pmenexe.zip
- SHA256 583e7dd241aca303f68af3b90251741edd7ec918f1e8033bb97f8389f8b75375
Overview
overview
5Static
static
5Appeon.Pow...12.dll
windows10-2004-x64
1Appeon.Pow...12.dll
windows11-ltsc_2024-x64
1Appeon.Pow...op.dll
windows10-2004-x64
1Appeon.Pow...op.dll
windows11-ltsc_2024-x64
1AtlAuxiliary.dll
windows10-2004-x64
1AtlAuxiliary.dll
windows11-ltsc_2024-x64
1EA_stratee...m1.xls
windows10-2004-x64
1EA_stratee...m1.xls
windows11-ltsc_2024-x64
1Ijwhost.dll
windows10-2004-x64
1Ijwhost.dll
windows11-ltsc_2024-x64
1Koguste_im...l.xlsx
windows10-2004-x64
1Koguste_im...l.xlsx
windows11-ltsc_2024-x64
1Kuuaruanne...m1.xls
windows10-2004-x64
1Kuuaruanne...m1.xls
windows11-ltsc_2024-x64
1Kuuaruanne...m1.xls
windows10-2004-x64
1Kuuaruanne...m1.xls
windows11-ltsc_2024-x64
1Kuuaruanne_vorm1.xls
windows10-2004-x64
1Kuuaruanne_vorm1.xls
windows11-ltsc_2024-x64
1PBDOM.dll
windows10-2004-x64
1PBDOM.dll
windows11-ltsc_2024-x64
1System.IO....ng.dll
windows10-2004-x64
1System.IO....ng.dll
windows11-ltsc_2024-x64
1concrt140.dll
windows10-2004-x64
1concrt140.dll
windows11-ltsc_2024-x64
1curl/curl.exe
windows10-2004-x64
1curl/curl.exe
windows11-ltsc_2024-x64
1curl/libcurl-x64.dll
windows10-2004-x64
1curl/libcurl-x64.dll
windows11-ltsc_2024-x64
1kontojuhised.xlsx
windows10-2004-x64
1kontojuhised.xlsx
windows11-ltsc_2024-x64
1libcurl.dll
windows10-2004-x64
1libcurl.dll
windows11-ltsc_2024-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Appeon.PowerBuilder.DataWindow.Excel12.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Appeon.PowerBuilder.DataWindow.Excel12.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Appeon.PowerBuilder.NETInterop.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Appeon.PowerBuilder.NETInterop.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
AtlAuxiliary.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
AtlAuxiliary.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
EA_strateegia_vorm1.xls
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
EA_strateegia_vorm1.xls
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Ijwhost.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Ijwhost.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Koguste_impordi_fail.xlsx
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Koguste_impordi_fail.xlsx
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
Kuuaruanne_2011_vorm1.xls
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
Kuuaruanne_2011_vorm1.xls
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
Kuuaruanne_2012_vorm1.xls
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
Kuuaruanne_2012_vorm1.xls
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
Kuuaruanne_vorm1.xls
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
Kuuaruanne_vorm1.xls
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
PBDOM.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
PBDOM.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
System.IO.Packaging.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
System.IO.Packaging.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
concrt140.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
concrt140.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
curl/curl.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
curl/curl.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
curl/libcurl-x64.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
curl/libcurl-x64.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
kontojuhised.xlsx
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
kontojuhised.xlsx
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
libcurl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
libcurl.dll
Resource
win11ltsc2024-20260911-en
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
| resource |
|---|
| unpack001/xerces-c.dll |
| unpack001/pbshr.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/PBDOM.pbx |
| unpack001/pmen.exe |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/Appeon.PowerBuilder.DataWindow.Excel12.dll |
| unpack001/Appeon.PowerBuilder.NETInterop.dll |
| unpack001/AtlAuxiliary.dll |
| unpack001/curl/curl.exe |
| unpack001/curl/libcurl-x64.dll |
| unpack001/libcurl.dll |
| unpack001/pbAccessibility.dll |
| unpack001/pbDWExcel12Interop.dll |
| unpack001/pbPDF.dll |
| unpack001/pbUIS.dll |
| unpack001/pbacc.dll |
| unpack001/pbcompression.dll |
| unpack001/pbcrypt.dll |
| unpack001/pbdotnet.dll |
