SETUP.zip
- SHA256 c938353d905fe678c4e8d9e732222eb4b651c096bc69149cf9e49d6b788cc500
Overview
overview
7Static
static
7BCP47mrm.dll
windows10-2004-x64
3Setup.exe
windows10-2004-x64
5Setup.exe
windows11-ltsc_2024-x64
5directx/DSETUP.dll
windows10-2004-x64
4directx/DSETUP.dll
windows11-ltsc_2024-x64
4directx/DXSETUP.exe
windows10-2004-x64
4directx/DXSETUP.exe
windows11-ltsc_2024-x64
4D3DCompiler_43.dll
windows10-2004-x64
3D3DCompiler_43.dll
windows11-ltsc_2024-x64
3d3dx9_43.dll
windows10-2004-x64
3d3dx9_43.dll
windows11-ltsc_2024-x64
3directx/bi...er.dll
windows10-2004-x64
3directx/bi...er.dll
windows11-ltsc_2024-x64
3directx/bin/byond.exe
windows10-2004-x64
3directx/bin/byond.exe
windows11-ltsc_2024-x64
3directx/bi...re.dll
windows10-2004-x64
3directx/bi...re.dll
windows11-ltsc_2024-x64
3directx/bi...xt.dll
windows10-2004-x64
3directx/bi...xt.dll
windows11-ltsc_2024-x64
3directx/bi...in.dll
windows10-2004-x64
3directx/bi...in.dll
windows11-ltsc_2024-x64
3directx/bin/dd.exe
windows10-2004-x64
3directx/bin/dd.exe
windows11-ltsc_2024-x64
3directx/bin/dm.exe
windows10-2004-x64
3directx/bin/dm.exe
windows11-ltsc_2024-x64
3directx/bi...on.exe
windows10-2004-x64
3directx/bi...on.exe
windows11-ltsc_2024-x64
3directx/bi...oy.exe
windows10-2004-x64
3directx/bi...oy.exe
windows11-ltsc_2024-x64
3directx/bi...er.exe
windows10-2004-x64
3directx/bi...er.exe
windows11-ltsc_2024-x64
3directx/bi...er.exe
windows10-2004-x64
3Behavioral task
behavioral1
Sample
BCP47mrm.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral4
Sample
directx/DSETUP.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
directx/DSETUP.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral6
Sample
directx/DXSETUP.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
directx/DXSETUP.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
D3DCompiler_43.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
D3DCompiler_43.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
d3dx9_43.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
d3dx9_43.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral12
Sample
directx/bin/WebView2Loader.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
directx/bin/WebView2Loader.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral14
Sample
directx/bin/byond.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
directx/bin/byond.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral16
Sample
directx/bin/byondcore.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
directx/bin/byondcore.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
directx/bin/byondext.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
directx/bin/byondext.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral20
Sample
directx/bin/byondwin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
directx/bin/byondwin.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral22
Sample
directx/bin/dd.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
directx/bin/dd.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral24
Sample
directx/bin/dm.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
directx/bin/dm.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral26
Sample
directx/bin/dreamdaemon.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
directx/bin/dreamdaemon.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral28
Sample
directx/bin/dreamdeploy.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
directx/bin/dreamdeploy.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral30
Sample
directx/bin/dreammaker.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
directx/bin/dreammaker.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral32
Sample
directx/bin/dreamseeker.exe
Resource
win10v2004-20260513-en
Detects file using ACProtect software.
| resource | yara_rule |
|---|---|
| static1/unpack001/directx/bin/fmodex.dll | acprotect |
File was altered after it was signed.
| resource |
|---|
| unpack001/python37.dll |
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
| resource |
|---|
| unpack001/python37.dll |
| resource | yara_rule |
|---|---|
| static1/unpack001/directx/bin/fmodex.dll | upx |
| static1/unpack001/files/ChrisPCMP3.exe | upx |
File was codesigned using an insecure algorithm.
