Highway.zip
- SHA256 432e949f94e8bf2204e5a5740597db9d892fb179f7e6fe7af23f6f94d1e7ed54
Static task
static1
Behavioral task
behavioral1
Sample
Highway.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Highway.zip
Resource
win11ltsc2024-20260709-en
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
| resource |
|---|
| unpack001/version.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/version.dll |
Jan 15, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Photoshop\, Bridge,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=8, id=260, version=26706,
count=6, id=259, version=26706,
count=26, id=261, version=26706,
count=4, id=257, version=26706,
count=48, productName=Unmarked objects (old),
count=2, id=257, productName=VS2017 v15.6.7 build 26132, version=26132,
count=2, id=257, version=25203,
count=9, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=258, id=1, productName=Unmarked objects,
count=1, id=259, productName=VS2017 v15.9.11 build 27030, version=27030,
count=74, id=265, version=27030,
count=1, id=256, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=255, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,
Jan 15, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Photoshop\, Bridge,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=26706,
count=3, id=199, version=41118,
count=31, id=261, version=26706,
count=9, id=260, version=26706,
count=3, id=259, version=26706,
count=1, id=260, version=26213,
count=1, id=262, version=26213,
count=2, id=257, version=27031,
count=11, id=125, productName=VS2005 build 50727, version=50727,
count=94, id=109, productName=VS2005 build 50727, version=50727,
count=18, id=257, version=26213,
count=16, id=257, productName=VS2017 v15.9.11 build 27030, version=27030,
count=887, id=1, productName=Unmarked objects,
count=650, id=261, productName=VS2017 v15.9.11 build 27030, version=27030,
count=9, id=260, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=256, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=255, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,
Aug 22, 2025
CN=PANDORATV Co.\,Ltd,O=PANDORATV Co.\,Ltd,L=Seongnam-si,ST=Gyeonggi-do,C=KR
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
count=34, id=241, version=40116,
count=211, id=243, version=40116,
count=59, id=242, version=40116,
count=1, id=135, version=30729,
count=2, id=261, version=23013,
count=43, id=260, version=24123,
count=15, id=259, version=24123,
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=3, productName=Unmarked objects (old),
count=1, id=136, version=30729,
count=1, id=173, version=30319,
count=2, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=14, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=45, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1115, id=1, productName=Unmarked objects,
count=452, id=261, version=24123,
count=759, id=265, version=24210,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
Jan 15, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Photoshop\, Bridge,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=8, id=260, version=26706,
count=3, id=259, version=26706,
count=24, id=261, version=26706,
count=4, id=257, version=26706,
count=1, id=262, version=25203,
count=8, id=257, version=25203,
count=53, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=166, id=1, productName=Unmarked objects,
count=25, id=265, version=27030,
count=1, id=256, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=255, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,
Jun 6, 2024
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Jan 15, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Photoshop\, Bridge,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=261, version=26706,
count=8, id=260, version=26706,
count=2, id=259, version=26706,
count=4, id=257, version=26706,
count=3, id=257, version=26213,
count=98, id=1, productName=Unmarked objects,
count=30, id=261, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=256, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=255, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,
Jan 15, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Photoshop\, Bridge,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=3, id=262, version=25203,
count=11, id=257, version=25203,
count=191, id=1, productName=Unmarked objects,
count=27, id=261, version=26706,
count=8, id=260, version=26706,
count=3, id=259, version=26706,
count=77, id=261, productName=VS2017 v15.9.11 build 27030, version=27030,
count=3, id=260, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=256, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=255, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,
Jan 15, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Photoshop\, Bridge,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=199, version=41118,
count=4, id=259, version=25810,
count=11, id=260, version=25810,
count=4, id=257, version=25810,
count=29, id=261, version=25810,
count=739, productName=Unmarked objects (old),
count=7, id=261, productName=VS2017 v15.8.9? build 26730, version=26730,
count=28, id=260, productName=VS2017 v15.8.9? build 26730, version=26730,
count=5, id=262, version=25203,
count=13, id=260, productName=VS2017 v15.7.1 build 26428, version=26428,
count=43, id=257, version=25203,
count=786, id=1, productName=Unmarked objects,
count=632, id=261, productName=VS2017 v15.5.6 build 25835, version=25835,
count=1, id=256, productName=VS2017 v15.5.6 build 25835, version=25835,
count=1, id=255, productName=VS2017 v15.5.6 build 25835, version=25835,
count=1, id=258, productName=VS2017 v15.5.6 build 25835, version=25835,
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Unsigned PE
Checks for missing Authenticode signature.
count=137, id=261, version=33145,
count=15, id=260, version=33145,
count=17, id=259, version=33145,
count=9, id=259, version=35207,
count=14, id=260, version=35207,
count=38, id=261, version=35207,
count=3, id=257, version=33145,
count=107, id=1, productName=Unmarked objects,
count=1, id=261, version=35225,
count=1, id=259, version=35225,
count=1, id=256, version=35225,
count=1, id=255, version=35225,
count=1, id=151,
count=1, id=258, version=35225,