| unpack001/pbdotnetcoreinvoker.dll |
| unpack001/pbdotnetframeworkinvoker.dll |
| unpack001/pbdotnetinvoker.dll |
| unpack001/pbdpl.dll |
| unpack001/pbdwe.dll |
| unpack001/pbhttpclient.dll |
| unpack001/pbjson.dll |
| unpack001/pboauth.dll |
| unpack001/pbodb.dll |
| unpack001/pbpdfbuilder.dll |
| unpack001/pbresource.dll |
| unpack001/pbrestclient.dll |
| unpack001/pbribbonbar.dll |
| unpack001/pbrth.dll |
| unpack001/pbshr.dll |
| unpack001/pbsmtpclient.dll |
| unpack001/pbsvg.dll |
| unpack001/pbsysfunc.dll |
| unpack001/pbtabbedbar.dll |
| unpack001/pbtheme.dll |
| unpack001/pbtra.dll |
| unpack001/pbtrs.dll |
| unpack001/pbvm.dll |
| unpack001/xerces-c.dll |
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=35403,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=10, id=261, version=35403,
count=2, id=257, version=33145,
count=26, id=1, productName=Unmarked objects,
count=2, id=265, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Feb 19, 2026
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=9, id=259, version=35207,
count=11, id=260, version=35207,
count=47, id=261, version=35207,
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=33145,
count=157, id=1, productName=Unmarked objects,
count=1, id=259, version=35220,
count=11, id=265, version=35220,
count=1, id=256, version=35220,
count=1, id=255, version=35220,
count=1, id=258, version=35220,
Unsigned PE
Checks for missing Authenticode signature.
count=165, id=261, version=33145,
count=17, id=260, version=33145,
count=7, id=259, version=33145,
count=10, id=259, version=35403,
count=16, id=260, version=35403,
count=72, id=261, version=35403,
count=9, id=257, version=33145,
count=107, id=1, productName=Unmarked objects,
count=1, id=260, version=35726,
count=21, id=261, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Dec 12, 2025
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 21, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=33140,
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=257, version=35403,
count=124, id=1, productName=Unmarked objects,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=73, id=261, version=35403,
count=1, id=256, version=35403,
count=1, id=255, version=35403,
count=1, id=258, version=35403,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 2, 2026
CN=curl-for-win Code Signing Authority
CN=curl-for-win Root CA 2021
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 2, 2026
CN=curl-for-win Code Signing Authority
CN=curl-for-win Root CA 2021
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33030,
count=12, id=261, version=33030,
count=8, id=260, version=33030,
count=4, id=259, version=33030,
count=1, id=259, version=33145,
count=21, id=257, version=33145,
count=333, id=1, productName=Unmarked objects,
count=39, productName=Unmarked objects (old),
count=903, id=260, version=35723,
count=247, id=260, version=33145,
count=1, id=256, version=33145,
count=1, id=255, version=33145,
count=1, id=151,
count=1, id=258, version=33145,
Nov 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 21, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=261, version=33140,
count=1, id=263, version=33140,
count=1, id=259, version=33140,
count=26, id=260, version=33140,
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=35403,
count=8, id=260, version=35403,
count=19, id=257, version=33140,
count=1018, id=1, productName=Unmarked objects,
count=26, id=261, version=35403,
count=411, id=265, version=35403,
count=6, id=259, version=35403,
count=1, id=256, version=35403,
count=1, id=255, version=35403,
count=1, id=258, version=35403,
Nov 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 21, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=33140,
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=188, id=1, productName=Unmarked objects,
count=5, id=257, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=146, id=261, version=35403,
count=1, id=256, version=35403,
count=1, id=255, version=35403,
count=1, id=258, version=35403,
Sep 17, 2024
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=7, id=259, version=33731,
count=10, id=260, version=33731,
count=49, id=261, version=33731,
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=33136,
count=141, id=1, productName=Unmarked objects,
count=7, id=265, version=33811,
count=1, id=256, version=33811,
count=1, id=255, version=33811,
count=1, id=258, version=33811,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=17, id=261, version=35403,
