STEALER_VIRUS_SETUP_FILE_(PASS_KEY=9096)).zip
- SHA256 037cdc703c51be509964cdc6dd012a95eaf38a102625179372646a57c5aacc21
Static task
static1
File was altered after it was signed.
| resource |
|---|
| unpack004/python37.dll |
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
| resource |
|---|
| unpack004/python37.dll |
File was codesigned using an insecure algorithm.
| resource |
|---|
| unpack004/lib/E_JTACSV.exe |
| unpack004/lib/E_WTACSV.exe |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack004/fmifs.dll |
| unpack004/lib/ENSF.dll |
| unpack004/lib/ENSTRMAPI.dll |
| unpack004/lib/ES2Diag.dll |
| unpack004/lib/E_PRLGR7.dll |
| unpack004/lib/E_UPWJ01.dll |
| unpack004/lib/Innoextract.exe |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack004/lib/ENWLS.exe |
Aug 23, 2024
CN=Samsung Electronics Co.\, Ltd.,O=Samsung Electronics Co.\, Ltd.,L=Suwon-si,ST=Gyeonggi-do,C=KR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Samsung Electronics Co.\, Ltd.,O=Samsung Electronics Co.\, Ltd.,L=Suwon-si,ST=Gyeonggi-do,C=KR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=30034,
count=22, id=261, version=30034,
count=10, id=260, version=30034,
count=2, id=259, version=30034,
count=2, id=203, version=65501,
count=113, id=1, productName=Unmarked objects,
count=7, id=265, version=30038,
count=1, id=256, productName=VS2019 v16.10.3 build 30038, version=30038,
count=1, id=255, productName=VS2019 v16.10.3 build 30038, version=30038,
count=2, id=151,
count=1, id=258, productName=VS2019 v16.10.3 build 30038, version=30038,
May 3, 2026
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=8, id=259, version=35207,
count=10, id=260, version=35207,
count=12, id=261, version=35207,
count=4, id=257, version=33145,
count=3, id=257, version=35225,
count=631, id=1, productName=Unmarked objects,
count=107, id=260, version=35225,
count=1, id=256, version=35225,
count=1, id=255, version=35225,
count=1, id=258, version=35225,
Mar 10, 2020
CN=Python Software Foundation,O=Python Software Foundation,L=Wolfeboro,ST=New Hampshire,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=24123,
count=1, id=259, version=24123,
count=18, id=261, version=24123,
count=13, id=260, version=24123,
count=3, id=257, version=24234,
count=2, id=257, version=26715,
count=46, id=1, productName=Unmarked objects,
count=1, id=264, version=24234,
count=1, id=255, version=24234,
count=1, id=258, version=24234,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, productName=Unmarked objects (old),
count=13, id=260, version=33145,
count=4, id=259, version=33145,
count=176, id=1, productName=Unmarked objects,
count=9, id=257, version=33145,
count=1, id=256, version=33145,
count=12, id=264, version=33145,
count=1, id=255, version=33145,
count=1, id=258, version=33145,
Aug 23, 2024
CN=Samsung Electronics Co.\, Ltd.,O=Samsung Electronics Co.\, Ltd.,L=Suwon-si,ST=Gyeonggi-do,C=KR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Samsung Electronics Co.\, Ltd.,O=Samsung Electronics Co.\, Ltd.,L=Suwon-si,ST=Gyeonggi-do,C=KR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=30034,
count=26, id=261, version=30034,
count=10, id=260, version=30034,
count=3, id=259, version=30034,
count=5, id=203, version=65501,
count=198, id=1, productName=Unmarked objects,
count=11, id=265, version=30038,
count=1, id=256, productName=VS2019 v16.10.3 build 30038, version=30038,
count=1, id=255, productName=VS2019 v16.10.3 build 30038, version=30038,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.10.3 build 30038, version=30038,
Unsigned PE
Checks for missing Authenticode signature.
count=21, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=77, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=163, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=23, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=162, id=1, productName=Unmarked objects,
count=19, id=138, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=126, version=50327,
count=30, id=125, productName=VS2005 build 50727, version=50727,
count=147, id=109, productName=VS2005 build 50727, version=50727,
count=17, id=123, productName=VS2005 build 50727, version=50727,
count=163, id=1, productName=Unmarked objects,
count=298, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Mar 13, 2014
CN=SEIKO EPSON CORPORATION,OU=Information Service & Support Department+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=SEIKO EPSON CORPORATION,L=Suwa-shi,ST=Nagano,C=JP
count=18, id=125, productName=VS2005 build 50727, version=50727,
count=108, id=109, productName=VS2005 build 50727, version=50727,
count=47, id=110, productName=VS2005 build 50727, version=50727,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=99, id=1, productName=Unmarked objects,
count=2, id=114, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=152, version=20115,
count=8, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=13, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=4, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=6, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=256, id=1, productName=Unmarked objects,
count=10, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Aug 22, 2018
CN=SEIKO EPSON CORPORATION,OU=Information Service & Support Department,O=SEIKO EPSON CORPORATION,L=Suwa-Shi,ST=Nagano,C=JP
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
count=23, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=135, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=223, id=1, productName=Unmarked objects,
count=95, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Unsigned PE
Checks for missing Authenticode signature.
