vposDataUploadService_v1.00.00.06.zip
- SHA256 4828e9d742c61657b1f19a35ba7598e1be2ce9b7fba23afcc0f4a8d7de64def4
Overview
overview
6Static
static
3CommunityT...vm.dll
windows10-2004-x64
1CommunityT...vm.dll
windows11-ltsc_2024-x64
1Confluent.Kafka.dll
windows10-2004-x64
1Confluent.Kafka.dll
windows11-ltsc_2024-x64
1LazyCache.dll
windows10-2004-x64
1LazyCache.dll
windows11-ltsc_2024-x64
1LibUpdate.dll
windows10-2004-x64
1LibUpdate.dll
windows11-ltsc_2024-x64
1MQTTnet.dll
windows10-2004-x64
1MQTTnet.dll
windows11-ltsc_2024-x64
1Microsoft....ns.dll
windows10-2004-x64
1Microsoft....ns.dll
windows11-ltsc_2024-x64
1Microsoft....nt.dll
windows10-2004-x64
1Microsoft....nt.dll
windows11-ltsc_2024-x64
1Microsoft....on.dll
windows10-2004-x64
1Microsoft....on.dll
windows11-ltsc_2024-x64
6Microsoft....re.dll
windows10-2004-x64
1Microsoft....re.dll
windows11-ltsc_2024-x64
1Microsoft....nt.dll
windows10-2004-x64
1Microsoft....nt.dll
windows11-ltsc_2024-x64
1Microsoft....on.dll
windows10-2004-x64
1Microsoft....on.dll
windows11-ltsc_2024-x64
6Microsoft....on.dll
windows10-2004-x64
1Microsoft....on.dll
windows11-ltsc_2024-x64
1Microsoft....es.dll
windows10-2004-x64
1Microsoft....es.dll
windows11-ltsc_2024-x64
6Microsoft....er.dll
windows10-2004-x64
1Microsoft....er.dll
windows11-ltsc_2024-x64
6Microsoft....ns.dll
windows10-2004-x64
1Microsoft....ns.dll
windows11-ltsc_2024-x64
6Microsoft....ry.dll
windows10-2004-x64
1Microsoft....ry.dll
windows11-ltsc_2024-x64
1Static task
static1
Behavioral task
behavioral1
Sample
CommunityToolkit.Mvvm.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
CommunityToolkit.Mvvm.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
Confluent.Kafka.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Confluent.Kafka.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
LazyCache.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
LazyCache.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral7
Sample
LibUpdate.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
LibUpdate.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral9
Sample
MQTTnet.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
MQTTnet.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral11
Sample
Microsoft.AspNetCore.Connections.Abstractions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Microsoft.AspNetCore.Connections.Abstractions.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral13
Sample
Microsoft.AspNetCore.Http.Connections.Client.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Microsoft.AspNetCore.Http.Connections.Client.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral15
Sample
Microsoft.AspNetCore.Http.Connections.Common.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Microsoft.AspNetCore.Http.Connections.Common.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral17
Sample
Microsoft.AspNetCore.SignalR.Client.Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Microsoft.AspNetCore.SignalR.Client.Core.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral19
Sample
Microsoft.AspNetCore.SignalR.Client.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Microsoft.AspNetCore.SignalR.Client.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral21
Sample
Microsoft.AspNetCore.SignalR.Common.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Microsoft.AspNetCore.SignalR.Common.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral23
Sample
Microsoft.AspNetCore.SignalR.Protocols.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Microsoft.AspNetCore.SignalR.Protocols.Json.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral25
Sample
Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Microsoft.Bcl.AsyncInterfaces.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral27
Sample
Microsoft.Bcl.TimeProvider.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Microsoft.Bcl.TimeProvider.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral29
Sample
Microsoft.Extensions.Caching.Abstractions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Microsoft.Extensions.Caching.Abstractions.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral31
Sample
Microsoft.Extensions.Caching.Memory.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Microsoft.Extensions.Caching.Memory.dll
Resource
win11ltsc2024-20260629-en
Embeds OpenSSL, may be used to circumvent TLS interception.