count=6, id=257, version=35403,
count=9, id=257, version=33145,
count=66, id=1, productName=Unmarked objects,
count=25, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=35403,
count=2, id=257, version=35220,
count=2, id=259, version=35403,
count=7, id=260, version=35403,
count=25, id=261, version=35403,
count=8, id=257, version=33145,
count=62, id=1, productName=Unmarked objects,
count=4, id=261, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2019 v16.9.4 build 29914, version=29914,
count=2, id=253, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=27, id=261, version=35403,
count=6, id=257, version=35403,
count=1, id=260, version=33145,
count=17, id=257, version=33145,
count=365, id=1, productName=Unmarked objects,
count=21, id=261, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=16, id=259, version=33145,
count=31, id=260, version=33145,
count=189, id=261, version=33145,
count=1, id=262, version=33145,
count=37, id=257, version=33145,
count=786, id=1, productName=Unmarked objects,
count=16, id=260, version=35403,
count=355, id=261, version=35403,
count=10, id=259, version=35403,
count=10, id=261, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Jun 1, 2026
SERIALNUMBER=4021400,CN=Appeon Inc.,O=Appeon Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=4021400,CN=Appeon Inc.,O=Appeon Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=176, id=261, version=33145,
count=7, id=259, version=33145,
count=2, id=253, version=35403,
count=10, id=259, version=35403,
count=14, id=260, version=35403,
count=74, id=261, version=35403,
count=19, id=260, version=33145,
count=8, id=257, version=33145,
count=2, id=257, version=35729,
count=3, id=257, version=33133,
count=281, id=1, productName=Unmarked objects,
count=33, id=261, version=35729,
count=1, id=256, version=35729,
count=1, id=255, version=35729,
count=1, id=151,
count=1, id=258, version=35729,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=35403,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=13, id=261, version=35403,
count=2, id=260, version=33145,
count=6, id=257, version=33145,
count=5, id=257, version=35726,
count=37, id=1, productName=Unmarked objects,
count=2, id=261, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=36, id=261, version=35403,
count=6, id=257, version=35403,
count=1, id=260, version=33145,
count=19, id=257, version=33145,
count=182, id=1, productName=Unmarked objects,
count=2, id=259, version=35726,
count=316, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35403,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=26, id=261, version=35403,
count=5, id=257, version=33145,
count=192, id=1, productName=Unmarked objects,
count=53, id=261, version=35726,
count=1, id=259, version=35726,
count=11, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=24, id=261, version=35403,
count=6, id=257, version=35403,
count=15, id=257, version=33145,
count=148, id=1, productName=Unmarked objects,
count=24, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=257, version=33145,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=2, id=259, version=35403,
count=7, id=260, version=35403,
count=25, id=261, version=35403,
count=4, id=257, version=35403,
count=74, id=1, productName=Unmarked objects,
count=22, id=261, version=35723,
count=1, id=256, version=35723,
count=1, id=255, version=35723,
count=1, id=151,
count=1, id=258, version=35723,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35220,
count=2, id=259, version=35403,
count=7, id=260, version=35403,
count=25, id=261, version=35403,
count=5, id=257, version=35403,
count=10, id=257, version=33145,
count=74, id=1, productName=Unmarked objects,
count=22, id=261, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35403,
count=1, id=253, version=35403,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=17, id=261, version=35403,
count=10, id=257, version=33145,
count=15, id=265, version=35726,
count=3, id=257, version=35726,
count=267, id=1, productName=Unmarked objects,
count=1, id=260, version=35726,
count=11, id=261, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35403,
count=9, id=260, version=35403,
count=6, id=257, version=35403,
count=41, id=261, version=35403,
count=5, id=260, version=33145,
count=30, id=257, version=33145,
count=5, id=257, version=35726,
count=1364, id=1, productName=Unmarked objects,
count=31, id=260, version=30140,
count=195, id=265, version=35726,
count=5, id=260, version=35726,
