D0WNL0AD_SETUP_FILE (PASS_2113).zip
- SHA256 4e3cff8898a63a59841a8f59c1dd11056aa7a3e5edc3ac5cecc1c198296e00b6
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win11-20260130-es
File was altered after it was signed.
| resource |
|---|
| unpack004/libvlccore.dll |
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
| resource |
|---|
| unpack004/libvlccore.dll |
| unpack004/Sync/libcrypto-3.dll |
| unpack004/Sync/jsoncpp.dll |
File was codesigned using an insecure algorithm.
| resource |
|---|
| unpack004/Sync/libcrypto-3.dll |
| unpack004/defaults/x64/Sync.dll |
| unpack004/defaults/x64/libssl-3.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack004/Sync/AutoSync64.dll |
| unpack004/Sync/IDSyncIntIcon64.dll |
| unpack004/Sync/jsoncpp.dll |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack004/defaults/x64/libeay32.dll |
| unpack004/defaults/x64/mfc100u.dll |
| unpack004/defaults/x64/mfcm100u.dll |
| unpack004/defaults/x64/msvcp100.dll |
| unpack004/defaults/x64/msvcr100.dll |
| unpack004/defaults/x64/ssleay32.dll |
Dec 31, 2025
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Dec 31, 2025
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Unsigned PE
Checks for missing Authenticode signature.
count=170, id=1, productName=Unmarked objects,
count=17, id=123, productName=VS2005 build 50727, version=50727,
count=1, id=126, version=50327,
count=2, id=125, productName=VS2005 build 50727, version=50727,
count=1, id=113, version=50727,
count=19, id=110, productName=VS2005 build 50727, version=50727,
count=14, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Jul 22, 2025
CN=IDrive\, Inc.,O=IDrive\, Inc.,L=Calabasas,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=IDrive\, Inc.,O=IDrive\, Inc.,L=Calabasas,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=241, version=40116,
count=180, id=243, version=40116,
count=31, id=242, version=40116,
count=2, id=261, version=23013,
count=10, id=206, version=65501,
count=1, id=207, version=65501,
count=2, id=208, version=65501,
count=33, id=203, version=65501,
count=789, id=1, productName=Unmarked objects,
count=37, id=260, version=24123,
count=10, id=259, version=24123,
count=364, id=261, version=24123,
count=1, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=10, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Jan 28, 2026
CN=IDrive\, Inc.,O=IDrive\, Inc.,L=Calabasas,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=IDrive\, Inc.,O=IDrive\, Inc.,L=Calabasas,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=3, id=259, version=35207,
count=13, id=260, version=35207,
count=46, id=261, version=35207,
count=6, id=257, version=35207,
count=2, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,
count=4, id=257, version=30157,
count=25, id=257, version=33140,
count=619, id=1, productName=Unmarked objects,
count=128, id=261, version=35214,
count=1, id=255, version=35214,
count=1, id=151,
count=1, id=258, version=35214,
Jan 28, 2026
CN=IDrive\, Inc.,O=IDrive\, Inc.,L=Calabasas,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=IDrive\, Inc.,O=IDrive\, Inc.,L=Calabasas,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=3, id=259, version=35207,
count=13, id=260, version=35207,
count=46, id=261, version=35207,
count=6, id=257, version=35207,
count=2, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,
count=4, id=257, version=30157,
count=25, id=257, version=33140,
count=619, id=1, productName=Unmarked objects,
count=128, id=261, version=35214,
count=1, id=255, version=35214,
count=1, id=151,
count=1, id=258, version=35214,
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=24, id=261, version=30034,
count=10, id=260, version=30034,
count=3, id=259, version=30034,
count=5, id=257, version=30034,
count=2, id=257, version=27412,
count=98, id=1, productName=Unmarked objects,
count=3, id=261, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Dec 5, 2025
CN=IDrive\, Inc.,O=IDrive\, Inc.,L=Calabasas,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=IDrive\, Inc.,O=IDrive\, Inc.,L=Calabasas,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33808,
count=11, id=259, version=33808,
count=10, id=260, version=33808,
count=11, id=261, version=33808,
count=188, id=1, productName=Unmarked objects,
count=11, id=257, version=30795,
count=23, productName=Unmarked objects (old),
count=969, id=260, version=34123,
count=1, id=256, version=34123,
count=1, id=255, version=34123,
count=1, id=258, version=34123,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Oct 9, 2025
CN=IDrive\, Inc.,O=IDrive\, Inc.,L=Calabasas,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=IDrive\, Inc.,O=IDrive\, Inc.,L=Calabasas,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Jul 29, 2024
SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=13, id=259, version=30795,
count=184, id=261, version=30795,
count=18, id=260, version=30034,
count=22, id=259, version=30034,
count=81, id=261, version=30034,
count=24, id=260, version=30795,
count=13, id=257, version=30795,
count=126, id=1, productName=Unmarked objects,
count=8, id=265, version=30148,
count=1, id=255, version=30148,
count=1, id=151,
count=1, id=258, version=30148,
Sep 16, 2022
SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=13, id=259, version=27412,
count=185, id=261, version=27412,
count=22, id=260, version=27412,
count=18, id=260, version=30034,
count=23, id=259, version=30034,
count=77, id=261, version=30034,
count=11, id=257, version=27412,
count=135, id=1, productName=Unmarked objects,
count=3, id=265, version=30146,
count=1, id=255, version=30146,
count=1, id=151,
count=1, id=258, version=30146,
Jul 29, 2024
SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=23638777,CN=ASUSTeK COMPUTER INC.,O=ASUSTeK COMPUTER INC.,L=Beitou District,ST=Taipei City,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=30, id=259, version=27412,
count=9, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=37, id=260, version=27412,
count=213, id=261, version=27412,
