Collapse RAT v1.5 Cracked(Source Code).zip
- SHA256 8fffa826434b5bc8af0801ae4c6dbc78aa162088173945d94b5084315b645568
Overview
overview
10Static
static
10Collapse R...e).zip
windows10-2004-x64
1Collapse R...e).zip
windows11-21h2-x64
1Collapse R...ll.xml
windows10-2004-x64
3Collapse R...ll.xml
windows11-21h2-x64
4Collapse R...ion.db
windows10-2004-x64
3Collapse R...ion.db
windows11-21h2-x64
3Collapse R...es.vbs
windows10-2004-x64
1Collapse R...es.vbs
windows11-21h2-x64
1Collapse R...te.p12
windows10-2004-x64
1Collapse R...te.p12
windows11-21h2-x64
1Collapse R...xe.xml
windows10-2004-x64
3Collapse R...xe.xml
windows11-21h2-x64
4Collapse R...nt.pdb
windows10-2004-x64
3Collapse R...nt.pdb
windows11-21h2-x64
3Collapse R...er.p12
windows10-2004-x64
1Collapse R...er.p12
windows11-21h2-x64
1Collapse R...ffline
windows10-2004-x64
1Collapse R...ffline
windows11-21h2-x64
1Collapse R...online
windows10-2004-x64
1Collapse R...online
windows11-21h2-x64
1Collapse R...ressed
windows10-2004-x64
3Collapse R...ressed
windows11-21h2-x64
3Collapse R...ressed
windows10-2004-x64
3Collapse R...ressed
windows11-21h2-x64
3Collapse R...ressed
windows10-2004-x64
3Collapse R...ressed
windows11-21h2-x64
3Collapse R...ressed
windows10-2004-x64
3Collapse R...ressed
windows11-21h2-x64
3Collapse R...ressed
windows10-2004-x64
3Collapse R...ressed
windows11-21h2-x64
3Collapse R...ressed
windows10-2004-x64
3Collapse R...ressed
windows11-21h2-x64
3Behavioral task
behavioral1
Sample
Collapse RAT v1.5 Cracked(Source Code).zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Collapse RAT v1.5 Cracked(Source Code).zip
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Collapse RAT Source code/bin/Debug/net48/Plugins/Stealer.dll.xml
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Collapse RAT Source code/bin/Debug/net48/Plugins/Stealer.dll.xml
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
Collapse RAT Source code/bin/Debug/net48/Plugins/ip2region.db
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Collapse RAT Source code/bin/Debug/net48/Plugins/ip2region.db
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
Collapse RAT Source code/bin/Debug/net48/Resources.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Collapse RAT Source code/bin/Debug/net48/Resources.vbs
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
Collapse RAT Source code/bin/Debug/net48/ServerCertificate.p12
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Collapse RAT Source code/bin/Debug/net48/ServerCertificate.p12
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
Collapse RAT Source code/bin/Debug/net48/Stub/Client.exe.xml
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Collapse RAT Source code/bin/Debug/net48/Stub/Client.exe.xml
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
Collapse RAT Source code/bin/Debug/net48/Stub/Client.pdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Collapse RAT Source code/bin/Debug/net48/Stub/Client.pdb
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
Collapse RAT Source code/bin/Debug/net48/VenomServer.p12
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Collapse RAT Source code/bin/Debug/net48/VenomServer.p12
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
Collapse RAT Source code/bin/Debug/net48/offline
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Collapse RAT Source code/bin/Debug/net48/offline
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
Collapse RAT Source code/bin/Debug/net48/online
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Collapse RAT Source code/bin/Debug/net48/online
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
Collapse RAT Source code/costura.bouncycastle.crypto.dll.compressed
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Collapse RAT Source code/costura.bouncycastle.crypto.dll.compressed
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
Collapse RAT Source code/costura.cgeoip.dll.compressed
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Collapse RAT Source code/costura.cgeoip.dll.compressed
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
Collapse RAT Source code/costura.costura.dll.compressed
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Collapse RAT Source code/costura.costura.dll.compressed
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
Collapse RAT Source code/costura.costura.pdb.compressed
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Collapse RAT Source code/costura.costura.pdb.compressed
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
Collapse RAT Source code/costura.discord.net.core.dll.compressed
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Collapse RAT Source code/costura.discord.net.core.dll.compressed
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
Collapse RAT Source code/costura.discordrpc.dll.compressed
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Collapse RAT Source code/costura.discordrpc.dll.compressed
Resource
win11-20260513-en
asyncrat
Collapse RAT & HVNC 1.0.0
uxorrbindixq
1
false
127.0.0.1
StormKitty is an open source info stealer written in C#.
