Installer.zip
- SHA256 b41099c1cf6c319a01572b72a1d7e9b60b294b21dd26ee0297875ad0d4ea2668
Static task
static1
Behavioral task
behavioral1
Sample
Installer/Installer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Installer/Installer.exe
Resource
win11ltsc2024-20260617-en
File was altered after it was signed.
| resource |
|---|
| unpack001/Installer/localdata/dll/Qt5Core.dll |
Embeds OpenSSL, may be used to circumvent TLS interception.
| resource | yara_rule |
|---|---|
| static1/unpack001/Installer/localdata/dll/libasset32.dll | embeds_openssl |
File was codesigned using an insecure algorithm.
| resource |
|---|
| unpack001/Installer/localdata/dll/Qt5Gui.dll |
| unpack001/Installer/localdata/dll/Qt5Widgets.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Installer/Serilg.dll |
| unpack001/Installer/act/Serilg.dll |
| unpack001/Installer/act/bin/shellext.dll.mui |
| unpack001/Installer/act/extensions/MsMpRes.dll.mui |
| unpack001/Installer/act/extensions/OfflineScannerShell.exe.mui |
| unpack001/Installer/act/extensions/ProtectionManagement.dll.mui |
| unpack001/Installer/act/lib/EppManifest.dll.mui |
| unpack001/Installer/act/lib/MpAsDesc.dll.mui |
| unpack001/Installer/act/lib/MpEvMsg.dll.mui |
| unpack001/Installer/act/mshtmI.dll |
| unpack001/Installer/act/mstscax.dll |
| unpack001/Installer/act/prm0019.dll |
| unpack001/Installer/data/mstscax.dll |
| unpack001/Installer/localdata/Serilg.dll |
| unpack001/Installer/localdata/bin/shellext.dll.mui |
| unpack001/Installer/localdata/extensions/MsMpRes.dll.mui |
| unpack001/Installer/localdata/extensions/OfflineScannerShell.exe.mui |
| unpack001/Installer/localdata/extensions/ProtectionManagement.dll.mui |
| unpack001/Installer/localdata/lib/EppManifest.dll.mui |
| unpack001/Installer/localdata/lib/MpAsDesc.dll.mui |
| unpack001/Installer/localdata/lib/MpEvMsg.dll.mui |
| unpack001/Installer/localdata/mshtmI.dll |
| unpack001/Installer/localdata/mstscax.dll |
| unpack001/Installer/localdata/prm0019.dll |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/Installer/Installer.exe |
| unpack001/Installer/fix/Fix.exe |
| unpack001/Installer/localdata/dll/server.dll |
| unpack001/Installer/localdata/dll/usbaaplrc.dll |
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 19, 2026
CN=grind.su,O=5gUfI5IQwEJh7,L=rx6QqvQZ,ST=T476b7,C=US
Unsigned PE
Checks for missing Authenticode signature.
Feb 13, 2024
SERIALNUMBER=2019191556,CN=Smartly Dressed Games Ltd.,O=Smartly Dressed Games Ltd.,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2019191556,CN=Smartly Dressed Games Ltd.,O=Smartly Dressed Games Ltd.,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Jan 22, 2025
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=26, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=259, version=27412,
count=25, id=260, version=27412,
count=205, id=1, productName=Unmarked objects,
count=5, id=257, version=27412,
count=1, id=256, version=27412,
count=625, id=269, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
Feb 13, 2024
SERIALNUMBER=2019191556,CN=Smartly Dressed Games Ltd.,O=Smartly Dressed Games Ltd.,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2019191556,CN=Smartly Dressed Games Ltd.,O=Smartly Dressed Games Ltd.,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Aug 8, 2023
CN=MAGIX Software GmbH,O=MAGIX Software GmbH,L=Berlin,C=DE
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=32420,
count=2, id=253, version=32420,
count=18, id=261, version=32420,
count=8, id=260, version=32420,
count=5, id=259, version=32420,
count=3, id=260, version=29395,
count=24, id=257, version=29395,
count=5, id=257, version=32532,
count=482, id=1, productName=Unmarked objects,
count=7, productName=Unmarked objects (old),
count=115, id=265, version=32532,
count=1, id=256, version=32532,
count=1, id=255, version=32532,
count=1, id=151,
