Evidence_of_Violation.zip
- SHA256 fa5353207aad956bf2ace2d515643327f7dc75aa7726a50667dbbdaeeec1b7cf
Overview
overview
5Static
static
5Evidence_o...on.zip
windows10-2004-x64
1Evidence_o...on.zip
windows11-ltsc_2024-x64
3Evidence_o...cx.exe
windows10-2004-x64
3Evidence_o...cx.exe
windows11-ltsc_2024-x64
3manifest.json
windows10-2004-x64
3manifest.json
windows11-ltsc_2024-x64
3msvcr100.dll
windows10-2004-x64
3msvcr100.dll
windows11-ltsc_2024-x64
3sys_cache_...m4.dat
windows10-2004-x64
3sys_cache_...m4.dat
windows11-ltsc_2024-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Evidence_of_Violation.zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Evidence_of_Violation.zip
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Evidence_of_Violation.docx.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Evidence_of_Violation.docx.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
manifest.json
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
manifest.json
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
msvcr100.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
msvcr100.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
sys_cache_6tkn3tm4.dat
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
sys_cache_6tkn3tm4.dat
Resource
win11ltsc2024-20260911-en
File was altered after it was signed.
| resource |
|---|
| unpack001/msvcr100.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Evidence_of_Violation.docx.exe |
Unsigned PE
Checks for missing Authenticode signature.
count=3, id=171, productName=VS2010 build 30319, version=30319,
count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=15, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=188, version=30716,
count=58, id=1, productName=Unmarked objects,
count=3, id=185, version=30716,
count=1, id=189, version=30716,
count=1, id=184, version=30716,
count=1, id=183, version=30716,
count=1, id=186, version=30716,
Codesign digest Mismatch
File was altered after it was signed.
Jun 11, 2011
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=179, id=1, productName=Unmarked objects,
count=490, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=85, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=52, id=175, version=40219,
count=184, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,