9f598a-AddonWeaponsBuilder-1.2.zip
- SHA256 d1b4a8db540ce080d639fcc8339fa63e803441384d0f7828c01a8e95b9a1d387
Overview
overview
10Static
static
109f598a-Add....2.zip
windows11-21h2-x64
1AddonWeapo...io.dll
windows11-21h2-x64
1AddonWeapo...LE.vbs
windows11-21h2-x64
5AddonWeapo...ET.vbs
windows11-21h2-x64
5AddonWeapo...OL.vbs
windows11-21h2-x64
5AddonWeapo...LE.vbs
windows11-21h2-x64
5AddonWeapo...UN.vbs
windows11-21h2-x64
5AddonWeapo...LE.vbs
windows11-21h2-x64
5AddonWeapo...MG.vbs
windows11-21h2-x64
5AddonWeapo...DW.vbs
windows11-21h2-x64
5AddonWeapo...OL.vbs
windows11-21h2-x64
5AddonWeapo...LE.vbs
windows11-21h2-x64
5AddonWeapo...ON.vbs
windows11-21h2-x64
5AddonWeapo...ER.vbs
windows11-21h2-x64
5AddonWeapo...RK.vbs
windows11-21h2-x64
5AddonWeapo...UN.vbs
windows11-21h2-x64
5AddonWeapo...HT.vbs
windows11-21h2-x64
5AddonWeapo...OL.vbs
windows11-21h2-x64
5AddonWeapo...ER.vbs
windows11-21h2-x64
5AddonWeapo...KE.vbs
windows11-21h2-x64
5AddonWeapo...RG.vbs
windows11-21h2-x64
5AddonWeapo...-3.dll
windows11-21h2-x64
1AddonWeapo...-8.dll
windows11-21h2-x64
1AddonWeapo...-3.dll
windows11-21h2-x64
1AddonWeapo...at.dll
windows11-21h2-x64
1AddonWeapo...n3.dll
windows11-21h2-x64
1AddonWeapo...13.dll
windows11-21h2-x64
1AddonWeapo...me.dll
windows11-21h2-x64
3AddonWeapo...ct.dll
windows11-21h2-x64
1AddonWeapo...ta.dll
windows11-21h2-x64
1AddonWeapo...40.dll
windows11-21h2-x64
1AddonWeapo..._1.dll
windows11-21h2-x64
1Behavioral task
behavioral1
Sample
9f598a-AddonWeaponsBuilder-1.2.zip
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
AddonWeapons Builder/_asyncio.dll
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
AddonWeapons Builder/data/templates/WEAPON_ADVANCEDRIFLE.vbs
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
AddonWeapons Builder/data/templates/WEAPON_AIRSTRIKE_ROCKET.vbs
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
AddonWeapons Builder/data/templates/WEAPON_APPISTOL.vbs
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
AddonWeapons Builder/data/templates/WEAPON_BULLPUPRIFLE.vbs
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
AddonWeapons Builder/data/templates/WEAPON_BULLPUPSHOTGUN.vbs
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
AddonWeapons Builder/data/templates/WEAPON_CARBINERIFLE.vbs
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
AddonWeapons Builder/data/templates/WEAPON_COMBATMG.vbs
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
AddonWeapons Builder/data/templates/WEAPON_COMBATPDW.vbs
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
AddonWeapons Builder/data/templates/WEAPON_COMBATPISTOL.vbs
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
AddonWeapons Builder/data/templates/WEAPON_COMPACTRIFLE.vbs
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
AddonWeapons Builder/data/templates/WEAPON_DOUBLEACTION.vbs
Resource
win11-20260513-en
Behavioral task
behavioral14
Sample
AddonWeapons Builder/data/templates/WEAPON_EMPLAUNCHER.vbs
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
AddonWeapons Builder/data/templates/WEAPON_FIREWORK.vbs
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
AddonWeapons Builder/data/templates/WEAPON_FLAREGUN.vbs
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
AddonWeapons Builder/data/templates/WEAPON_FLASHLIGHT.vbs
Resource
win11-20260513-en
Behavioral task
behavioral18
Sample
AddonWeapons Builder/data/templates/WEAPON_GADGETPISTOL.vbs
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
AddonWeapons Builder/data/templates/WEAPON_GRENADELAUNCHER.vbs
Resource
win11-20260513-en
Behavioral task
behavioral20
Sample
AddonWeapons Builder/data/templates/WEAPON_GRENADELAUNCHER_SMOKE.vbs
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
AddonWeapons Builder/data/templates/WEAPON_GUSENBERG.vbs
Resource
win11-20260513-en
Behavioral task
behavioral22
Sample
AddonWeapons Builder/libcrypto-3.dll
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
AddonWeapons Builder/libffi-8.dll
Resource
win11-20260513-en
Behavioral task
behavioral24
Sample
AddonWeapons Builder/libssl-3.dll
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
AddonWeapons Builder/pyexpat.dll
Resource
win11-20260513-en
Behavioral task
behavioral26
Sample
AddonWeapons Builder/python3.dll
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
AddonWeapons Builder/python313.dll
Resource
win11-20260513-en
Behavioral task
behavioral28
Sample
AddonWeapons Builder/pythonnet/runtime/Python.Runtime.dll
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
AddonWeapons Builder/select.dll
Resource
win11-20260513-en
Behavioral task
behavioral30
Sample
AddonWeapons Builder/unicodedata.dll
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
AddonWeapons Builder/vcruntime140.dll
Resource
win11-20260513-en
Behavioral task
behavioral32
Sample
AddonWeapons Builder/vcruntime140_1.dll
Resource
win11-20260513-en
Blankgrabber is an infostealer written in Python and packaged with Pyinstaller.