count=1, id=258, version=32532,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Sep 25, 2019
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=27412,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=260, version=26213,
count=21, id=257, version=26213,
count=326, id=1, productName=Unmarked objects,
count=29, id=260, version=27412,
count=14, id=259, version=27412,
count=202, id=261, version=27412,
count=1, id=256, version=27412,
count=70, id=265, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Dec 7, 2019
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=253, version=27412,
count=108, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=259, version=27412,
count=93, id=260, version=27412,
count=1851, id=1, productName=Unmarked objects,
count=15, id=257, version=27412,
count=11, id=261, version=27412,
count=1, id=256, version=27412,
count=2873, id=269, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=27412,
count=35, id=260, version=27412,
count=1420, id=1, productName=Unmarked objects,
count=39, id=257, version=27412,
count=15, id=261, version=27412,
count=1, id=256, version=27412,
count=1182, id=264, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Mar 15, 2025
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Mar 14, 2025
CN=NVIDIA Corporation,OU=1-F,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
count=12, id=259, version=29395,
count=177, id=261, version=29395,
count=17, id=260, version=29395,
count=41, id=261, version=30625,
count=16, id=260, version=30625,
count=10, id=259, version=30625,
count=2, id=203, productName=VS2012 build 50727, version=50727,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33136,
count=140, id=1, productName=Unmarked objects,
count=127, id=261, version=30706,
count=1, id=256, version=30706,
count=1, id=255, version=30706,
count=1, id=258, version=30706,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Mar 13, 2025
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=167, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=44, id=260, version=27412,
count=3, id=259, version=27412,
count=2642, id=1, productName=Unmarked objects,
count=8, id=257, version=27412,
count=1, id=256, version=27412,
count=428, id=269, version=27412,
count=29, id=261, version=27412,
count=10, id=253, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Sep 25, 2019
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=27412,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=23, id=257, version=26213,
count=383, id=1, productName=Unmarked objects,
count=29, id=260, version=27412,
count=14, id=259, version=27412,
count=203, id=261, version=27412,
count=1, id=256, version=27412,
count=140, id=265, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Nov 11, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 11, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=27412,
count=35, id=260, version=27412,
count=1420, id=1, productName=Unmarked objects,
count=39, id=257, version=27412,
count=15, id=261, version=27412,
count=1, id=256, version=27412,
count=1182, id=264, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 19, 2026
CN=grind.su,O=44aqf8flAM8,L=3YAM8ljiG,ST=yJrpzHmA,C=US
Jan 22, 2025
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=26, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=259, version=27412,
count=25, id=260, version=27412,
count=205, id=1, productName=Unmarked objects,
count=5, id=257, version=27412,
count=1, id=256, version=27412,
count=625, id=269, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
Feb 13, 2024
SERIALNUMBER=2019191556,CN=Smartly Dressed Games Ltd.,O=Smartly Dressed Games Ltd.,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2019191556,CN=Smartly Dressed Games Ltd.,O=Smartly Dressed Games Ltd.,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Codesign digest Mismatch
File was altered after it was signed.
