ยซ๐๐๐๐๐ต๐๐๐๐๐๐๐๐ข๐ณ0๐๐ฝ๐ร๐๐ยซยซ4405ยปยป_ยป.7z
- SHA256 4ae7549d216931a6414b8427bbd8ed2e2e79d3a61ba5cda8e2e0006e7cd6002c
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20251016-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10ltsc2021-20251017-en
hijackloader
%APPDATA%\com_adv_foundation_dbg
%windir%\SysWOW64\rasapi32.dll
| resource | yara_rule |
|---|---|
| static1/unpack001/Shandcloond.gqws | family_hijackloader |
File was altered after it was signed.
| resource |
|---|
| unpack001/lib_TSMp4FrameScanSDK.dll |
File was Codesigned using an insecure algorithm.
| resource |
|---|
| unpack001/BugSplat64.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Library/_Fs.dll |
| unpack001/Updates/bin/ahost.exe |
| unpack001/Updates/bin/antiword.exe |
| unpack001/Updates/pythoncom26.dll |
| unpack001/Updates/qtiff4.dll |
Codesigned binary was signed by an untrusted entity.
| resource |
|---|
| unpack001/Library/MOG_Framework_2.2.14_vc10.dll |
| unpack001/Library/MSHY7EN.DLL |
| unpack001/Library/MSODCW.DLL |
| unpack001/Library/ONBttnWD.dll |
| unpack001/Updates/AdobePIP.dll |
| unpack001/Updates/VSTOLoader.dll |
| unpack001/Updates/mc_trans_video_imagescaler.dll |
| unpack001/Updates/mit2ms.exe |
Insecure Codesign Algorithm
File was Codesigned using an insecure algorithm.
Aug 5, 2020
CN=BugSplat,O=BugSplat,L=Henniker,ST=New Hampshire,C=US
CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US
CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US
count=5, id=259, version=26213,
count=157, id=261, version=26213,
count=16, id=260, version=26706,
count=8, id=259, version=26706,
count=45, id=261, version=26706,
count=11, id=260, version=26213,
count=19, id=257, version=26213,
count=170, id=1, productName=Unmarked objects,
count=7, id=261, version=27041,
count=1, id=256, version=27041,
count=1, id=255, version=27041,
count=1, id=151,
count=1, id=258, version=27041,
Mar 3, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Mar 3, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
May 29, 2015
count=1, id=135, version=30729,
count=2, id=152, version=20115,
count=2, id=158, productName=VS2010 build 30319, version=30319,
count=14, id=170, productName=VS2010 build 30319, version=30319,
count=11, id=171, productName=VS2010 build 30319, version=30319,
count=5, id=156, productName=VS2010 build 30319, version=30319,
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=227, id=1, productName=Unmarked objects,
count=31, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Mar 30, 2010
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=7, id=123, productName=VS2005 build 50727, version=50727,
count=120, id=1, productName=Unmarked objects,
count=117, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=81, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Mar 6, 2010
count=7, id=132, productName=VS2008 build 21022, version=21022,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=150, version=20413,
count=2, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=14, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=109, productName=VS2005 build 50727, version=50727,
count=27, id=123, productName=VS2005 build 50727, version=50727,
count=432, id=1, productName=Unmarked objects,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=122, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Oct 1, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=31823,
count=34, id=261, version=31823,
count=8, id=260, version=31823,
count=4, id=259, version=31823,
count=15, id=239, version=40116,
count=309, id=1, productName=Unmarked objects,
count=26, id=265, version=31940,
count=1, id=256, version=31940,
count=1, id=255, version=31940,
count=1, id=258, version=31940,
Sep 30, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Sep 30, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 6, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Aug 30, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Aug 21, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Oct 3, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 21, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Oct 3, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 6, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Oct 1, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Feb 28, 2010
count=7, id=132, productName=VS2008 build 21022, version=21022,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=150, version=20413,
count=14, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=109, productName=VS2005 build 50727, version=50727,
count=15, id=123, productName=VS2005 build 50727, version=50727,
count=477, id=1, productName=Unmarked objects,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=148, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
May 10, 2023
CN=Windows Developer Tools Component,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 10, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=8, id=260, version=29804,
count=4, id=259, version=29804,
count=6, id=257, version=29804,
count=4, id=257, version=27412,
count=27, id=261, version=29804,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=250, id=1, productName=Unmarked objects,
count=12, id=265, version=29913,
count=1, id=256, productName=VS2019 v16.9.2 build 29913, version=29913,
count=1, id=255, productName=VS2019 v16.9.2 build 29913, version=29913,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.9.2 build 29913, version=29913,