| resource |
|---|
| unpack001/files/node.exe |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/BCP47mrm.dll |
| unpack001/directx/bin/byond.exe |
| unpack001/directx/bin/byondcore.dll |
| unpack001/directx/bin/byondext.dll |
| unpack001/directx/bin/byondwin.dll |
| unpack001/directx/bin/dd.exe |
| unpack001/directx/bin/dm.exe |
| unpack001/directx/bin/dreamdaemon.exe |
| unpack001/directx/bin/dreamdeploy.exe |
| unpack001/directx/bin/dreammaker.exe |
| unpack001/directx/bin/dreamseeker.exe |
| unpack001/directx/bin/fmodex.dll |
| unpack004/out.upx |
| unpack007/dxupdate.dll |
| unpack008/dxupdate.dll |
| unpack001/files/libeay32.dll |
| unpack001/files/mgwz.dll |
| unpack001/files/ssleay32.dll |
| unpack001/mgwz.dll |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/directx/DSETUP.dll |
| unpack001/directx/DXSETUP.exe |
| unpack002/D3DCompiler_43.dll |
| unpack003/d3dx9_43.dll |
| unpack001/directx/directx/DSETUP.dll |
| unpack001/directx/directx/DXSETUP.exe |
| unpack005/D3DCompiler_43.dll |
| unpack006/d3dx9_43.dll |
| unpack001/directx/directx/dsetup32.dll |
| unpack001/directx/dsetup32.dll |
Unsigned PE
Checks for missing Authenticode signature.
count=48, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=33145,
count=12, id=260, version=33145,
count=1205, id=1, productName=Unmarked objects,
count=5, id=257, version=33145,
count=29, id=261, version=33145,
count=1, id=256, version=33145,
count=23, id=264, version=33145,
count=1, id=253, version=33145,
count=1, id=255, version=33145,
count=1, id=258, version=33145,
Mar 10, 2020
CN=Python Software Foundation,O=Python Software Foundation,L=Wolfeboro,ST=New Hampshire,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=24123,
count=1, id=259, version=24123,
count=18, id=261, version=24123,
count=13, id=260, version=24123,
count=3, id=257, version=24234,
count=2, id=257, version=26715,
count=46, id=1, productName=Unmarked objects,
count=1, id=264, version=24234,
count=1, id=255, version=24234,
count=1, id=258, version=24234,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=127, id=1, productName=Unmarked objects,
count=25, id=171, productName=VS2010 build 30319, version=30319,
count=15, id=158, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=106, id=170, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=17, id=158, productName=VS2010 build 30319, version=30319,
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=151, id=1, productName=Unmarked objects,
count=104, id=170, productName=VS2010 build 30319, version=30319,
count=36, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
May 22, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=14, id=158, version=21202,
count=166, id=1, productName=Unmarked objects,
count=7, id=156, version=21202,
count=40, id=171, version=21202,
count=63, id=170, version=21202,
count=1, id=155, version=21202,
count=92, id=175, version=21202,
count=1, id=126, version=50727,
count=1, id=154, version=21202,
count=1, id=157, version=21202,
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
May 22, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=224, id=1, productName=Unmarked objects,
count=9, id=156, version=21202,
count=15, id=158, version=21202,
count=80, id=170, version=21202,
count=1, id=155, version=21202,
count=244, id=171, version=21202,
count=1, id=126, version=50727,
count=1, id=154, version=21202,
count=1, id=157, version=21202,
Oct 10, 2023
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=253, version=28518,
count=13, id=260, version=30034,
count=7, id=259, version=30034,
count=33, id=261, version=30034,
count=4, id=257, version=30034,
count=18, id=257, version=29395,
count=5, id=257, version=30154,