Mar 31, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,ST=Oulu,C=FI
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=25305,
count=4, id=199, version=41118,
count=4, id=259, version=25305,
count=27, id=261, version=25305,
count=11, id=260, version=25305,
count=3, id=262, version=25203,
count=23, id=257, version=25203,
count=329, id=1, productName=Unmarked objects,
count=45, id=260, productName=VS2017 v15.4.5 build 25547, version=25547,
count=240, id=261, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=256, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=255, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.4.5 build 25547, version=25547,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Mar 31, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,ST=Oulu,C=FI
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=199, version=41118,
count=4, id=259, version=25305,
count=10, id=260, version=25305,
count=4, id=257, version=25305,
count=23, id=261, version=25305,
count=8, id=257, version=25203,
count=3, id=257, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1532, id=1, productName=Unmarked objects,
count=15, id=260, productName=VS2017 v15.4.5 build 25547, version=25547,
count=344, id=261, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=256, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=255, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.4.5 build 25547, version=25547,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Mar 31, 2020
CN=The Qt Company Oy,O=The Qt Company Oy,L=Oulu,ST=Oulu,C=FI
CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US
CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=25305,
count=10, id=260, version=25305,
count=4, id=257, version=25305,
count=23, id=261, version=25305,
count=10, id=257, version=25203,
count=5, id=257, productName=VS2017 v15.4.5 build 25547, version=25547,
count=3354, id=1, productName=Unmarked objects,
count=185, id=261, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=256, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=255, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.4.5 build 25547, version=25547,
May 21, 2023
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=34, id=261, version=30034,
count=8, id=257, version=30034,
count=31, id=260, version=30146,
count=2, id=260, version=30795,
count=1, id=262, version=30795,
count=26, id=257, version=30795,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=393, id=1, productName=Unmarked objects,
count=229, id=261, version=30146,
count=1, id=256, version=30146,
count=1, id=255, version=30146,
count=1, id=258, version=30146,
May 21, 2023
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=28518,
count=8, id=260, version=30034,
count=7, id=259, version=30034,
count=26, id=261, version=30034,
count=10, id=257, version=30034,
count=2, id=260, version=30795,
count=2, id=257, version=30146,
count=1, id=261, version=30795,
count=19, id=257, version=30795,
count=1494, id=1, productName=Unmarked objects,
count=43, id=260, version=30146,
count=286, id=261, version=30146,
count=1, id=256, version=30146,
count=1, id=255, version=30146,
count=1, id=258, version=30146,
May 21, 2023
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
SERIALNUMBER=2637805-2,CN=The Qt Company Oy,O=The Qt Company Oy,L=Espoo,C=FI,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024649
CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US
CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US
CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=25, id=261, version=30034,
count=8, id=257, version=30034,
count=4, id=257, version=30146,
count=11, id=257, version=30795,
count=3070, id=1, productName=Unmarked objects,
count=174, id=261, version=30146,
count=1, id=256, version=30146,
count=1, id=255, version=30146,
count=1, id=258, version=30146,
Feb 1, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=253, version=31616,
count=8, id=260, version=31616,
count=4, id=259, version=31616,
count=8, id=257, version=31616,
count=26, id=261, version=30154,
count=46, id=261, version=31616,
count=8, id=260, version=31944,
count=12, id=260, version=29395,
count=1, id=262, version=29395,
count=46, id=257, version=29395,
count=63, id=261, version=31629,
count=23, id=257, version=31629,
count=1451, id=1, productName=Unmarked objects,
count=910, id=265, version=31629,
count=1, id=256, version=31629,
count=1, id=255, version=31629,
count=1, id=258, version=31629,
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
Oct 16, 2024
SERIALNUMBER=202431257D,CN=REMOTE UTILITIES PTE. LTD.,O=REMOTE UTILITIES PTE. LTD.,L=Singapore,ST=Singapore,C=SG,1.2.840.113549.1.9.1=#0c18696e666f4072656d6f74657574696c69746965732e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13025347,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=202431257D,CN=REMOTE UTILITIES PTE. LTD.,O=REMOTE UTILITIES PTE. LTD.,L=Singapore,ST=Singapore,C=SG,1.2.840.113549.1.9.1=#0c18696e666f4072656d6f74657574696c69746965732e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13025347,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Oct 14, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Oct 14, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=243, version=40116,
count=1, id=245, version=40116,
count=23, id=244, version=40116,
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=8, id=260, version=26706,
count=23, id=261, version=26706,
count=19, id=239, version=40116,
count=1039, id=1, productName=Unmarked objects,
count=5, id=259, version=26706,
count=406, id=265, version=26706,
count=1, id=256, version=26706,
count=1, id=255, version=26706,
