Sol_229_modland.7z
- SHA256 c471174ce378f4d5159c341ac8387c6667e52becef82bad15128f0ffc7981135
Detects HTTP links in interactive objects within PDF files.
| resource | yara_rule |
|---|---|
| static1/unpack001/Sol HDR PPfilter.pdf | pdf_with_link_action |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Sol 2.2.9/apps/python/sol_config/stdlib/_ctypes.pyd |
| unpack001/Sol 2.2.9/apps/python/sol_config/stdlib64/_ctypes.pyd |
| unpack001/Sol 2.2.9/apps/python/sol_custom_weather/stdlib/_ctypes.pyd |
| unpack001/Sol 2.2.9/apps/python/sol_custom_weather/stdlib64/_ctypes.pyd |
| unpack001/Sol 2.2.9/apps/python/sol_planner/stdlib/_ctypes.pyd |
| unpack001/Sol 2.2.9/apps/python/sol_planner/stdlib64/_ctypes.pyd |
| unpack001/Sol 2.2.9/apps/python/sol_weather/stdlib/_ctypes.pyd |
| unpack001/Sol 2.2.9/apps/python/sol_weather/stdlib64/_ctypes.pyd |
file http://de-DEconfiguresde-DEracede-DEparametersde-DE.de
file http://de-DElevelsde-DE.de
file http://de-DEphysicsde-DE.de
file http://de-DEsystemde-DEisde-DEseperatedde-DEfromde-DEthede-DElauncherde-DE.de
file http://de-DEweatherde-DE.de
file http://nerd__sun_adjust.ls
file http://sun.ls
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=4, id=156, productName=VS2010 build 30319, version=30319,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=213, id=1, productName=Unmarked objects,
count=9, id=174, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=156, productName=VS2010 build 30319, version=30319,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=8, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=207, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=8, id=174, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=4, id=156, productName=VS2010 build 30319, version=30319,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=213, id=1, productName=Unmarked objects,
count=9, id=174, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=156, productName=VS2010 build 30319, version=30319,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=8, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=207, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=8, id=174, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=4, id=156, productName=VS2010 build 30319, version=30319,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=213, id=1, productName=Unmarked objects,
count=9, id=174, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=156, productName=VS2010 build 30319, version=30319,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=8, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=207, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=8, id=174, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=4, id=156, productName=VS2010 build 30319, version=30319,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=213, id=1, productName=Unmarked objects,
count=9, id=174, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=156, productName=VS2010 build 30319, version=30319,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=8, id=170, productName=VS2010 build 30319, version=30319,
count=2, id=171, productName=VS2010 build 30319, version=30319,
count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=207, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=8, id=174, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
file http://en-USnerd__sun_adjust.ls
file http://nerd__fog_custom_distant_fog.sky
file http://nerd__sun_adjust.ls
file https://soundartifacts.com/how-to/198-how-to-enable-hdr-gaming-and-video-playback-in-windows-10.html