version=25810,
count=3, id=244, version=40116,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=239, version=40116,
count=328, id=1, productName=Unmarked objects,
count=143, id=264, version=25835,
count=1, id=256, productName=VS2017 v15.5.6 build 25835, version=25835,
count=1, id=255, productName=VS2017 v15.5.6 build 25835, version=25835,
count=1, id=258, productName=VS2017 v15.5.6 build 25835, version=25835,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=62, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=2, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=7, id=257, version=25203,
count=51, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Detects PyLangGhost RAT
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=152, version=20115,
count=33, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=15, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=119, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=91, id=1, productName=Unmarked objects,
count=1, id=174, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=152, version=20115,
count=33, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=116, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=9, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=91, id=1, productName=Unmarked objects,
count=1, id=174, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Detects PyLangGhost RAT
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=152, version=20115,
count=33, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=15, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=118, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=92, id=1, productName=Unmarked objects,
count=1, id=174, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=152, version=20115,
count=33, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=115, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=9, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=92, id=1, productName=Unmarked objects,
count=1, id=174, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=91, id=1, productName=Unmarked objects,
count=4, id=150, version=20413,
count=36, id=132, productName=VS2008 build 21022, version=21022,
count=18, id=149, productName=VS2008 build 21022, version=21022,
count=112, id=131, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=93, id=1, productName=Unmarked objects,
count=4, id=150, version=20413,
count=36, id=132, productName=VS2008 build 21022, version=21022,
count=10, id=149, productName=VS2008 build 21022, version=21022,
count=109, id=131, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=91, id=1, productName=Unmarked objects,
count=4, id=150, version=20413,
count=36, id=132, productName=VS2008 build 21022, version=21022,
count=18, id=149, productName=VS2008 build 21022, version=21022,
count=112, id=131, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Detects PyLangGhost RAT
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=91, id=1, productName=Unmarked objects,
count=4, id=150, version=20413,
count=36, id=132, productName=VS2008 build 21022, version=21022,
count=18, id=149, productName=VS2008 build 21022, version=21022,
count=113, id=131, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=93, id=1, productName=Unmarked objects,
count=4, id=150, version=20413,
count=36, id=132, productName=VS2008 build 21022, version=21022,
count=10, id=149, productName=VS2008 build 21022, version=21022,
count=110, id=131, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=91, id=1, productName=Unmarked objects,
count=4, id=150, version=20413,
count=36, id=132, productName=VS2008 build 21022, version=21022,
count=18, id=149, productName=VS2008 build 21022, version=21022,
count=113, id=131, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Detects PyLangGhost RAT
Detects PyLangGhost RAT
Detects PyLangGhost RAT
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=33, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=33, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=33, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=35, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=33, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=36, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=34, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=34, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=34, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=34, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=36, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=37, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=2, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=33, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=2, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=33, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=2, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=31, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=34, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=35, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=34, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=34, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=34, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=35, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=35, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=35, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=34, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=35, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=35, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=35, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=35, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=2, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=35, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=2, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=33, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=33, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=3, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=35, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=35, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=2, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=39, id=1, productName=Unmarked objects,