| resource | yara_rule |
|---|---|
| static1/unpack001/librdkafka/x64/libcrypto-3-x64.dll | embeds_openssl |
| static1/unpack001/librdkafka/x86/libcrypto-3.dll | embeds_openssl |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Confluent.Kafka.dll |
| unpack001/LazyCache.dll |
| unpack001/LibUpdate.dll |
| unpack001/MingUI.dll |
| unpack001/MoleQ.DataService.vposDataService.Core.dll |
| unpack001/MoleQ.Im.MqttKit.dll |
| unpack001/MoleQ.Market.Assist.Service.dll |
| unpack001/MoleQ.Market.Common.Util.dll |
| unpack001/MoleQ.Market.Context.dll |
| unpack001/MoleQ.Market.Core.UI.dll |
| unpack001/MoleQ.Market.Core.dll |
| unpack001/MoleQ.Market.Database.Ctrl.dll |
| unpack001/MoleQ.Ming.Core.dll |
| unpack001/MoleQ.Security.dll |
| unpack001/MoleQ.Simple.Builder.dll |
| unpack001/MoleQ.Wholesale.DataService.DAL.dll |
| unpack001/NLog.dll |
| unpack001/Quartz.dll |
| unpack001/SQL.Formatter.dll |
| unpack001/Updater.exe |
| unpack001/fastJSON.dll |
| unpack001/librdkafka/x64/libcrypto-3-x64.dll |
| unpack001/librdkafka/x64/libcurl.dll |
| unpack001/librdkafka/x64/librdkafka.dll |
| unpack001/librdkafka/x64/librdkafkacpp.dll |
| unpack001/librdkafka/x64/libssl-3-x64.dll |
| unpack001/librdkafka/x64/zlib1.dll |
| unpack001/librdkafka/x64/zstd.dll |
| unpack001/librdkafka/x86/libcrypto-3.dll |
| unpack001/librdkafka/x86/libcurl.dll |
| unpack001/librdkafka/x86/librdkafka.dll |
| unpack001/librdkafka/x86/librdkafkacpp.dll |
| unpack001/librdkafka/x86/libssl-3.dll |
| unpack001/librdkafka/x86/zlib1.dll |
| unpack001/librdkafka/x86/zstd.dll |
| unpack001/vposDataUploadService.exe |
| unpack001/vposDataUploadServiceV2.dll |
Dec 12, 2024
SERIALNUMBER=603 389 068,CN=Community Toolkit (.NET Foundation),O=Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Sep 7, 2024
SERIALNUMBER=603 389 068,CN=MQTTNET (.NET Foundation),O=MQTTNET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Apr 29, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 29, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 29, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 29, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 29, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 29, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 29, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 16, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 15, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 15, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 15, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 16, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 15, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 29, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 16, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 15, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 15, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 15, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Mar 8, 2023
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Nov 12, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 15, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 15, 2018
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 16, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 15, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 12, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 15, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Mar 19, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 12, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 15, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 15, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Apr 15, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Feb 19, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 15, 2018
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 15, 2018
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=11, id=257, version=27412,
count=211, id=1, productName=Unmarked objects,
count=36, productName=Unmarked objects (old),
count=917, id=260, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=258, version=30159,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=8, id=253, version=28518,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=2, id=257, version=30159,
count=11, id=257, version=27412,
count=195, id=1, productName=Unmarked objects,
count=170, id=260, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=151,
count=1, id=258, version=30159,
Unsigned PE
Checks for missing Authenticode signature.
