WinLicense_x32_x64_v3.1.9.0.7z
- SHA256 b40bd297ebc732e083cbd357f7cb5b51a19529df36da22b3d7a86e4e0ffeb722
Behavioral task
behavioral1
Sample
WinLicense_x32_x64_v3.1.9.0.7z
Resource
win11-20260513-en
One or more certificates in the signing chain have been revoked, indicating potential compromise.
| resource |
|---|
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicense.exe |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicense64.exe |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/WinLicense_x32_x64_v3.1.9.0/ChilkatDelphi32.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/ConvertDatabase.exe |
| unpack001/WinLicense_x32_x64_v3.1.9.0/ECCfunctions.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/Activation/ExampleActivationFromEmbeddedDLL/Delphi/ActivationDLL.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/Activation/PHP/bin/win/keygen.exe |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/Activation/PHP/bin/win/keygen_dyn.exe |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/ECCfunctions.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/ECCfunctions64.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/ExamplesSDK/Plugins/Examples/Splash Example/Lazarus/WL3SplashScreenPlugin.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/ExamplesSDK/Protection Macros(Check Protection)/NativeAOT/ConsoleWrapper/ExternalDependencies/NativeAotLib.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/ExamplesSDK/Protection Macros(Check Protection)/NativeAOT/ConsoleWrapper/ExternalDependencies/SecureEngineSDK64.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/ExamplesSDK/Protection Macros(Check Protection)/NativeAOT/NativeAotLib/SecureEngineSDK64.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/ExamplesSDK/Protection Macros/NativeAOT/ConsoleWrapper/ExternalDependencies/NativeAotLib.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/ExamplesSDK/Protection Macros/NativeAOT/ConsoleWrapper/ExternalDependencies/SecureEngineSDK64.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/ExamplesSDK/Protection Macros/NativeAOT/NativeAotLib/SecureEngineSDK64.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/SecureEngineSDK32.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/SecureEngineSDK64.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/WinlicenseSDK.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicenseSDK/WinlicenseSDK64.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinlicenseSDK.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/demangler.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/libmysqld.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/libspv.dll |
| unpack001/WinLicense_x32_x64_v3.1.9.0/shfolder.dll |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicense.exe |
| unpack001/WinLicense_x32_x64_v3.1.9.0/WinLicense64.exe |
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=241, version=40116,
count=148, id=243, version=40116,
count=24, id=242, version=40116,
count=20, id=259, version=24123,
count=21, id=261, version=24123,
count=15, id=260, version=24123,
count=167, id=109, productName=VS2005 build 50727, version=50727,
count=5, id=203, version=65501,
count=92, id=1, productName=Unmarked objects,
count=2, id=265, version=24213,
count=1, id=256, productName=VS2015 UPD3 build 24213, version=24213,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3 build 24213, version=24213,
Revoked Certificate in Chain
One or more certificates in the signing chain have been revoked, indicating potential compromise.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Mar 27, 2024
CN=Rafael Patricio Ahucha Ruiz,O=Rafael Patricio Ahucha Ruiz,L=Jerez de la Frontera,ST=Cadiz,C=ES,1.2.840.113549.1.9.1=#0c0f696e666f406f7265616e732e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Rafael Patricio Ahucha Ruiz,O=Rafael Patricio Ahucha Ruiz,L=Jerez de la Frontera,ST=Cadiz,C=ES,1.2.840.113549.1.9.1=#0c0f696e666f406f7265616e732e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Revoked Certificate in Chain
One or more certificates in the signing chain have been revoked, indicating potential compromise.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Mar 27, 2024
CN=Rafael Patricio Ahucha Ruiz,O=Rafael Patricio Ahucha Ruiz,L=Jerez de la Frontera,ST=Cadiz,C=ES,1.2.840.113549.1.9.1=#0c0f696e666f406f7265616e732e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Rafael Patricio Ahucha Ruiz,O=Rafael Patricio Ahucha Ruiz,L=Jerez de la Frontera,ST=Cadiz,C=ES,1.2.840.113549.1.9.1=#0c0f696e666f406f7265616e732e636f6d
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=241, version=40116,
count=148, id=243, version=40116,