count=12, id=261, version=30034,
count=10, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=35, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=34, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=3, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=39, id=1, productName=Unmarked objects,
count=12, id=261, version=30034,
count=10, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=39, id=1, productName=Unmarked objects,
count=12, id=261, version=30034,
count=10, id=260, version=30034,
count=4, id=259, version=30034,
count=5, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=34, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=3, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=39, id=1, productName=Unmarked objects,
count=12, id=261, version=30034,
count=10, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=31, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=257, version=30795,
count=31, id=1, productName=Unmarked objects,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=4, id=253, version=28518,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=5, id=259, version=30034,
count=4, id=257, version=29395,
count=3, id=257, version=24234,
count=240, id=1, productName=Unmarked objects,
count=5, id=264, version=30145,
count=1, id=256, version=30145,
count=1, id=255, version=30145,
count=1, id=258, version=30145,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=152, version=20115,
count=33, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=15, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=121, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=95, id=1, productName=Unmarked objects,
count=1, id=174, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=152, version=20115,
count=33, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=15, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=121, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=95, id=1, productName=Unmarked objects,
count=1, id=174, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=2, id=257, version=33140,
count=1, id=259, version=34321,
count=10, id=260, version=34321,
count=11, id=261, version=34321,
count=3, id=257, version=24234,
count=33, id=1, productName=Unmarked objects,
count=1, id=264, version=34808,
count=1, id=256, version=34808,
count=1, id=255, version=34808,
count=1, id=258, version=34808,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=2, id=257, version=33140,
count=2, id=259, version=34321,
count=10, id=260, version=34321,
count=12, id=261, version=34321,
count=3, id=257, version=24234,
count=228, id=1, productName=Unmarked objects,
count=1, id=264, version=34808,
count=1, id=256, version=34808,
count=1, id=255, version=34808,
count=1, id=258, version=34808,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=12, id=259, version=34321,
count=10, id=260, version=34321,
count=16, id=261, version=34321,
count=14, id=257, version=33140,
count=3, id=257, version=33135,
count=523, id=1, productName=Unmarked objects,
count=901, id=260, version=34808,
count=127, productName=Unmarked objects (old),
count=1, id=256, version=34808,
count=1, id=258, version=34808,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=1, id=253, version=28518,
count=17, id=261, version=30034,
count=10, id=260, version=30034,
count=2, id=259, version=30034,
count=2, id=257, version=24234,
count=5, id=257, version=30795,
count=118, id=1, productName=Unmarked objects,
count=6, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=10, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=24234,
count=17, id=257, version=30795,
count=181, id=1, productName=Unmarked objects,
count=16, id=264, version=30158,
count=1, id=256, version=30158,
count=1, id=255, version=30158,
count=1, id=258, version=30158,
Apr 15, 2021
SERIALNUMBER=3594967,CN=Power Admin LLC,O=Power Admin LLC,L=Olathe,ST=Kansas,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13064f6c61746865,1.3.6.1.4.1.311.60.2.1.2=#13064b616e736173,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Apr 15, 2021
count=10, id=241, version=40116,
count=133, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=260, version=26706,
count=19, id=259, version=26706,
count=45, id=261, version=26706,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=197, id=1, productName=Unmarked objects,
count=10, id=265, version=27045,
count=1, id=255, version=27045,
count=1, id=151,
count=1, id=258, version=27045,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=30795,
count=13, id=260, version=30034,
count=3, id=259, version=30034,
count=31, id=261, version=30034,
count=155, id=1, productName=Unmarked objects,
count=5, id=257, version=30034,
count=2, id=265, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=30154,
count=2, id=257, version=24234,
count=6, id=257, version=30795,
count=3, id=259, version=30034,
count=12, id=260, version=30034,
count=22, id=261, version=30034,
count=164, id=1, productName=Unmarked objects,
count=5, id=257, version=30034,
count=6, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Oct 26, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=261, version=28900,
count=1, id=263, version=28900,
count=26, id=260, version=28900,
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=260, version=30034,
count=10, id=259, version=30034,
count=19, id=257, version=28900,
count=1013, id=1, productName=Unmarked objects,
count=23, id=261, version=30034,
count=410, id=265, version=30034,
count=1, id=256, version=30034,
count=1, id=255, version=30034,
count=1, id=258, version=30034,
Detects PyLangGhost RAT
Unsigned PE
Checks for missing Authenticode signature.