| resource | yara_rule |
|---|---|
| static1/unpack001/Collapse RAT Source code/bin/Debug/net48/Client.exe | family_asyncrat |
| static1/unpack001/Collapse RAT Source code/bin/Debug/net48/Stub/Client.exe | family_asyncrat |
| static1/unpack001/Collapse RAT Source code/bin/Debug/net48/Stub/ClientAny.exe | family_asyncrat |
| static1/unpack001/Collapse RAT Source code/bin/Debug/net48/Stub/Clientx86.exe | family_asyncrat |
| static1/unpack001/Collapse RAT v1.5 Cracked/Client.exe | family_asyncrat |
| static1/unpack001/Collapse RAT v1.5 Cracked/Stub/Client.exe | family_asyncrat |
| static1/unpack001/Collapse RAT v1.5 Cracked/Stub/ClientAny.exe | family_asyncrat |
| static1/unpack001/Collapse RAT v1.5 Cracked/Stub/Clientx86.exe | family_asyncrat |
| resource | yara_rule |
|---|---|
| static1/unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/Recovery.dll | family_stormkitty |
| static1/unpack001/Collapse RAT v1.5 Cracked/Plugins/Recovery.dll | family_stormkitty |
Detects ConfuserEx .NET packer.
| resource | yara_rule |
|---|---|
| static1/unpack001/Collapse RAT Source code/bin/Debug/net48/Siticone.Desktop.UI.dll | ConfuserEx |
| static1/unpack001/Collapse RAT v1.5 Cracked/Siticone.Desktop.UI.dll | ConfuserEx |
File was codesigned using an insecure algorithm.
| resource |
|---|
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/x64/SQLite.Interop.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/x86/SQLite.Interop.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/x64/SQLite.Interop.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/x86/SQLite.Interop.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Collapse RAT Source code/bin/Debug/net48/BouncyCastle.Crypto.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Client.exe |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Collapse.exe |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Costura.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Data.Desktop.v22.1.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Data.v22.1.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Drawing.v22.1.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Printing.v22.1.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Utils.v22.1.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.WinRTPresenter.Launcher.exe |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraBars.v22.1.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraEditors.v22.1.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraGrid.v22.1.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraLayout.v22.1.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Discord.Net.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DiscordRPC.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DotNetZip.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/FastColoredTextBox.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/IP2Region.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/IconExtractor.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Keylogger.exe |
| unpack001/Collapse RAT Source code/bin/Debug/net48/MessagePackLib.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Pastel.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/PeNet.Asn1.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/PeNet.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/Audio.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/Discord.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/Extra.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/FileManager.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/FileSearcher.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/Fun.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/HVNCStub.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/Information.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/Keylogger.exe |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/Logger.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/Miscellaneous.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/Netstat.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/Options.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/ProcessManager.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/Recovery.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/Regedit.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/RemoteCamera.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/RemoteDesktop.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/ReverseProxy.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/SendFile.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/SendMemory.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/Stealer.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Plugins/hvnc.exe |
| unpack001/Collapse RAT Source code/bin/Debug/net48/SMDiagnostics.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Stub/Client.exe |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Stub/ClientAny.exe |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Stub/Clientx64.exe |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Stub/Clientx86.exe |
| unpack001/Collapse RAT Source code/bin/Debug/net48/System.ServiceModel.Internals.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Vestris.ResourceLib.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/cGeoIp.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/dnlib.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/protobuf-net.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/protobuf-net.dll |
| unpack001/Collapse RAT Source code/obj/Debug/net48/Collapse.exe |
| unpack001/Collapse RAT v1.5 Cracked/BouncyCastle.Crypto.dll |
| unpack001/Collapse RAT v1.5 Cracked/Client.exe |
| unpack001/Collapse RAT v1.5 Cracked/Collapse.exe |
| unpack001/Collapse RAT v1.5 Cracked/Costura.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Data.Desktop.v22.1.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Data.v22.1.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Drawing.v22.1.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Printing.v22.1.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Utils.v22.1.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.WinRTPresenter.Launcher.exe |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraBars.v22.1.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraEditors.v22.1.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraGrid.v22.1.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraLayout.v22.1.dll |
| unpack001/Collapse RAT v1.5 Cracked/Discord.Net.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DiscordRPC.dll |
| unpack001/Collapse RAT v1.5 Cracked/DotNetZip.dll |
| unpack001/Collapse RAT v1.5 Cracked/FastColoredTextBox.dll |
| unpack001/Collapse RAT v1.5 Cracked/IP2Region.dll |
| unpack001/Collapse RAT v1.5 Cracked/IconExtractor.dll |
| unpack001/Collapse RAT v1.5 Cracked/Keylogger.exe |
| unpack001/Collapse RAT v1.5 Cracked/MessagePackLib.dll |
| unpack001/Collapse RAT v1.5 Cracked/Pastel.dll |
| unpack001/Collapse RAT v1.5 Cracked/PeNet.Asn1.dll |