count=1, id=262, version=27412,
count=41, id=257, version=27412,
count=876, id=1, productName=Unmarked objects,
count=33, id=260, version=26706,
count=25, id=259, version=26706,
count=372, id=261, version=26706,
count=21, id=265, version=27049,
count=1, id=256, version=27049,
count=1, id=255, version=27049,
count=1, id=151,
count=1, id=258, version=27049,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=9, id=12, version=7291,
count=5, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=108, id=1, productName=Unmarked objects,
count=7, id=19, version=8034,
count=442, id=10, version=8966,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Dec 5, 2025
CN=IDrive\, Inc.,O=IDrive\, Inc.,L=Calabasas,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=IDrive\, Inc.,O=IDrive\, Inc.,L=Calabasas,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33808,
count=8, id=259, version=33808,
count=10, id=260, version=33808,
count=12, id=261, version=33808,
count=4, id=257, version=30795,
count=3, id=257, version=34123,
count=630, id=1, productName=Unmarked objects,
count=107, id=260, version=34123,
count=1, id=256, version=34123,
count=1, id=255, version=34123,
count=1, id=258, version=34123,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Apr 22, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=156, productName=VS2010 build 30319, version=30319,
count=1, id=152, version=20115,
count=10, id=158, productName=VS2010 build 30319, version=30319,
count=13, id=170, productName=VS2010 build 30319, version=30319,
count=12, id=171, productName=VS2010 build 30319, version=30319,
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1002, id=1, productName=Unmarked objects,
count=410, id=175, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Oct 26, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=261, version=28900,
count=1, id=263, version=28900,
count=26, id=260, version=28900,
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=260, version=30034,
count=10, id=259, version=30034,
count=19, id=257, version=28900,
count=1013, id=1, productName=Unmarked objects,
count=23, id=261, version=30034,
count=410, id=265, version=30034,
count=1, id=256, version=30034,
count=1, id=255, version=30034,
count=1, id=258, version=30034,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Apr 22, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=5, id=156, productName=VS2010 build 30319, version=30319,
count=1, id=152, version=20115,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=12, id=170, productName=VS2010 build 30319, version=30319,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=143, id=1, productName=Unmarked objects,
count=21, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Apr 22, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=155, id=1, productName=Unmarked objects,
count=1, id=152, version=20115,
count=8, id=158, productName=VS2010 build 30319, version=30319,
count=48, id=171, productName=VS2010 build 30319, version=30319,
count=59, id=170, productName=VS2010 build 30319, version=30319,
count=5, id=175, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Oct 26, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=28900,
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=200, id=1, productName=Unmarked objects,
count=3, id=257, version=30034,
count=11, id=260, version=30034,
count=8, id=259, version=30034,
count=141, id=261, version=30034,
count=1, id=256, version=30034,
count=1, id=255, version=30034,
count=1, id=258, version=30034,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Apr 22, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=179, id=1, productName=Unmarked objects,
count=490, id=170, productName=VS2010 build 30319, version=30319,
count=85, id=158, productName=VS2010 build 30319, version=30319,
count=52, id=175, version=30319,
count=184, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=2, id=19, version=8034,
count=1, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=207, id=1, productName=Unmarked objects,
count=36, id=10, version=8966,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Oct 28, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Oct 28, 2024
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=41, id=1, productName=Unmarked objects,
count=22, id=260, version=34321,
count=28, id=261, version=34321,
count=19, id=259, version=34321,
count=1, id=256, version=34321,
count=1, id=255, version=34321,
count=1, id=258, version=34321,
Dec 31, 2025
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Dec 31, 2025
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Dec 31, 2025
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Dec 31, 2025
CN=VideoLAN,O=VideoLAN,L=Paris,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Codesign digest Mismatch
File was altered after it was signed.
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Apr 21, 2026
SERIALNUMBER=91510107765360104N,CN=CHENGDU YIWO Tech Development Co.\, Ltd.,O=CHENGDU YIWO Tech Development Co.\, Ltd.,L=Chengdu,ST=Sichuan,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e5775686f75204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13075369636875616e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=91510107765360104N,CN=CHENGDU YIWO Tech Development Co.\, Ltd.,O=CHENGDU YIWO Tech Development Co.\, Ltd.,L=Chengdu,ST=Sichuan,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e5775686f75204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13075369636875616e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Jun 10, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 10, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=203, version=65501,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=40, id=1, productName=Unmarked objects,
count=16, id=260, version=24123,
count=19, id=259, version=24123,
count=4, id=261, version=24123,
count=24, id=264, version=24123,
count=1, id=256, version=24123,
count=1, id=255, version=24123,
count=1, id=258, version=24123,