count=15, id=259, version=30795,
count=142, id=261, version=30795,
count=23, id=260, version=30795,
count=35, id=261, version=30034,
count=15, id=260, version=30034,
count=22, id=259, version=30034,
count=11, id=257, version=30795,
count=222, id=1, productName=Unmarked objects,
count=96, id=261, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=14, id=257, version=30795,
count=11, id=260, version=30034,
count=5, id=259, version=30034,
count=20, id=261, version=30034,
count=1530, id=1, productName=Unmarked objects,
count=5, id=257, version=30034,
count=49, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=30154,
count=2, id=257, version=24234,
count=4, id=260, version=30795,
count=6, id=257, version=30795,
count=3, id=259, version=30034,
count=12, id=260, version=30034,
count=22, id=261, version=30034,
count=225, id=1, productName=Unmarked objects,
count=5, id=257, version=30034,
count=6, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=21, id=261, version=30034,
count=10, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30154,
count=13, id=260, version=30795,
count=2, id=257, version=24234,
count=9, id=257, version=30795,
count=333, id=1, productName=Unmarked objects,
count=81, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=1, id=253, version=28518,
count=19, id=261, version=30034,
count=10, id=260, version=30034,
count=2, id=259, version=30034,
count=1, id=260, version=30795,
count=2, id=257, version=24234,
count=11, id=257, version=30795,
count=221, id=1, productName=Unmarked objects,
count=13, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=32420,
count=12, id=261, version=32420,
count=10, id=260, version=32420,
count=1, id=259, version=32420,
count=2, id=257, version=24234,
count=5, id=257, version=30795,
count=234, id=1, productName=Unmarked objects,
count=1, id=264, version=32538,
count=1, id=256, version=32538,
count=1, id=255, version=32538,
count=1, id=258, version=32538,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=32420,
count=11, id=261, version=32420,
count=10, id=260, version=32420,
count=1, id=259, version=32420,
count=2, id=257, version=24234,
count=3, id=257, version=30795,
count=138, id=1, productName=Unmarked objects,
count=1, id=264, version=32538,
count=1, id=256, version=32538,
count=1, id=255, version=32538,
count=1, id=258, version=32538,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=2, id=257, version=30795,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=3, id=257, version=24234,
count=39, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=5, id=257, version=30795,
count=78, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=2, id=257, version=30795,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=2, id=259, version=30034,
count=2, id=257, version=30154,
count=3, id=257, version=24234,
count=67, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=5, id=257, version=30795,
count=131, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=2, id=257, version=30795,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=3, id=257, version=24234,
count=66, id=1, productName=Unmarked objects,
count=4, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=10, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=5, id=257, version=30795,
count=45, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=19, id=261, version=30034,
count=12, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=7, id=257, version=30795,
count=85, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=17, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=11, id=257, version=30795,
count=122, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=5, id=257, version=30795,
count=62, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=10, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=21, id=261, version=30034,
count=11, id=257, version=30795,
count=335, id=1, productName=Unmarked objects,
count=2, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=9, id=257, version=30795,
count=104, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=3, id=257, version=30795,
count=130, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=7, id=257, version=30795,
count=97, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=7, id=257, version=30795,
count=211, id=1, productName=Unmarked objects,
count=9, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=5, id=257, version=30795,
count=85, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=20, id=261, version=30034,
count=5, id=257, version=30795,
count=156, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=270, id=1, productName=Unmarked objects,
count=7, id=257, version=30795,
count=2, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=18, id=261, version=30034,
count=10, id=260, version=30034,
count=2, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=13, id=257, version=30795,
count=459, id=1, productName=Unmarked objects,
count=2, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=18, id=261, version=30034,
count=9, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=7, id=257, version=30795,
count=87, id=1, productName=Unmarked objects,
count=1, id=263, version=30795,
count=2, id=260, version=30795,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=5, id=257, version=30795,
count=135, id=1, productName=Unmarked objects,
count=2, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=5, id=257, version=30795,
count=73, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=5, id=257, version=30795,
count=49, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=18, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=7, id=257, version=30795,
count=172, id=1, productName=Unmarked objects,
count=7, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=2, id=257, version=30795,
count=12, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=3, id=257, version=24234,
count=84, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=2, id=257, version=30795,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=3, id=257, version=24234,
count=92, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=18, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=9, id=257, version=30795,
count=129, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=7, id=257, version=30795,
count=129, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=5, id=257, version=30795,
count=72, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=7, id=257, version=30795,
count=107, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=9, id=257, version=30795,
count=184, id=1, productName=Unmarked objects,
