BtMob 4.5.5.rar
- SHA256 6dcdbf9ba3cddddee36cb13dbb4e32026ff05d176824eb31a778f26f384bddf5
Overview
overview
10Static
static
10BtMob 4.5....ob.exe
windows11-21h2-x64
7BtMob 4.5....rk.dll
windows11-21h2-x64
1BtMob 4.5....ox.dll
windows11-21h2-x64
1BtMob 4.5....PU.dll
windows11-21h2-x64
1BtMob 4.5....es.dll
windows11-21h2-x64
1BtMob 4.5....re.dll
windows11-21h2-x64
1BtMob 4.5....ms.dll
windows11-21h2-x64
1BtMob 4.5....pf.dll
windows11-21h2-x64
1BtMob 4.5....on.dll
windows11-21h2-x64
1BtMob 4.5....IO.dll
windows11-21h2-x64
1BtMob 4.5....ew.dll
windows11-21h2-x64
1BtMob 4.5....pi.dll
windows11-21h2-x64
3BtMob 4.5....pi.dll
windows11-21h2-x64
3BtMob 4.5....pt.exe
windows11-21h2-x64
3BtMob 4.5....t2.exe
windows11-21h2-x64
3BtMob 4.5....db.exe
windows11-21h2-x64
3BtMob 4.5....ni.dll
windows11-21h2-x64
3BtMob 4.5....-1.dll
windows11-21h2-x64
3BtMob 4.5....ne.dll
windows11-21h2-x64
1BtMob 4.5....rs.dll
windows11-21h2-x64
1BtMob 4.5....es.dll
windows11-21h2-x64
1BtMob 4.5....ry.dll
windows11-21h2-x64
1BtMob 4.5....rs.dll
windows11-21h2-x64
1BtMob 4.5....fe.dll
windows11-21h2-x64
1BtMob 4.5....US.msi
windows11-21h2-x64
6BtMob 4.5....de.pdf
windows11-21h2-x64
3BtMob 4.5....er.bat
windows11-21h2-x64
1BtMob 4.5....gen.py
windows11-21h2-x64
3BtMob 4.5....min.js
windows11-21h2-x64
3BtMob 4.5....on.svg
windows11-21h2-x64
4BtMob 4.5....nt.svg
windows11-21h2-x64
4BtMob 4.5....ck.svg
windows11-21h2-x64
4Behavioral task
behavioral1
Sample
BtMob 4.5.5/BTMOB v4.5.5/BTMob.exe
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
BtMob 4.5.5/BTMOB v4.5.5/DrakeUI.Framework.dll
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
BtMob 4.5.5/BTMOB v4.5.5/FastColoredTextBox.dll
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
BtMob 4.5.5/BTMOB v4.5.5/Magick.NET-Q8-AnyCPU.dll
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.Core.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.WinForms.dll
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.Wpf.dll
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
BtMob 4.5.5/BTMOB v4.5.5/Newtonsoft.Json.dll
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
BtMob 4.5.5/BTMOB v4.5.5/ObjectListView.IO.dll
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
BtMob 4.5.5/BTMOB v4.5.5/ObjectListView.dll
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/AdbWinApi.dll
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/AdbWinUsbApi.dll
Resource
win11-20260513-en
Behavioral task
behavioral14
Sample
BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/aapt.exe
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/aapt2.exe
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/adb.exe
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/libaapt2_jni.dll
Resource
win11-20260513-en
Behavioral task
behavioral18
Sample
BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/libwinpthread-1.dll
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
BtMob 4.5.5/BTMOB v4.5.5/SuperSocket.ClientEngine.dll
Resource
win11-20260513-en
Behavioral task
behavioral20
Sample
BtMob 4.5.5/BTMOB v4.5.5/System.Buffers.dll
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
BtMob 4.5.5/BTMOB v4.5.5/System.IO.Pipelines.dll
Resource
win11-20260513-en
Behavioral task
behavioral22
Sample
BtMob 4.5.5/BTMOB v4.5.5/System.Memory.dll
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
BtMob 4.5.5/BTMOB v4.5.5/System.Numerics.Vectors.dll
Resource
win11-20260513-en
Behavioral task
behavioral24
Sample
BtMob 4.5.5/BTMOB v4.5.5/System.Runtime.CompilerServices.Unsafe.dll
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
BtMob 4.5.5/Requirements/rewrite_amd64_en-US.msi
Resource
win11-20260513-en
Behavioral task
behavioral26
Sample
BtMob 4.5.5/Server Installation Guide (OLD)/BTMOB Server Installation Guide.pdf
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
BtMob 4.5.5/Server Pre Configured/Database/importer.bat
Resource
win11-20260513-en
Behavioral task
behavioral28
Sample
BtMob 4.5.5/Server Pre Configured/pas gen.py
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/dist/js/dd.min.js
Resource
win11-20260513-en
Behavioral task
behavioral30
Sample
BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/fonts/flexslider-icon.svg
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/fonts/fontawesome-webfont.svg
Resource
win11-20260513-en
| resource | yara_rule |
|---|---|
| static1/unpack001/BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/private/stublib/assets/arm64-v8a/xmrutil.so | xmrig |
| static1/unpack001/BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/private/stublib/assets/armeabi-v7a/xmrutil.so | xmrig |
| static1/unpack001/BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/private/stublib/lib/arm64-v8a/libxmrig.so | xmrig |
| static1/unpack001/BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/private/stublib/lib/arm64-v8a/libxmrig.so | family_xmrig |
| static1/unpack001/BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/private/stublib/lib/armeabi-v7a/libxmrig.so | xmrig |
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
| resource | yara_rule |
|---|---|
| static1/unpack001/BtMob 4.5.5/BTMOB v4.5.5/ObjectListView.IO.dll | agile_net |
Detects SmartAssembly .NET packer.