Apr 25, 2024
SERIALNUMBER=CHE-113.666.835,CN=Acronis International GmbH,O=Acronis International GmbH,L=Schaffhausen,C=CH,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130c53636861666668617573656e,1.3.6.1.4.1.311.60.2.1.3=#13024348
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=CHE-113.666.835,CN=Acronis International GmbH,O=Acronis International GmbH,L=Schaffhausen,C=CH,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130c53636861666668617573656e,1.3.6.1.4.1.311.60.2.1.3=#13024348
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=12, id=223, productName=VS2013 build 21005, version=21005,
count=13, id=224, productName=VS2013 build 21005, version=21005,
count=4, id=221, productName=VS2013 build 21005, version=21005,
count=5, id=225, productName=VS2013 build 21005, version=21005,
count=4, id=221, productName=VS2013 UPD5 build 40629, version=40629,
count=5, id=203, version=65501,
count=1276, id=1, productName=Unmarked objects,
count=221, id=225, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Mar 3, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Mar 3, 2022
CN=Corel Corporation,OU=IT Infrastructure,O=Corel Corporation,L=Ottawa,ST=Ontario,C=CA
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=150, version=20413,
count=2, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=12, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=129, version=50727,
count=12, id=123, productName=VS2005 build 50727, version=50727,
count=111, id=1, productName=Unmarked objects,
count=22, id=138, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=151,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Unsigned PE
Checks for missing Authenticode signature.
Apr 19, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 19, 2018
Dec 19, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=29, id=259, version=28900,
count=197, id=261, version=28900,
count=43, id=260, version=28900,
count=15, id=260, version=33808,
count=20, id=259, version=33808,
count=93, id=261, version=33808,
count=7, id=257, version=28900,
count=170, id=1, productName=Unmarked objects,
count=25, id=259, version=34120,
count=204, id=265, version=34120,
count=1, id=256, version=34120,
count=1, id=255, version=34120,
count=1, id=151,
count=1, id=258, version=34120,
Nov 3, 2023
CN=Andrey Borodin,O=Andrey Borodin,L=Voronezh,C=RU
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=14, id=259, version=30795,
count=137, id=261, version=30795,
count=25, id=260, version=30795,
count=2, id=257, version=30795,
count=33, id=261, version=31935,
count=14, id=260, version=31935,
count=9, id=259, version=31935,
count=3, id=257, version=32215,
count=119, id=1, productName=Unmarked objects,
count=10, id=260, version=32215,
count=1, id=256, version=32215,
count=1, id=258, version=32215,
May 10, 2023
CN=Windows Phone,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Phone Production PCA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=42, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=29395,
count=138, id=1, productName=Unmarked objects,
count=7, id=257, version=32420,
count=8, id=260, version=32420,
count=4, id=259, version=32420,
count=49, id=261, version=32420,
count=1, id=256, version=32420,
count=1, id=255, version=32420,
count=1, id=258, version=32420,
Aug 7, 2023
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Aug 7, 2023
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=11, id=259, version=26715,
count=27, id=260, version=26715,
count=177, id=261, version=26715,
count=9, id=259, version=26706,
count=129, id=261, version=26706,
count=36, id=260, version=26706,
count=2, id=257, version=26715,
count=2, id=257, version=30148,
count=5, id=257, version=27045,
count=161, id=1, productName=Unmarked objects,
count=50, id=261, version=27045,
count=1, id=255, version=27045,
count=1, id=151,
count=1, id=258, version=27045,
Detects HijackLoader (aka IDAT Loader)
May 30, 2023
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
May 30, 2023
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=14, id=241, version=40116,
count=166, id=243, version=40116,
count=27, id=242, version=40116,
count=5, id=199, version=41118,
count=9, id=259, version=26706,
count=120, id=261, version=26706,
count=32, id=260, version=26706,
count=29, id=261, version=27045,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=163, id=1, productName=Unmarked objects,
count=1, id=265, version=27045,
count=1, id=256, version=27045,
count=1, id=255, version=27045,
count=1, id=151,
count=1, id=258, version=27045,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
May 29, 2015
count=4, id=221, version=20806,
count=3, id=199, version=41118,
count=1, id=223, version=20806,
count=12, id=224, version=20806,
count=5, id=225, version=20806,
count=15, id=203, version=65501,
count=280, id=1, productName=Unmarked objects,
count=30, id=228, version=31101,
count=1, id=220, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=3, id=151,
count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,
Apr 17, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Oct 1, 2023
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 21, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Aug 29, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 19, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 6, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 26, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=31940,