count=1194, id=1, productName=Unmarked objects,
count=32, id=261, version=30154,
count=1, id=255, version=30154,
count=1, id=151,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=253, version=28518,
count=10, id=260, version=30034,
count=15, id=259, version=30034,
count=4, id=257, version=30034,
count=28, id=261, version=30034,
count=14, id=257, version=29395,
count=3, id=257, version=30154,
count=424, id=1, productName=Unmarked objects,
count=170, id=261, version=30154,
count=1, id=260, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=3, id=253, version=28518,
count=12, id=261, version=30034,
count=10, id=260, version=30034,
count=7, id=259, version=30034,
count=5, id=257, version=29395,
count=82, id=1, productName=Unmarked objects,
count=107, id=260, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=156, version=21202,
count=4, id=253, version=28518,
count=12, id=260, version=29395,
count=11, id=260, version=30034,
count=7, id=259, version=30034,
count=6, id=257, version=30034,
count=28, id=261, version=30034,
count=28, id=257, version=29395,
count=2, id=257, version=30154,
count=3, productName=Unmarked objects (old),
count=1716, id=1, productName=Unmarked objects,
count=131, id=261, version=30154,
count=1, id=256, version=30154,
count=1, id=255, version=30154,
count=1, id=151,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=4, id=253, version=28518,
count=27, id=261, version=30034,
count=12, id=260, version=30034,
count=2, id=259, version=30034,
count=6, id=257, version=29395,
count=3, id=257, version=30154,
count=202, id=1, productName=Unmarked objects,
count=2, id=261, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=1, id=253, version=28518,
count=27, id=261, version=30034,
count=12, id=260, version=30034,
count=3, id=259, version=30034,
count=2, id=257, version=29395,
count=3, id=257, version=30154,
count=186, id=1, productName=Unmarked objects,
count=2, id=261, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=253, version=28518,
count=14, id=257, version=29395,
count=13, id=260, version=30034,
count=5, id=259, version=30034,
count=32, id=261, version=30034,
count=4, id=257, version=30034,
count=5, id=257, version=30154,
count=671, id=1, productName=Unmarked objects,
count=17, id=261, version=30154,
count=1, id=255, version=30154,
count=1, id=151,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=29395,
count=268, id=1, productName=Unmarked objects,
count=5, id=257, version=30034,
count=3, id=253, version=28518,
count=32, id=261, version=30034,
count=13, id=260, version=30034,
count=3, id=259, version=30034,
count=1, id=260, version=30154,
count=3, id=261, version=30154,
count=1, id=255, version=30154,
count=1, id=151,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=253, version=28518,
count=12, id=257, version=29395,
count=13, id=260, version=30034,
count=11, id=259, version=30034,
count=32, id=261, version=30034,
count=4, id=257, version=30034,
count=7, id=257, version=30154,
count=2163, id=1, productName=Unmarked objects,
count=77, id=261, version=30154,
count=1, id=255, version=30154,
count=1, id=151,
count=1, id=258, version=30154,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=30034,
count=8, id=253, version=28518,
count=13, id=260, version=30034,
count=7, id=259, version=30034,
count=18, id=257, version=29395,
count=43, id=261, version=30034,
count=5, id=257, version=30154,
count=1909, id=1, productName=Unmarked objects,
count=1, id=260, version=30154,
count=23, id=261, version=30154,
count=1, id=255, version=30154,
count=1, id=151,
count=1, id=258, version=30154,
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
Unsigned PE
Checks for missing Authenticode signature.