| unpack001/Collapse RAT v1.5 Cracked/PeNet.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/Audio.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/Discord.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/Extra.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/FileManager.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/FileSearcher.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/Fun.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/HVNCStub.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/Information.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/Keylogger.exe |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/Logger.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/Miscellaneous.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/Netstat.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/Options.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/ProcessManager.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/Recovery.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/Regedit.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/RemoteCamera.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/RemoteDesktop.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/ReverseProxy.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/SendFile.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/SendMemory.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/Stealer.dll |
| unpack001/Collapse RAT v1.5 Cracked/Plugins/hvnc.exe |
| unpack001/Collapse RAT v1.5 Cracked/SMDiagnostics.dll |
| unpack001/Collapse RAT v1.5 Cracked/Stub/Client.exe |
| unpack001/Collapse RAT v1.5 Cracked/Stub/ClientAny.exe |
| unpack001/Collapse RAT v1.5 Cracked/Stub/Clientx64.exe |
| unpack001/Collapse RAT v1.5 Cracked/Stub/Clientx86.exe |
| unpack001/Collapse RAT v1.5 Cracked/System.ServiceModel.Internals.dll |
| unpack001/Collapse RAT v1.5 Cracked/Vestris.ResourceLib.dll |
| unpack001/Collapse RAT v1.5 Cracked/cGeoIp.dll |
| unpack001/Collapse RAT v1.5 Cracked/dnlib.dll |
| unpack001/Collapse RAT v1.5 Cracked/protobuf-net.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/protobuf-net.dll |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Charts.v22.2.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.CodeParser.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Data.Desktop.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Data.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.DataAccess.v22.2.UI.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.DataAccess.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.DataVisualization.v22.2.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Diagram.v22.2.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Dialogs.v22.2.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Drawing.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Images.v22.1.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Images.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Mvvm.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Office.v22.1.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Office.v22.2.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Pdf.v22.1.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Pdf.v22.1.Drawing.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Pdf.v22.2.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Pdf.v22.2.Drawing.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.PivotGrid.v22.2.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Printing.v22.2.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.RichEdit.v22.1.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.RichEdit.v22.2.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.RichEdit.v22.2.Export.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Sparkline.v22.1.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Sparkline.v22.2.Core.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Utils.v22.2.UI.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Utils.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.Xpo.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraBars.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraCharts.v22.2.Extensions.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraCharts.v22.2.UI.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraCharts.v22.2.Wizard.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraCharts.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraDiagram.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraDialogs.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraEditors.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraGrid.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraLayout.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraNavBar.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraPivotGrid.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraPrinting.v22.1.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraPrinting.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraRichEdit.v22.1.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraRichEdit.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraTreeList.v22.1.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraTreeList.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraVerticalGrid.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/DevExpress.XtraWizard.v22.2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Guna.UI2.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Newtonsoft.Json.dll |
| unpack001/Collapse RAT Source code/bin/Debug/net48/Siticone.Desktop.UI.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Charts.v22.2.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.CodeParser.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Data.Desktop.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Data.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.DataAccess.v22.2.UI.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.DataAccess.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.DataVisualization.v22.2.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Diagram.v22.2.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Dialogs.v22.2.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Drawing.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Images.v22.1.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Images.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Mvvm.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Office.v22.1.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Office.v22.2.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Pdf.v22.1.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Pdf.v22.1.Drawing.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Pdf.v22.2.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Pdf.v22.2.Drawing.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.PivotGrid.v22.2.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Printing.v22.2.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.RichEdit.v22.1.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.RichEdit.v22.2.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.RichEdit.v22.2.Export.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Sparkline.v22.1.