count=1, id=258, version=26706,
Oct 14, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Oct 14, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=243, version=40116,
count=1, id=245, version=40116,
count=23, id=244, version=40116,
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=8, id=260, version=26706,
count=23, id=261, version=26706,
count=19, id=239, version=40116,
count=1021, id=1, productName=Unmarked objects,
count=5, id=259, version=26706,
count=406, id=265, version=26706,
count=1, id=256, version=26706,
count=1, id=255, version=26706,
count=1, id=258, version=26706,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=30, id=259, version=30795,
count=169, id=261, version=30795,
count=51, id=260, version=30795,
count=5, id=253, version=34321,
count=34, id=259, version=34321,
count=16, id=260, version=34321,
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=123, productName=VS2005 build 50727, version=50727,
count=2, id=257, version=30148,
count=112, id=110, productName=VS2005 build 50727, version=50727,
count=9, id=257, version=30795,
count=198, id=1, productName=Unmarked objects,
count=36, id=261, version=34321,
count=838, id=265, version=34435,
count=1, id=256, version=34435,
count=1, id=258, version=34435,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 11, 2015
CN=Apple Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Apple Inc.,L=Cupertino,ST=California,C=US
count=3, id=147, productName=VS2008 build 21022, version=21022,
count=1, id=149, productName=VS2008 build 21022, version=21022,
count=12, id=131, productName=VS2008 build 21022, version=21022,
count=2, id=132, productName=VS2008 build 21022, version=21022,
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=30, id=1, productName=Unmarked objects,
count=2, id=138, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Dec 19, 2024
CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Aug 8, 2023
CN=MAGIX Software GmbH,O=MAGIX Software GmbH,L=Berlin,C=DE
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=32420,
count=2, id=253, version=32420,
count=18, id=261, version=32420,
count=8, id=260, version=32420,
count=5, id=259, version=32420,
count=3, id=260, version=29395,
count=24, id=257, version=29395,
count=5, id=257, version=32532,
count=482, id=1, productName=Unmarked objects,
count=7, productName=Unmarked objects (old),
count=115, id=265, version=32532,
count=1, id=256, version=32532,
count=1, id=255, version=32532,
count=1, id=151,
count=1, id=258, version=32532,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Sep 25, 2019
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=27412,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=260, version=26213,
count=21, id=257, version=26213,
count=326, id=1, productName=Unmarked objects,
count=29, id=260, version=27412,
count=14, id=259, version=27412,
count=202, id=261, version=27412,
count=1, id=256, version=27412,
count=70, id=265, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Dec 7, 2019
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=253, version=27412,
count=108, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=259, version=27412,
count=93, id=260, version=27412,
count=1851, id=1, productName=Unmarked objects,
count=15, id=257, version=27412,
count=11, id=261, version=27412,
count=1, id=256, version=27412,
count=2873, id=269, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=27412,
count=35, id=260, version=27412,
count=1420, id=1, productName=Unmarked objects,
count=39, id=257, version=27412,
count=15, id=261, version=27412,
count=1, id=256, version=27412,
count=1182, id=264, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Mar 15, 2025
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Mar 14, 2025
CN=NVIDIA Corporation,OU=1-F,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
count=12, id=259, version=29395,
count=177, id=261, version=29395,
count=17, id=260, version=29395,
count=41, id=261, version=30625,
count=16, id=260, version=30625,
count=10, id=259, version=30625,
count=2, id=203, productName=VS2012 build 50727, version=50727,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33136,
count=140, id=1, productName=Unmarked objects,
count=127, id=261, version=30706,
count=1, id=256, version=30706,
count=1, id=255, version=30706,
count=1, id=258, version=30706,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Mar 13, 2025
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=167, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=44, id=260, version=27412,
count=3, id=259, version=27412,
count=2642, id=1, productName=Unmarked objects,
count=8, id=257, version=27412,
count=1, id=256, version=27412,
count=428, id=269, version=27412,
count=29, id=261, version=27412,
count=10, id=253, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Sep 25, 2019
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=27412,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=23, id=257, version=26213,
count=383, id=1, productName=Unmarked objects,
count=29, id=260, version=27412,
count=14, id=259, version=27412,
count=203, id=261, version=27412,
count=1, id=256, version=27412,
count=140, id=265, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Mar 13, 2025
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=167, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=44, id=260, version=27412,
count=3, id=259, version=27412,
count=2642, id=1, productName=Unmarked objects,
count=8, id=257, version=27412,
count=1, id=256, version=27412,
count=428, id=269, version=27412,
count=29, id=261, version=27412,
count=10, id=253, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,