count=9, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=1, id=11, version=8047,
count=173, id=1, productName=Unmarked objects,
count=15, id=19, version=8034,
count=55, id=48, version=9044,
count=155, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=8, productName=Unmarked objects (old),
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=9, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=1, id=11, version=8047,
count=173, id=1, productName=Unmarked objects,
count=15, id=19, version=8034,
count=55, id=48, version=9044,
count=155, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=8, productName=Unmarked objects (old),
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=127, id=1, productName=Unmarked objects,
count=25, id=171, productName=VS2010 build 30319, version=30319,
count=15, id=158, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=106, id=170, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=17, id=158, productName=VS2010 build 30319, version=30319,
count=13, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=151, id=1, productName=Unmarked objects,
count=104, id=170, productName=VS2010 build 30319, version=30319,
count=36, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
May 22, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=14, id=158, version=21202,
count=166, id=1, productName=Unmarked objects,
count=7, id=156, version=21202,
count=40, id=171, version=21202,
count=63, id=170, version=21202,
count=1, id=155, version=21202,
count=92, id=175, version=21202,
count=1, id=126, version=50727,
count=1, id=154, version=21202,
count=1, id=157, version=21202,
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
May 22, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=224, id=1, productName=Unmarked objects,
count=9, id=156, version=21202,
count=15, id=158, version=21202,
count=80, id=170, version=21202,
count=1, id=155, version=21202,
count=244, id=171, version=21202,
count=1, id=126, version=50727,
count=1, id=154, version=21202,
count=1, id=157, version=21202,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=172, id=1, productName=Unmarked objects,
count=18, id=158, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=112, id=170, productName=VS2010 build 30319, version=30319,
count=42, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=142, id=1, productName=Unmarked objects,
count=17, id=158, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=109, id=170, productName=VS2010 build 30319, version=30319,
count=36, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=172, id=1, productName=Unmarked objects,
count=18, id=158, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=112, id=170, productName=VS2010 build 30319, version=30319,
count=42, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=142, id=1, productName=Unmarked objects,
count=17, id=158, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=109, id=170, productName=VS2010 build 30319, version=30319,
count=36, id=171, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Nov 11, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=52, id=259, version=26213,
count=160, id=261, version=26213,
count=40, id=260, version=26213,
count=18, id=260, version=26706,
count=25, id=259, version=26706,
count=1, id=261, version=27031,
count=40, id=261, version=26706,
count=13, id=257, version=26213,
count=190, id=1, productName=Unmarked objects,
count=462, id=270, version=27031,
count=1, id=256, version=27031,
count=1, id=255, version=27031,
count=1, id=151,
count=1, id=258, version=27031,
Jul 1, 2026
CN=ChrisPC Software SRL,O=ChrisPC Software SRL,L=Cluj-Napoca,ST=Cluj,C=RO
CN=Microsoft ID Verified CS AOC CA 03,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Unsigned PE
Checks for missing Authenticode signature.
count=44, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=27, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=145, id=1, productName=Unmarked objects,
count=11, id=123, productName=VS2005 build 50727, version=50727,
count=21, productName=Unmarked objects (old),
count=735, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Unsigned PE
Checks for missing Authenticode signature.
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Apr 6, 2021
CN=OpenJS Foundation,O=OpenJS Foundation,L=San Francisco,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=48, id=259, version=26213,
count=207, id=261, version=26213,
count=46, id=260, version=26213,
count=10, id=199, version=41118,
count=26, id=259, version=26706,
count=127, id=261, version=26706,
count=36, id=260, version=26706,
count=24, productName=Unmarked objects (old),
count=23, id=257, version=26213,
count=365, id=1, productName=Unmarked objects,
count=1685, id=265, version=27045,
count=1, id=256, version=27045,
count=1, id=255, version=27045,
count=3, id=151,
count=1, id=258, version=27045,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=32, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=20, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=461, id=1, productName=Unmarked objects,
count=160, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Jul 1, 2026
CN=ChrisPC Software SRL,O=ChrisPC Software SRL,L=Cluj-Napoca,ST=Cluj,C=RO
CN=Microsoft ID Verified CS AOC CA 03,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Unsigned PE
Checks for missing Authenticode signature.
Codesign digest Mismatch
File was altered after it was signed.
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Jul 10, 2026
SERIALNUMBER=66612556,CN=iCareAll Co.\, Limited,O=iCareAll Co.\, Limited,ST=Hong Kong,C=HK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302484b
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=24123,
count=15, id=199, version=41118,
count=11, id=259, version=24123,
count=10, id=261, version=24123,
count=11, id=260, version=24123,
count=11, id=257, version=26715,
count=346, id=1, productName=Unmarked objects,
count=192, id=264, version=24234,
count=1, id=256, version=24234,
count=1, id=255, version=24234,
count=1, id=258, version=24234,
Jan 17, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jan 17, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=41, id=1, productName=Unmarked objects,
count=22, id=260, version=34321,
count=28, id=261, version=34321,
count=19, id=259, version=34321,
count=1, id=256, version=34321,
count=1, id=255, version=34321,
count=1, id=258, version=34321,