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Sparkline.v22.2.Core.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Utils.v22.2.UI.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Utils.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.Xpo.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraBars.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraCharts.v22.2.Extensions.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraCharts.v22.2.UI.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraCharts.v22.2.Wizard.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraCharts.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraDiagram.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraDialogs.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraEditors.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraGrid.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraLayout.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraNavBar.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraPivotGrid.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraPrinting.v22.1.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraPrinting.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraRichEdit.v22.1.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraRichEdit.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraTreeList.v22.1.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraTreeList.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraVerticalGrid.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/DevExpress.XtraWizard.v22.2.dll |
| unpack001/Collapse RAT v1.5 Cracked/Guna.UI2.dll |
| unpack001/Collapse RAT v1.5 Cracked/Newtonsoft.Json.dll |
| unpack001/Collapse RAT v1.5 Cracked/Siticone.Desktop.UI.dll |
Unsigned PE
Checks for missing Authenticode signature.
Async RAT payload
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 6, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 6, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 6, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 6, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 6, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Nov 25, 2023
CN=Sobatdata Software
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Apr 14, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Sep 13, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Sep 13, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Nov 24, 2022
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
StormKitty payload
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Jun 1, 2022
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Jun 1, 2022
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
count=32, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=133, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=18, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=145, id=1, productName=Unmarked objects,
count=1, id=174, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Jun 1, 2022
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Jun 1, 2022
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
count=32, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=60, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=131, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=145, id=1, productName=Unmarked objects,
count=1, id=174, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 25, 2022
CN=Siticone Technology
Async RAT payload
Unsigned PE
Checks for missing Authenticode signature.
Async RAT payload
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Async RAT payload
Unsigned PE
Checks for missing Authenticode signature.
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 5, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 5, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 25, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 25, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 10, 2020
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Nov 10, 2020
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
May 8, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 15, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 15, 2018
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 19, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 19, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Async RAT payload
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 6, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 6, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 6, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 6, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 6, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 26, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Dec 7, 2022
CN=Developer Express Incorporated,O=Developer Express Incorporated,L=Glendale,ST=California,C=US
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Nov 25, 2023
CN=Sobatdata Software
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Apr 14, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Sep 13, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Sep 13, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Nov 24, 2022
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
StormKitty payload
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Jun 1, 2022
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Jun 1, 2022
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
count=32, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=133, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=18, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=145, id=1, productName=Unmarked objects,
count=1, id=174, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Jun 1, 2022
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Jun 1, 2022
SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
count=32, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=60, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=131, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=145, id=1, productName=Unmarked objects,
count=1, id=174, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 25, 2022
CN=Siticone Technology
Async RAT payload
Unsigned PE
Checks for missing Authenticode signature.
Async RAT payload
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Async RAT payload
Unsigned PE
Checks for missing Authenticode signature.
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Oct 18, 2022
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 5, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 5, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 25, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jun 25, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 10, 2020
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Nov 10, 2020
SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
May 8, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 15, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 15, 2018
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 19, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 19, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.