ERROR143.Incl.DLC.zip
- SHA256 ee369faa012d6c2c8e8d8563560a34d7ba943b8274a3800f92c3b12d38025ff6
Static task
static1
Detects file using ACProtect software.
| resource | yara_rule |
|---|---|
| static1/unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/steam_api.dll | acprotect |
File was altered after it was signed.
| resource |
|---|
| unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/steam_api.dll |
| unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/steam_api64.dll |
File was codesigned using an insecure algorithm.
| resource |
|---|
| unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/steam_api64.rne |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/ERROR143.Incl.DLC/Error143/Error143.exe |
| unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/libEGL.dll |
| unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/libGLESv2.dll |
| unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/libpython3.9.dll |
| unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/librenpython.dll |
| unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/libwinpthread-1.dll |
| unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/nvdrs.dll |
| unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/python.exe |
| unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/pythonw.exe |
| unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/zsync.exe |
| unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/zsyncmake.exe |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/ERROR143.Incl.DLC/Error143/lib/py3-windows-x86_64/steam_api.rne |
| unpack001/ERROR143.Incl.DLC/_Redist/dotNetFx40_Full_setup.exe |
| unpack001/ERROR143.Incl.DLC/_Redist/dxwebsetup.exe |
| unpack001/ERROR143.Incl.DLC/_Redist/oalinst.exe |
| unpack001/ERROR143.Incl.DLC/_Redist/vcredist_x64.exe |
| unpack001/ERROR143.Incl.DLC/_Redist/vcredist_x86.exe |
Unsigned PE
Checks for missing Authenticode signature.
Dec 7, 2019
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=57, id=261, version=23524,
count=1, id=260, version=23524,
count=2, id=257, version=27412,
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1167, id=1, productName=Unmarked objects,
count=4, id=259, version=27412,
count=12, id=260, version=27412,
count=1, id=256, version=27412,
count=136, id=264, version=27412,
count=30, id=261, version=27412,
count=2, id=253, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
Codesign digest Mismatch
File was altered after it was signed.
Sep 17, 2024
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=11, id=259, version=30795,
count=191, id=261, version=30795,
count=21, id=260, version=30795,
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=23, id=259, version=33731,
count=18, id=260, version=33731,
count=70, id=261, version=33731,
count=15, id=257, version=30795,
count=143, id=1, productName=Unmarked objects,
count=86, id=264, version=33814,
count=1, id=256, version=33814,
count=1, id=255, version=33814,
count=1, id=258, version=33814,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 21, 2015
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
Codesign digest Mismatch
File was altered after it was signed.
Dec 2, 2024
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=6, id=259, version=30795,
count=191, id=261, version=30795,
count=17, id=260, version=30795,
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=10, id=259, version=33731,
count=15, id=260, version=33731,
count=73, id=261, version=33731,
count=15, id=257, version=30795,
count=153, id=1, productName=Unmarked objects,
count=87, id=264, version=33814,
count=1, id=256, version=33814,
count=1, id=255, version=33814,
count=1, id=258, version=33814,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Sep 10, 2021
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=158, version=20928,
count=3, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=43, id=171, version=21009,
count=18, id=158, version=21009,
count=105, id=170, version=21009,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=194, id=1, productName=Unmarked objects,
count=69, id=175, version=20928,
count=1, id=171, version=20928,
count=1, id=155, version=20928,
count=1, id=154, version=20928,
count=1, id=157, version=20928,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=13, id=25, version=9210,
count=126, id=1, productName=Unmarked objects,
count=1, id=69, version=9111,
count=24, id=28, version=9178,
count=1, id=61, version=9210,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 3, 2009
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
count=18, id=125, productName=VS2005 build 50727, version=50727,
count=107, id=109, productName=VS2005 build 50727, version=50727,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=135, id=1, productName=Unmarked objects,
count=9, productName=Unmarked objects (old),
count=34, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=259, version=24123,
count=19, id=260, version=24123,
count=38, id=261, version=24123,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=337, id=1, productName=Unmarked objects,
count=75, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=259, version=24123,
count=19, id=260, version=24123,
count=38, id=261, version=24123,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=337, id=1, productName=Unmarked objects,
count=75, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=125, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=125, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Aug 23, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US