count=258, id=261, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=35403,
count=4, id=259, version=35403,
count=9, id=260, version=35403,
count=30, id=261, version=35403,
count=6, id=257, version=35403,
count=5, id=261, version=35726,
count=19, id=257, version=33145,
count=255, id=1, productName=Unmarked objects,
count=10, id=260, version=35726,
count=31, id=260, version=30140,
count=54, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=2, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=25, id=261, version=35403,
count=6, id=257, version=35403,
count=11, id=257, version=33145,
count=142, id=1, productName=Unmarked objects,
count=14, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=21, id=261, version=35403,
count=6, id=257, version=35403,
count=2, id=257, version=35726,
count=9, id=257, version=33145,
count=73, id=1, productName=Unmarked objects,
count=16, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=35403,
count=2, id=259, version=35403,
count=7, id=260, version=35403,
count=16, id=261, version=35403,
count=2, id=262, version=33145,
count=3, id=259, version=33145,
count=3, id=260, version=33145,
count=12, id=257, version=33145,
count=3, id=257, version=35726,
count=299, id=1, productName=Unmarked objects,
count=1, id=260, version=35726,
count=20, id=261, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=29, id=261, version=35403,
count=6, id=257, version=35403,
count=10, id=257, version=33145,
count=2, id=257, version=33133,
count=3, id=257, version=30141,
count=392, id=1, productName=Unmarked objects,
count=187, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=27, id=261, version=35403,
count=15, id=257, version=33145,
count=172, id=1, productName=Unmarked objects,
count=5, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=2, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=18, id=261, version=35403,
count=6, id=257, version=35403,
count=8, id=257, version=33145,
count=3, id=257, version=35726,
count=88, id=1, productName=Unmarked objects,
count=10, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=29, id=261, version=35403,
count=6, id=257, version=35403,
count=19, id=257, version=33145,
count=328, id=1, productName=Unmarked objects,
count=4, id=261, version=30706,
count=163, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35403,
count=2, id=257, version=33811,
count=10, id=257, version=33145,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=16, id=261, version=35403,
count=2, id=260, version=33145,
count=3, id=257, version=35726,
count=64, id=1, productName=Unmarked objects,
count=2, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35403,
count=2, id=253, version=35403,
count=4, id=259, version=35403,
count=9, id=260, version=35403,
count=30, id=261, version=35403,
count=1, id=263, version=33145,
count=6, id=260, version=33145,
count=35, id=257, version=33145,
count=1000, id=1, productName=Unmarked objects,
count=89, id=264, version=35726,
count=10, id=260, version=35726,
count=187, id=261, version=35726,
count=1, id=259, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=27, id=261, version=35403,
count=6, id=257, version=35403,
count=12, id=257, version=33145,
count=3, id=257, version=30715,
count=234, id=1, productName=Unmarked objects,
count=14, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35403,
count=1, id=253, version=35403,
count=9, id=259, version=35403,
count=8, id=260, version=35403,
count=28, id=261, version=35403,
count=1, id=260, version=33145,
count=15, id=257, version=33145,
count=298, id=1, productName=Unmarked objects,
count=123, id=260, version=33138,
count=952, id=261, version=33138,
count=6, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35403,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=22, id=261, version=35403,
count=15, id=257, version=33145,
count=96, id=1, productName=Unmarked objects,
count=6, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=25, id=261, version=35403,
count=6, id=257, version=35403,
count=17, id=257, version=33145,
count=212, id=1, productName=Unmarked objects,
count=29, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=2, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=6, id=257, version=35403,
count=26, id=261, version=35403,
count=17, id=257, version=33145,
count=326, id=1, productName=Unmarked objects,
count=4, id=261, version=30706,
count=153, id=265, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=151,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=19, id=261, version=35403,