count=19, id=260, version=27412,
count=10, id=259, version=27412,
count=175, id=261, version=27412,
count=1, id=253, version=28518,
count=31, id=261, version=30034,
count=17, id=260, version=30034,
count=12, id=259, version=30034,
count=10, id=257, version=30159,
count=9, id=257, version=27412,
count=289, id=1, productName=Unmarked objects,
count=1, id=261, version=30159,
count=90, id=260, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=258, version=30159,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=6, id=257, version=30034,
count=2, id=257, version=27412,
count=3, id=257, version=30159,
count=195, id=1, productName=Unmarked objects,
count=12, id=261, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=258, version=30159,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=4, id=257, version=27412,
count=3, id=257, version=30159,
count=603, id=1, productName=Unmarked objects,
count=102, id=260, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=258, version=30159,
Sep 10, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Sep 10, 2024
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=197, id=1, productName=Unmarked objects,
count=5, id=257, version=33731,
count=4, id=259, version=33731,
count=8, id=260, version=33731,
count=143, id=261, version=33731,
count=1, id=256, version=33731,
count=1, id=255, version=33731,
count=1, id=258, version=33731,
Sep 10, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Sep 10, 2024
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=45, id=1, productName=Unmarked objects,
count=1, productName=Unmarked objects (old),
count=16, id=260, version=33731,
count=31, id=261, version=33731,
count=21, id=259, version=33731,
count=1, id=256, version=33731,
count=1, id=255, version=33731,
count=1, id=258, version=33731,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=30034,
count=4, id=253, version=28518,
count=11, id=261, version=30034,
count=8, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=27412,
count=49, id=1, productName=Unmarked objects,
count=15, id=260, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=151,
count=1, id=258, version=30159,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=8, id=260, version=30034,
count=4, id=259, version=30034,
count=3, id=257, version=27412,
count=58, id=1, productName=Unmarked objects,
count=36, id=260, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=151,
count=1, id=258, version=30159,
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=11, id=259, version=30034,
count=11, id=257, version=27412,
count=208, id=1, productName=Unmarked objects,
count=24, productName=Unmarked objects (old),
count=912, id=260, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=258, version=30159,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=8, id=253, version=28518,
count=12, id=261, version=30034,
count=10, id=260, version=30034,
count=10, id=259, version=30034,
count=2, id=257, version=30159,
count=11, id=257, version=27412,
count=191, id=1, productName=Unmarked objects,
count=170, id=260, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=151,
count=1, id=258, version=30159,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=259, version=27412,
count=175, id=261, version=27412,
count=25, id=260, version=27412,
count=31, id=261, version=30034,
count=18, id=260, version=30034,
count=27, id=259, version=30034,
count=10, id=257, version=30159,
count=9, id=257, version=27412,
count=285, id=1, productName=Unmarked objects,
count=1, id=261, version=30159,
count=90, id=260, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=258, version=30159,
Unsigned PE
Checks for missing Authenticode signature.
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=20, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=4, id=257, version=30034,
count=2, id=257, version=27412,
count=3, id=257, version=30159,
count=191, id=1, productName=Unmarked objects,
count=12, id=261, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=258, version=30159,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=10, id=260, version=30034,
count=9, id=259, version=30034,
count=4, id=257, version=27412,
count=3, id=257, version=30159,
count=598, id=1, productName=Unmarked objects,
count=102, id=260, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=258, version=30159,
Sep 10, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Sep 10, 2024
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=33731,
count=193, id=1, productName=Unmarked objects,
count=9, id=259, version=33731,
count=11, id=260, version=33731,
count=141, id=261, version=33731,
count=1, id=256, version=33731,
count=1, id=255, version=33731,
count=1, id=258, version=33731,
Sep 10, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Sep 10, 2024
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=41, id=1, productName=Unmarked objects,
count=22, id=260, version=33731,
count=28, id=261, version=33731,
count=19, id=259, version=33731,
count=1, id=256, version=33731,
count=1, id=255, version=33731,
count=1, id=258, version=33731,
Unsigned PE
Checks for missing Authenticode signature.
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=30034,
count=4, id=253, version=28518,
count=11, id=261, version=30034,
count=10, id=260, version=30034,
count=1, id=259, version=30034,
count=2, id=257, version=27412,
count=46, id=1, productName=Unmarked objects,
count=15, id=260, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=151,
count=1, id=258, version=30159,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=12, id=261, version=30034,
count=10, id=260, version=30034,
count=7, id=259, version=30034,
count=3, id=257, version=27412,
count=55, id=1, productName=Unmarked objects,
count=36, id=260, version=30159,
count=1, id=256, version=30159,
count=1, id=255, version=30159,
count=1, id=151,
count=1, id=258, version=30159,
Dec 11, 2017
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Dec 11, 2017
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.