| resource | yara_rule |
|---|---|
| static1/unpack001/AddonWeapons Builder/AddonWeaponsBuilder.exe | blankgrabber_exe |
| resource |
|---|
| analyses/260802/260802-vkpg6sdj2x/static1/unpack001/AddonWeapons Builder/web/app.js |
Checks for missing JAR codesign signature.
| resource |
|---|
| unpack001/AddonWeapons Builder/webview/lib/pywebview-android.jar |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/AddonWeapons Builder/AddonWeaponsBuilder.exe |
| unpack001/AddonWeapons Builder/_cffi_backend.pyd |
| unpack001/AddonWeapons Builder/bcrypt/_bcrypt.pyd |
| unpack001/AddonWeapons Builder/clr_loader/ffi/dlls/amd64/ClrLoader.dll |
| unpack001/AddonWeapons Builder/cryptography/hazmat/bindings/_rust.pyd |
| unpack001/AddonWeapons Builder/pythonnet/runtime/Python.Runtime.dll |
| unpack001/AddonWeapons Builder/webview/lib/WebBrowserInterop.x64.dll |
A stealer written in Python and packaged with Pyinstaller
Unsigned PE
Checks for missing Authenticode signature.
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=259, version=34321,
count=8, id=260, version=34321,
count=12, id=261, version=34321,
count=3, id=257, version=34436,
count=2, id=257, version=33138,
count=137, id=1, productName=Unmarked objects,
count=1, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=253, version=34321,
count=4, id=259, version=34321,
count=8, id=260, version=34321,
count=13, id=261, version=34321,
count=3, id=257, version=34436,
count=2, id=257, version=33138,
count=93, id=1, productName=Unmarked objects,
count=8, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33808,
count=4, id=253, version=33808,
count=4, id=259, version=33808,
count=8, id=260, version=33808,
count=12, id=261, version=33808,
count=4, id=257, version=30795,
count=3, id=257, version=33812,
count=245, id=1, productName=Unmarked objects,
count=4, id=264, version=34120,
count=1, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=256, version=34120,
count=1, id=255, version=34120,
count=1, id=258, version=34120,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=4, id=259, version=34321,
count=8, id=260, version=34321,
count=12, id=261, version=34321,
count=2, id=257, version=34436,
count=1, id=260, version=33138,
count=6, id=257, version=33138,
count=3, id=257, version=31937,
count=245, id=1, productName=Unmarked objects,
count=6, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=4, id=259, version=34321,
count=8, id=260, version=34321,
count=13, id=261, version=34321,
count=3, id=257, version=34436,
count=2, id=257, version=33138,
count=162, id=1, productName=Unmarked objects,
count=1, id=259, version=34436,
count=15, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=259, version=34321,
count=8, id=260, version=34321,
count=13, id=261, version=34321,
count=2, id=257, version=34436,
count=3, id=257, version=33138,
count=164, id=1, productName=Unmarked objects,
count=4, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=259, version=34321,
count=8, id=260, version=34321,
count=12, id=261, version=34321,
count=2, id=257, version=34436,
count=2, id=257, version=33138,
count=3, id=257, version=33813,
count=132, id=1, productName=Unmarked objects,
count=1, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=259, version=34321,
count=8, id=260, version=34321,
count=12, id=261, version=34321,
count=3, id=257, version=34436,
count=2, id=257, version=33138,
count=96, id=1, productName=Unmarked objects,
count=58, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=259, version=34321,
count=8, id=260, version=34321,
count=13, id=261, version=34321,
count=2, id=257, version=34436,
count=97, id=1, productName=Unmarked objects,
count=5, id=257, version=33138,
count=2, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=259, version=34321,
count=8, id=260, version=34321,
count=12, id=261, version=34321,
count=2, id=257, version=34436,
count=119, id=1, productName=Unmarked objects,
count=5, id=257, version=33138,
count=1, id=260, version=33138,
count=1, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=259, version=34321,
count=8, id=260, version=34321,
count=12, id=261, version=34321,
count=3, id=257, version=34436,
count=2, id=257, version=33138,
count=67, id=1, productName=Unmarked objects,
count=1, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=259, version=34321,
count=8, id=260, version=34321,
count=13, id=261, version=34321,
count=2, id=257, version=34436,
count=189, id=1, productName=Unmarked objects,
count=9, id=257, version=33138,
count=1, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=259, version=34321,
count=8, id=260, version=34321,
count=13, id=261, version=34321,
count=2, id=257, version=34436,
count=4, id=257, version=33813,
count=408, id=1, productName=Unmarked objects,
count=7, id=257, version=33138,
count=2, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=259, version=34321,
count=8, id=260, version=34321,
count=12, id=261, version=34321,
count=2, id=257, version=34436,