count=3, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=18, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=7, id=257, version=30795,
count=138, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=5, id=257, version=30795,
count=73, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=3, id=257, version=30795,
count=54, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=5, id=257, version=30795,
count=81, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=30154,
count=2, id=257, version=24234,
count=7, id=257, version=30795,
count=103, id=1, productName=Unmarked objects,
count=3, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Detects PyLangGhost RAT
Detects PyLangGhost RAT
Detects PyLangGhost RAT
Detects PyLangGhost RAT
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=18, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=4, id=257, version=30154,
count=3, id=260, version=30795,
count=2, id=257, version=24234,
count=1, id=262, version=30795,
count=9, id=257, version=30795,
count=140, id=1, productName=Unmarked objects,
count=10, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=4, id=257, version=30154,
count=2, id=257, version=24234,
count=7, id=257, version=30795,
count=92, id=1, productName=Unmarked objects,
count=2, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=17, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=7, id=260, version=30795,
count=2, id=257, version=24234,
count=4, id=257, version=30154,
count=7, id=257, version=30795,
count=152, id=1, productName=Unmarked objects,
count=17, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=18, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=5, id=260, version=30795,
count=2, id=257, version=24234,
count=4, id=257, version=30795,
count=7, id=257, version=30154,
count=138, id=1, productName=Unmarked objects,
count=44, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Detects PyLangGhost RAT
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=4, id=257, version=30154,
count=2, id=257, version=24234,
count=19, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=5, id=260, version=30795,
count=5, id=257, version=30795,
count=140, id=1, productName=Unmarked objects,
count=15, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=18, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=1, id=260, version=30795,
count=2, id=257, version=24234,
count=4, id=257, version=30154,
count=7, id=257, version=30795,
count=109, id=1, productName=Unmarked objects,
count=3, id=262, version=30795,
count=11, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=18, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=4, id=257, version=30154,
count=2, id=260, version=30795,
count=2, id=257, version=24234,
count=1, id=261, version=30795,
count=7, id=257, version=30795,
count=106, id=1, productName=Unmarked objects,
count=12, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=3, id=260, version=30795,
count=2, id=257, version=24234,
count=4, id=257, version=30154,
count=7, id=257, version=30795,
count=81, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=18, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=9, id=260, version=30795,
count=2, id=257, version=24234,
count=4, id=257, version=30154,
count=7, id=257, version=30795,
count=135, id=1, productName=Unmarked objects,
count=10, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=17, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=4, id=257, version=30154,
count=2, id=260, version=30795,
count=2, id=257, version=24234,
count=7, id=257, version=30795,
count=125, id=1, productName=Unmarked objects,
count=7, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=19, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=4, id=257, version=30154,
count=3, id=260, version=30795,
count=2, id=257, version=24234,
count=7, id=257, version=30795,
count=164, id=1, productName=Unmarked objects,
count=25, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=7, id=260, version=30795,
count=2, id=257, version=24234,
count=4, id=257, version=30154,
count=20, id=261, version=30034,
count=7, id=257, version=30795,
count=168, id=1, productName=Unmarked objects,
count=19, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=18, id=261, version=30034,
count=10, id=260, version=30034,
count=2, id=259, version=30034,
count=9, id=260, version=30795,
count=2, id=257, version=24234,
count=4, id=257, version=30154,
count=1, id=262, version=30795,
count=9, id=257, version=30795,
count=245, id=1, productName=Unmarked objects,
count=71, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=16, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=24234,
count=4, id=257, version=30154,
count=5, id=257, version=30795,
count=88, id=1, productName=Unmarked objects,
count=1, id=263, version=30795,
count=6, id=265, version=30154,
count=1, id=256, version=30154,
count=1, id=258, version=30154,
Detects PyLangGhost RAT
Detects PyLangGhost RAT
Detects PyLangGhost RAT
Detects PyLangGhost RAT
Detects PyLangGhost RAT
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=18, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=12, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=46, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=1, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=15, id=199, version=41118,
count=11, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=10, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=11, id=257, version=25203,
count=345, id=1, productName=Unmarked objects,
count=193, id=264, version=26431,
count=1, id=256, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 27, 2018
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2017 v15.6.6 build 26131, version=26131,
count=1, id=259, productName=VS2017 v15.6.6 build 26131, version=26131,
count=18, id=261, productName=VS2017 v15.6.6 build 26131, version=26131,
count=12, id=260, productName=VS2017 v15.6.6 build 26131, version=26131,
count=3, id=257, productName=VS2017 v15.7.4 build 26431, version=26431,
count=2, id=257, version=25203,
count=46, id=1, productName=Unmarked objects,
count=1, id=264, version=26431,
count=1, id=255, productName=VS2017 v15.7.4 build 26431, version=26431,
count=1, id=258, productName=VS2017 v15.7.4 build 26431, version=26431,
Detects PyLangGhost RAT
Detects PyLangGhost RAT
Oct 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Oct 11, 2017
count=2, id=239, version=40116,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=41, id=1, productName=Unmarked objects,
count=16, id=260, version=25805,
count=19, id=259, version=25805,
count=4, id=261, version=25805,
count=25, id=264, version=25805,
count=1, id=256, version=25805,
count=1, id=255, version=25805,
count=1, id=258, version=25805,