count=1, id=258, version=31940,
Nov 6, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,C=FI
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=28619,
count=2, id=257, version=27412,
count=21, id=261, version=28619,
count=8, id=260, version=28619,
count=3, id=259, version=28619,
count=7, id=257, productName=VS2019 v16.6.2 build 28806, version=28806,
count=730, id=1, productName=Unmarked objects,
count=13, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=256, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=255, productName=VS2019 v16.6.2 build 28806, version=28806,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.6.2 build 28806, version=28806,
Dec 9, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Mar 25, 2010
count=6, id=170, version=20521,
count=3, id=171, version=20521,
count=2, id=156, version=20430,
count=5, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=150, version=20413,
count=2, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=12, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=27, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=306, id=1, productName=Unmarked objects,
count=57, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Oct 30, 2023
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Oct 30, 2023
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
May 29, 2015
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=82, id=1, productName=Unmarked objects,
count=10, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=132, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=4, productName=Unmarked objects (old),
count=31, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
Jun 19, 2013
count=2, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=47, id=1, productName=Unmarked objects,
count=17, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Sep 23, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=7, id=259, version=29395,
count=135, id=261, version=29395,
count=10, id=260, version=29395,
count=39, id=261, version=32533,
count=15, id=260, version=32533,
count=9, id=259, version=32533,
count=3, id=257, version=29395,
count=88, id=1, productName=Unmarked objects,
count=15, id=265, version=32533,
count=1, id=256, version=32533,
count=1, id=255, version=32533,
count=1, id=258, version=32533,
May 6, 2023
CN=Apple Inc.,O=Apple Inc.,L=Cupertino,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Apple Inc.,O=Apple Inc.,L=Cupertino,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
May 6, 2023
CN=Apple Inc.,O=Apple Inc.,L=Cupertino,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Apple Inc.,O=Apple Inc.,L=Cupertino,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=260, version=26706,
count=3, id=259, version=26706,
count=15, id=261, version=26706,
count=4, id=257, version=26706,
count=3, id=257, version=25711,
count=80, id=1, productName=Unmarked objects,
count=1, id=261, version=27048,
count=27, id=265, version=27048,
count=1, id=260, version=27048,
count=1, id=259, version=27048,
count=1, id=256, version=27048,
count=1, id=255, version=27048,
count=1, id=151,
count=1, id=258, version=27048,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=150, version=20413,
count=1, id=149, productName=VS2008 build 21022, version=21022,
count=8, id=131, productName=VS2008 build 21022, version=21022,
count=12, id=109, productName=VS2005 build 50727, version=50727,
count=6, id=147, productName=VS2008 build 21022, version=21022,
count=9, id=123, productName=VS2005 build 50727, version=50727,
count=320, id=1, productName=Unmarked objects,
count=81, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=2, id=126, version=50327,
count=1, id=125, productName=VS2005 build 50727, version=50727,
count=7, id=123, productName=VS2005 build 50727, version=50727,
count=141, id=1, productName=Unmarked objects,
count=6, id=110, productName=VS2005 build 50727, version=50727,
count=46, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
May 30, 2023
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
May 30, 2023
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=10, id=259, version=26715,
count=18, id=260, version=26715,
count=155, id=261, version=26715,
count=14, id=260, version=30034,
count=10, id=259, version=30034,
count=72, id=261, version=30034,
count=4, id=257, version=26715,
count=3, id=257, version=27045,
count=163, id=1, productName=Unmarked objects,
count=1, id=261, version=30148,
count=1, id=256, version=30148,
count=1, id=255, version=30148,
count=1, id=151,
count=1, id=258, version=30148,
Codesign digest Mismatch
File was altered after it was signed.
Aug 7, 2023
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Aug 7, 2023
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Tenorshare Co.\, Ltd.,O=Tenorshare Co.\, Ltd.,L=Wan Chai,C=HK
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=11, id=259, version=26715,
count=20, id=260, version=26715,
count=174, id=261, version=26715,
count=9, id=259, version=26706,
count=120, id=261, version=26706,
count=33, id=260, version=26706,
count=4, id=257, version=26715,
count=2, id=257, version=27041,
count=3, id=257, version=27045,
count=166, id=1, productName=Unmarked objects,
count=8, id=261, version=27045,
count=1, id=256, version=27045,
count=1, id=255, version=27045,
count=1, id=151,
count=1, id=258, version=27045,