| resource | yara_rule |
|---|---|
| static1/unpack001/BtMob 4.5.5/BTMOB v4.5.5/ObjectListView.IO.dll | SmartAssembly |
File was codesigned using an insecure algorithm.
| resource |
|---|
| unpack001/BtMob 4.5.5/Requirements/rewrite_amd64_en-US.msi |
Checks for missing JAR codesign signature.
| resource |
|---|
| unpack001/BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/private/tools/apktool.jar |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/BtMob 4.5.5/Requirements/iisnode-full-v0.2.21-x64.msi |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/BtMob 4.5.5/BTMOB v4.5.5/BTMob.exe |
| unpack001/BtMob 4.5.5/BTMOB v4.5.5/DrakeUI.Framework.dll |
| unpack001/BtMob 4.5.5/BTMOB v4.5.5/FastColoredTextBox.dll |
| unpack001/BtMob 4.5.5/BTMOB v4.5.5/ObjectListView.IO.dll |
| unpack001/BtMob 4.5.5/BTMOB v4.5.5/ObjectListView.dll |
| unpack001/BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/AdbWinApi.dll |
| unpack001/BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/AdbWinUsbApi.dll |
| unpack001/BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/adb.exe |
| unpack001/BtMob 4.5.5/BTMOB v4.5.5/SuperSocket.ClientEngine.dll |
| unpack001/BtMob 4.5.5/BTMOB v4.5.5/WebSocket4Net.dll |
| unpack001/BtMob 4.5.5/Requirements/7z2501-x64.exe |
| unpack001/BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/private/ApkChecker.exe |
| unpack001/BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/private/DotNetZip.dll |
| unpack001/BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/private/SolrStarter.exe |
| unpack001/BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/private/SolrWorker.exe |
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Nov 12, 2017
CN=ImageMagick Studio LLC,O=ImageMagick Studio LLC,POSTALCODE=19350,STREET=PO BOX 40,L=Landenberg,ST=Pennsylvania,C=US
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
May 16, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Mar 2, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Mar 2, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Mar 2, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Mar 8, 2023
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
SmartAssembly .NET packer
Detects SmartAssembly .NET packer.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=116, id=1, productName=Unmarked objects,
count=17, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=95, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=57, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Unsigned PE
Checks for missing Authenticode signature.
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=130, id=1, productName=Unmarked objects,
count=17, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=73, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=40, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Nov 19, 2021
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Nov 19, 2021
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Unsigned PE
Checks for missing Authenticode signature.
Nov 19, 2021
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Nov 19, 2021
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Unsigned PE
Checks for missing Authenticode signature.
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 16, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 8, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 15, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 15, 2018
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Oct 27, 2021
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 16, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 15, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 15, 2018
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
Mar 2, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Mar 2, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=10, version=8047,
count=5, id=14, version=7299,
count=2, id=4, version=8047,
count=2, id=95, version=2190,
count=82, id=1, productName=Unmarked objects,
count=11, id=93, version=2179,
count=13, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=259, productName=VS2019 v16.8.4 build 29336, version=29336,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Jun 4, 2026
CN=EdgeBuild,O=EdgeBuild,L=Redmond,ST=Washington,C=US
Feb 14, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=11, id=259, version=27412,
count=147, id=261, version=27412,
count=17, id=260, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=20, id=259, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=13, id=265, version=31104,
count=52, id=261, productName=VS2022 v17.1.0 pre 1.0 build 30818, version=30818,
count=19, id=260, version=27412,
count=1, id=262, version=27412,
count=13, id=257, version=27412,
count=169, id=1, productName=Unmarked objects,
count=1, id=255, version=31104,
count=86, id=151,
count=1, id=258, version=31104,
Aug 16, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=10, id=259, version=28900,
count=145, id=261, version=28900,
count=19, id=260, version=26706,
count=19, id=259, version=26706,
count=44, id=261, version=26706,
count=23, id=260, version=28900,
count=2, id=262, version=28900,
count=17, id=257, version=28900,
count=334, id=1, productName=Unmarked objects,
count=75, id=261, version=27051,
count=1, id=255, version=27051,
count=2, id=151,
count=1, id=258, version=27051,
Unsigned MSI
Checks for missing Authenticode signature.
Jul 8, 2025
CN=Oracle America\, Inc.,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Oracle America\, Inc.,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=11, id=259, version=30795,
count=185, id=261, version=30795,
count=18, id=260, version=30795,
count=17, id=260, version=32420,
count=10, id=259, version=32420,
count=91, id=261, version=32420,
count=1, id=262, version=30795,
count=17, id=257, version=30795,
count=200, id=1, productName=Unmarked objects,
count=23, id=265, version=32537,
count=1, id=255, version=32537,
count=2, id=151,
count=1, id=258, version=32537,
Jul 14, 2025
CN=Oracle America\, Inc.,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Oracle America\, Inc.,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Jul 31, 2025
CN=OpenJS Foundation,O=OpenJS Foundation,L=San Francisco,ST=California,C=US
CN=Microsoft ID Verified CS AOC CA 01,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Sep 20, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Mar 8, 2023
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Nov 5, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 5, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
XMRig Miner payload
XMRig Miner payload
XMRig Miner payload
XMRig Miner payload
Unsigned JAR
Checks for missing JAR codesign signature.