count=24, id=242, version=40116,
count=20, id=259, version=24123,
count=21, id=261, version=24123,
count=15, id=260, version=24123,
count=167, id=109, productName=VS2005 build 50727, version=50727,
count=5, id=203, version=65501,
count=92, id=1, productName=Unmarked objects,
count=2, id=265, version=24213,
count=1, id=256, productName=VS2015 UPD3 build 24213, version=24213,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3 build 24213, version=24213,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=241, version=40116,
count=148, id=243, version=40116,
count=13, id=242, version=40116,
count=7, id=259, version=24123,
count=20, id=261, version=24123,
count=16, id=260, version=24123,
count=167, id=109, productName=VS2005 build 50727, version=50727,
count=5, id=203, version=65501,
count=93, id=1, productName=Unmarked objects,
count=2, id=265, version=24213,
count=1, id=256, productName=VS2015 UPD3 build 24213, version=24213,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3 build 24213, version=24213,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=125, version=2207,
count=1, id=122, version=2207,
count=1, id=120, version=2207,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=125, version=2207,
count=1, id=122, version=2207,
count=1, id=120, version=2207,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=125, version=2207,
count=1, id=122, version=2207,
count=1, id=120, version=2207,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=125, version=2207,
count=1, id=122, version=2207,
count=1, id=120, version=2207,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=18, version=8444,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=125, version=2207,
count=1, id=122, version=2207,
count=1, id=120, version=2207,
Unsigned PE
Checks for missing Authenticode signature.
count=14, id=259, version=29395,
count=177, id=261, version=29395,
count=22, id=260, version=29395,
count=1, id=253, version=31935,
count=68, id=261, version=31935,
count=15, id=260, version=31935,
count=21, id=259, version=31935,
count=35, id=109, productName=VS2005 build 50727, version=50727,
count=9, id=257, version=29395,
count=117, id=1, productName=Unmarked objects,
count=3, id=265, version=32216,
count=1, id=256, version=32216,
count=1, id=255, version=32216,
count=1, id=151,
count=1, id=258, version=32216,
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=259, version=29395,
count=177, id=261, version=29395,
count=18, id=260, version=29395,
count=1, id=253, version=31935,
count=71, id=261, version=31935,
count=14, id=260, version=31935,
count=10, id=259, version=31935,
count=35, id=109, productName=VS2005 build 50727, version=50727,
count=9, id=257, version=29395,
count=126, id=1, productName=Unmarked objects,
count=3, id=265, version=32216,
count=1, id=256, version=32216,
count=1, id=255, version=32216,
count=1, id=151,
count=1, id=258, version=32216,
Unsigned PE
Checks for missing Authenticode signature.
count=14, id=241, version=40116,
count=155, id=243, version=40116,
count=29, id=242, version=40116,
count=1, id=199, version=41118,
count=23, id=259, version=24123,
count=49, id=261, version=24123,
count=32, id=260, version=24123,
count=35, id=109, productName=VS2005 build 50727, version=50727,
count=9, id=203, version=65501,
count=121, id=1, productName=Unmarked objects,
count=3, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=152, version=20115,
count=63, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=453, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=206, id=1, productName=Unmarked objects,
count=473, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=41, id=225, version=20806,
count=26, id=223, version=20806,
count=158, id=224, version=20806,
count=11, id=203, version=65501,
count=111, id=1, productName=Unmarked objects,
count=429, id=224, productName=VS2013 UPD4 build 31101, version=31101,
count=16, id=228, version=21005,
count=1, id=220, productName=VS2013 build 21005, version=21005,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 build 21005, version=21005,
Unsigned PE
Checks for missing Authenticode signature.
Jul 13, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 13, 2016
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=7, id=241, version=40116,
count=107, id=243, version=40116,
count=26, id=242, version=40116,
count=4, id=261, version=24123,
count=19, id=259, version=24123,
count=12, id=260, version=24123,
count=5, id=203, version=65501,
count=98, id=1, productName=Unmarked objects,
count=14, id=265, version=24123,
count=1, id=256, version=24123,
count=1, id=255, version=24123,
count=1, id=258, version=24123,