count=5, id=257, version=33138,
count=42, id=1, productName=Unmarked objects,
count=1, id=264, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=34321,
count=4, id=259, version=34321,
count=8, id=260, version=34321,
count=2, id=257, version=34436,
count=30, id=261, version=34321,
count=7, id=257, version=33138,
count=93, id=1, productName=Unmarked objects,
count=1, id=260, version=33138,
count=1, id=265, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=3, id=259, version=35207,
count=7, id=260, version=35207,
count=15, id=261, version=35207,
count=4, id=257, version=33140,
count=3, id=257, version=33135,
count=133, id=1, productName=Unmarked objects,
count=71, productName=Unmarked objects (old),
count=1, id=256, version=35217,
count=1, id=258, version=35217,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=4, id=259, version=34321,
count=8, id=260, version=34321,
count=17, id=261, version=34321,
count=14, id=257, version=33140,
count=3, id=257, version=33135,
count=543, id=1, productName=Unmarked objects,
count=953, id=260, version=34808,
count=151, productName=Unmarked objects (old),
count=1, id=256, version=34808,
count=1, id=258, version=34808,
Sep 4, 2024
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33731,
count=4, id=259, version=33731,
count=8, id=260, version=33731,
count=12, id=261, version=33731,
count=179, id=1, productName=Unmarked objects,
count=11, id=257, version=30795,
count=32, id=259, version=33813,
count=872, id=260, version=33813,
count=1, id=256, version=33813,
count=1, id=255, version=33813,
count=1, id=258, version=33813,
Feb 9, 2023
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31823,
count=3, id=257, version=30795,
count=41, id=1, productName=Unmarked objects,
count=13, id=261, version=31823,
count=8, id=260, version=31823,
count=4, id=259, version=31823,
count=7, id=260, version=31937,
count=1, id=259, version=31937,
count=1, id=256, version=31937,
count=1, id=258, version=31937,
Sep 4, 2024
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33731,
count=2, id=257, version=30795,
count=4, id=259, version=33731,
count=8, id=260, version=33731,
count=12, id=261, version=33731,
count=3, id=257, version=33813,
count=542, id=1, productName=Unmarked objects,
count=48, id=260, version=33813,
count=1, id=256, version=33813,
count=1, id=255, version=33813,
count=1, id=258, version=33813,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=259, version=34321,
count=8, id=260, version=34321,
count=13, id=261, version=34321,
count=2, id=257, version=34436,
count=3, id=257, version=33138,
count=114, id=1, productName=Unmarked objects,
count=4, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=1, id=264, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=2, id=257, version=34321,
count=14, id=253, version=34321,
count=4, id=259, version=34321,
count=8, id=260, version=34321,
count=13, id=261, version=34321,
count=26, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=257, version=33138,
count=393, id=1, productName=Unmarked objects,
count=234, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Unsigned PE
Checks for missing Authenticode signature.
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=4, id=259, version=34321,
count=8, id=260, version=34321,
count=12, id=261, version=34321,
count=2, id=257, version=34436,
count=66, id=1, productName=Unmarked objects,
count=5, id=257, version=33138,
count=1, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Feb 4, 2025
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=259, version=34321,
count=8, id=260, version=34321,
count=13, id=261, version=34321,
count=3, id=257, version=34436,
count=2, id=257, version=33138,
count=79, id=1, productName=Unmarked objects,
count=1, id=269, version=34436,
count=1, id=256, version=34436,
count=1, id=255, version=34436,
count=1, id=258, version=34436,
Jul 26, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 26, 2024
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=45, id=1, productName=Unmarked objects,
count=1, productName=Unmarked objects (old),
count=16, id=260, version=33923,
count=31, id=261, version=33923,
count=21, id=259, version=33923,
count=1, id=256, version=33923,
count=1, id=255, version=33923,
count=1, id=258, version=33923,
Jul 26, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jul 26, 2024
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=2, id=257, version=33923,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=51, id=1, productName=Unmarked objects,
count=7, id=260, version=33923,
count=27, id=261, version=33923,
count=5, id=259, version=33923,
count=1, id=256, version=33923,
count=1, id=255, version=33923,
count=1, id=258, version=33923,
Suspicious SVG script tag
Mar 8, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Mar 8, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned JAR
Checks for missing JAR codesign signature.
Mar 8, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US