count=10, id=257, version=33145,
count=3, id=257, version=35726,
count=125, id=1, productName=Unmarked objects,
count=2, id=261, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35403,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=13, id=261, version=35403,
count=8, id=257, version=33145,
count=3, id=257, version=35726,
count=93, id=1, productName=Unmarked objects,
count=2, id=261, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=258, version=35726,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=263, version=33145,
count=1, id=259, version=33145,
count=6, id=257, version=35403,
count=4, id=253, version=35403,
count=4, id=259, version=35403,
count=9, id=260, version=35403,
count=43, id=261, version=35403,
count=8, id=260, version=33145,
count=38, id=257, version=33145,
count=31, id=260, version=30140,
count=476, id=265, version=35726,
count=5, id=257, version=35726,
count=1760, id=1, productName=Unmarked objects,
count=15, id=260, version=35726,
count=344, id=261, version=35726,
count=1, id=256, version=35726,
count=1, id=255, version=35726,
count=1, id=258, version=35726,
Mar 23, 2025
SERIALNUMBER=BC1393976,CN=APRYSE SOFTWARE INC,O=APRYSE SOFTWARE INC,L=Vancouver,ST=British Columbia,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13104272697469736820436f6c756d626961,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=BC1393976,CN=APRYSE SOFTWARE INC,O=APRYSE SOFTWARE INC,L=Vancouver,ST=British Columbia,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13104272697469736820436f6c756d626961,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=26, id=260, version=27412,
count=22, id=259, version=27412,
count=199, id=261, version=27412,
count=10, id=253, version=28518,
count=46, id=261, version=30034,
count=18, id=260, version=30034,
count=12, id=259, version=30034,
count=17, id=257, version=27412,
count=246, id=1, productName=Unmarked objects,
count=211, id=261, version=30141,
count=889, id=260, version=30141,
count=1, id=256, version=30141,
count=1, id=255, version=30141,
count=1, id=258, version=30141,
Unsigned PE
Checks for missing Authenticode signature.
count=173, id=261, version=33145,
count=17, id=260, version=33145,
count=7, id=259, version=33145,
count=11, id=257, version=33145,
count=118, id=1, productName=Unmarked objects,
count=10, id=259, version=35403,
count=18, id=260, version=35403,
count=79, id=261, version=35403,
count=2, id=261, version=35726,
count=1, id=255, version=35726,
count=1, id=258, version=35726,
Jul 4, 2017
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
CN=COMODO SHA-256 Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Jul 4, 2017
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
CN=COMODO SHA-256 Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Jul 4, 2017
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
CN=COMODO SHA-256 Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Jul 4, 2017
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
CN=COMODO SHA-256 Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Nov 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 21, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=33140,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=35, id=1, productName=Unmarked objects,
count=1, productName=Unmarked objects (old),
count=16, id=260, version=35403,
count=31, id=261, version=35403,
count=21, id=259, version=35403,
count=1, id=256, version=35403,
count=1, id=255, version=35403,
count=1, id=258, version=35403,
Nov 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Nov 21, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=33140,
count=2, id=257, version=35403,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=41, id=1, productName=Unmarked objects,
count=7, id=260, version=35403,
count=27, id=261, version=35403,
count=5, id=259, version=35403,
count=1, id=256, version=35403,
count=1, id=255, version=35403,
count=1, id=258, version=35403,
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jan 1, 0001
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=33030,
count=2, id=253, version=33030,
count=25, id=261, version=33030,
count=8, id=260, version=33030,
count=4, id=259, version=33030,
count=5, id=257, version=30795,
count=114, id=1, productName=Unmarked objects,
count=300, id=261, version=33133,
count=1, id=256, version=33133,
count=1, id=255, version=33133,
count=1, id=151,
count=1, id=258, version=33133,