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=141, id=1, productName=Unmarked objects,
count=20, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=122, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=45, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Unsigned PE
Checks for missing Authenticode signature.
count=35, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=583, id=1, productName=Unmarked objects,
count=26, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=191, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=144, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=40, id=138, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Aug 22, 2018
CN=SEIKO EPSON CORPORATION,OU=Information Service & Support Department,O=SEIKO EPSON CORPORATION,L=Suwa-Shi,ST=Nagano,C=JP
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
count=9, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=132, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=58, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=217, id=1, productName=Unmarked objects,
count=1, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=38, id=138, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Aug 23, 2024
CN=Samsung Electronics Co.\, Ltd.,O=Samsung Electronics Co.\, Ltd.,L=Suwon-si,ST=Gyeonggi-do,C=KR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Samsung Electronics Co.\, Ltd.,O=Samsung Electronics Co.\, Ltd.,L=Suwon-si,ST=Gyeonggi-do,C=KR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=260, version=30034,
count=3, id=259, version=30034,
count=27, id=261, version=30034,
count=4, id=257, version=30034,
count=5, id=203, version=65501,
count=199, id=1, productName=Unmarked objects,
count=9, id=265, version=30038,
count=1, id=256, productName=VS2019 v16.10.3 build 30038, version=30038,
count=1, id=255, productName=VS2019 v16.10.3 build 30038, version=30038,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.10.3 build 30038, version=30038,
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=12, id=241, version=40116,
count=152, id=243, version=40116,
count=25, id=242, version=40116,
count=9, id=259, version=24123,
count=60, id=261, version=24123,
count=35, id=260, version=24123,
count=2, id=261, version=23013,
count=1, id=259, productName=VS2015 UPD3 build 24210, version=24210,
count=13, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=27, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=334, id=1, productName=Unmarked objects,
count=241, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=1, id=259, version=24123,
count=11, id=260, version=24123,
count=5, id=257, version=24123,
count=27, id=261, version=24123,
count=6, id=203, version=65501,
count=2, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,
count=187, id=1, productName=Unmarked objects,
count=6, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=1, id=259, version=24123,
count=8, id=260, version=24123,
count=5, id=257, version=24123,
count=27, id=261, version=24123,
count=6, id=203, version=65501,
count=2, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,
count=188, id=1, productName=Unmarked objects,
count=6, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Unsigned PE
Checks for missing Authenticode signature.
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=21, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=74, id=1, productName=Unmarked objects,
count=1, id=265, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=15, id=241, version=40116,
count=155, id=243, version=40116,
count=31, id=242, version=40116,
count=25, id=259, version=24123,
count=60, id=261, version=24123,
count=34, id=260, version=24123,
count=2, id=261, version=23013,
count=1, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=531, id=1, productName=Unmarked objects,
count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=270, id=265, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Codesign digest Mismatch
File was altered after it was signed.
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
May 31, 2026
SERIALNUMBER=4489370,CN=NCH Software\, Inc.,O=NCH Software\, Inc.,L=Greenwood Village,ST=Colorado,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=4489370,CN=NCH Software\, Inc.,O=NCH Software\, Inc.,L=Greenwood Village,ST=Colorado,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=24123,
count=15, id=199, version=41118,
count=11, id=259, version=24123,
count=10, id=261, version=24123,
count=11, id=260, version=24123,
count=11, id=257, version=26715,
count=346, id=1, productName=Unmarked objects,
count=192, id=264, version=24234,
count=1, id=256, version=24234,
count=1, id=255, version=24234,
count=1, id=258, version=24234,
Jan 17, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jan 17, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=41, id=1, productName=Unmarked objects,
count=22, id=260, version=34321,
count=28, id=261, version=34321,
count=19, id=259, version=34321,
count=1, id=256, version=34321,
count=1, id=255, version=34321,
count=1, id=258, version=34321,
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=20, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=109, productName=VS2005 build 50727, version=50727,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=77, id=1, productName=Unmarked objects,
count=1, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=19, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=109, productName=VS2005 build 50727, version=50727,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=76, id=1, productName=Unmarked objects,
count=1, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=20, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=98, id=1, productName=Unmarked objects,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=3, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=265, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=20, id=1, productName=Unmarked objects,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=265, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=15, id=241, version=40116,
count=155, id=243, version=40116,
count=31, id=242, version=40116,
count=25, id=259, version=24123,
count=60, id=261, version=24123,
count=34, id=260, version=24123,
count=2, id=261, version=23013,
count=6, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=31, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=541, id=1, productName=Unmarked objects,
count=283, id=265, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=15, id=241, version=40116,
count=155, id=243, version=40116,
count=32, id=242, version=40116,
count=25, id=259, version=24123,
count=61, id=261, version=24123,
count=34, id=260, version=24123,
count=2, id=261, version=23013,
count=6, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=31, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=542, id=1, productName=Unmarked objects,
count=287, id=265, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=15, id=241, version=40116,
count=155, id=243, version=40116,
count=31, id=242, version=40116,
count=25, id=259, version=24123,
count=60, id=261, version=24123,
count=34, id=260, version=24123,
count=2, id=261, version=23013,
count=6, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=31, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=541, id=1, productName=Unmarked objects,
count=282, id=265, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=15, id=241, version=40116,
count=155, id=243, version=40116,
count=31, id=242, version=40116,
count=25, id=259, version=24123,
count=60, id=261, version=24123,
count=34, id=260, version=24123,
count=2, id=261, version=23013,
count=6, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=31, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=546, id=1, productName=Unmarked objects,
count=282, id=265, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Dec 9, 2024
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Bitvise Limited,O=Bitvise Limited,ST=Texas,C=US
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=15, id=241, version=40116,
count=155, id=243, version=40116,
count=31, id=242, version=40116,
count=25, id=259, version=24123,
count=60, id=261, version=24123,
count=34, id=260, version=24123,
count=2, id=261, version=23013,
count=6, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=31, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=542, id=1, productName=Unmarked objects,
count=289, id=265, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,