win-x64.zip
- SHA256 984c66ac5e9e44b26ad673b14172ccd16b6c0ac2bc1fce988789ff672579de4b
Overview
overview
10Static
static
10win-x64.zip
windows10-2004-x64
1win-x64.zip
windows11-ltsc_2024-x64
1win-x64/.p...ICENSE
windows10-2004-x64
3win-x64/.p...ICENSE
windows11-ltsc_2024-x64
3win-x64/.p...NOTICE
windows10-2004-x64
3win-x64/.p...NOTICE
windows11-ltsc_2024-x64
3win-x64/.p...DME.md
windows10-2004-x64
3win-x64/.p...DME.md
windows11-ltsc_2024-x64
3win-x64/.p...es.txt
windows10-2004-x64
1win-x64/.p...es.txt
windows11-ltsc_2024-x64
1win-x64/.p...s.json
windows10-2004-x64
3win-x64/.p...s.json
windows11-ltsc_2024-x64
3win-x64/.p...x.d.ts
windows10-2004-x64
6win-x64/.p...x.d.ts
windows11-ltsc_2024-x64
1win-x64/.p...ex.mjs
windows10-2004-x64
3win-x64/.p...ex.mjs
windows11-ltsc_2024-x64
3win-x64/.p...on.png
windows10-2004-x64
1win-x64/.p...on.png
windows11-ltsc_2024-x64
1win-x64/.p...icense
windows10-2004-x64
3win-x64/.p...icense
windows11-ltsc_2024-x64
3win-x64/.p...p.json
windows10-2004-x64
3win-x64/.p...p.json
windows11-ltsc_2024-x64
3win-x64/.p...on.png
windows10-2004-x64
1win-x64/.p...on.png
windows11-ltsc_2024-x64
1win-x64/.p...ILL.md
windows10-2004-x64
3win-x64/.p...ILL.md
windows11-ltsc_2024-x64
3win-x64/.p...tes.md
windows10-2004-x64
3win-x64/.p...tes.md
windows11-ltsc_2024-x64
3win-x64/.p...sts.md
windows10-2004-x64
3win-x64/.p...sts.md
windows11-ltsc_2024-x64
3win-x64/.p...ent.md
windows10-2004-x64
3win-x64/.p...ent.md
windows11-ltsc_2024-x64
3Static task
static1
Behavioral task
behavioral1
Sample
win-x64.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
win-x64.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
win-x64/.playwright/package/LICENSE
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
win-x64/.playwright/package/LICENSE
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
win-x64/.playwright/package/NOTICE
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
win-x64/.playwright/package/NOTICE
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
win-x64/.playwright/package/README.md
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
win-x64/.playwright/package/README.md
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
win-x64/.playwright/package/ThirdPartyNotices.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
win-x64/.playwright/package/ThirdPartyNotices.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
win-x64/.playwright/package/browsers.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
win-x64/.playwright/package/browsers.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
win-x64/.playwright/package/index.d.ts
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
win-x64/.playwright/package/index.d.ts
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
win-x64/.playwright/package/index.mjs
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
win-x64/.playwright/package/index.mjs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
win-x64/.playwright/package/lib/server/chromium/appIcon.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
win-x64/.playwright/package/lib/server/chromium/appIcon.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
win-x64/.playwright/package/lib/serverRegistry.js.license
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
win-x64/.playwright/package/lib/serverRegistry.js.license
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
win-x64/.playwright/package/lib/tools/cli-client/help.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
win-x64/.playwright/package/lib/tools/cli-client/help.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
win-x64/.playwright/package/lib/tools/dashboard/appIcon.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
win-x64/.playwright/package/lib/tools/dashboard/appIcon.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
win-x64/.playwright/package/lib/tools/skills/playwright-cli/SKILL.md
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
win-x64/.playwright/package/lib/tools/skills/playwright-cli/SKILL.md
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
win-x64/.playwright/package/lib/tools/skills/playwright-cli/references/element-attributes.md
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
win-x64/.playwright/package/lib/tools/skills/playwright-cli/references/element-attributes.md
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
win-x64/.playwright/package/lib/tools/skills/playwright-cli/references/playwright-tests.md
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
win-x64/.playwright/package/lib/tools/skills/playwright-cli/references/playwright-tests.md
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
win-x64/.playwright/package/lib/tools/skills/playwright-cli/references/session-management.md
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
win-x64/.playwright/package/lib/tools/skills/playwright-cli/references/session-management.md
Resource
win11ltsc2024-20260709-en
ps1
https://dl.google.com/tag/s/dl/chrome/install/beta/googlechromebetastandaloneenterprise64.msi
ps1
https://dl.google.com/tag/s/dl/chrome/install/googlechromestandaloneenterprise64.msi
Embeds OpenSSL, may be used to circumvent TLS interception.
| resource | yara_rule |
|---|---|
| static1/unpack001/win-x64/.playwright/node/darwin-arm64/node | embeds_openssl |
| static1/unpack001/win-x64/.playwright/node/darwin-x64/node | embeds_openssl |
| static1/unpack001/win-x64/.playwright/node/linux-arm64/node | embeds_openssl |
| static1/unpack001/win-x64/.playwright/node/linux-x64/node | embeds_openssl |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/chrome.dll |
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/chrome.exe |
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/chrome_elf.dll |
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/chrome_proxy.exe |
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/chrome_pwa_launcher.exe |
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/chrome_wer.dll |
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/dxcompiler.dll |
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/elevated_tracing_service.exe |
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/elevation_service.exe |
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/libEGL.dll |
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/libGLESv2.dll |
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/notification_helper.exe |
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/setup.exe |
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/vk_swiftshader.dll |
| unpack001/win-x64/browsers/chromium-1234/chrome-win64/vulkan-1.dll |
| unpack001/win-x64/browsers/chromium_headless_shell-1234/chrome-headless-shell-win64/chrome-headless-shell.exe |
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
Jul 29, 2026
CN=OpenJS Foundation,O=OpenJS Foundation,L=San Francisco,ST=California,C=US
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Sep 9, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Sep 9, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Sep 9, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Sep 9, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Sep 9, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Sep 9, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Dec 15, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Sep 9, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Sep 9, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Sep 9, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Sep 9, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Sep 9, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Sep 9, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Sep 9, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Sep 9, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Jan 26, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=33145,
count=148, id=1, productName=Unmarked objects,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=60, id=261, version=27316,
count=1, id=260, version=27316,
count=1, productName=Unmarked objects (old),
count=30, id=259, version=33145,
count=227, id=261, version=33145,
count=67, id=260, version=33145,
count=1, id=256, version=33145,
count=136, id=264, version=33145,
count=1, id=255, version=33145,
count=1, id=258, version=33145,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Jan 26, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=10, id=259, version=34321,
count=11, id=260, version=34321,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=260, version=34808,
count=50, id=261, version=34321,
count=9, id=257, version=28900,
count=211, id=1, productName=Unmarked objects,
count=168, id=261, version=34808,
count=1, id=256, version=34808,
count=1, id=255, version=34808,
count=1, id=151,
count=1, id=258, version=34808,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.