{
	"id": "0eef7ec3-71d5-4bf1-b90d-1c49e4536cb6",
	"created_at": "2026-04-06T00:16:55.300726Z",
	"updated_at": "2026-04-10T03:20:21.461962Z",
	"deleted_at": null,
	"sha1_hash": "f2e2a4626e4244cf3d9fb6e7a31a5049c1d24c22",
	"title": "SIP's (Subject Interface Package) and Authenticode",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 34021,
	"plain_text": "SIP's (Subject Interface Package) and Authenticode\r\nBy kexugit\r\nArchived: 2026-04-05 13:48:42 UTC\r\nThis is my first post so I'll make it short and sweet.\r\nWhat are SIPs?\r\nThey are basically implementations of Subject Interface Packages, which allow the CryptAPI to interact with\r\nspecific parts of the files in order to put, get, calculate and verify digital signatures on files. In other words, this is\r\nhow Windows handles Authenticode digital signatures from and to files. They tell the CryptAPI how to hash the\r\nfile and where to put the signatures.\r\nWhere can I find them?\r\nThere are some included as part of the OS (at least on Vista). Locate in the %WINDIR%\\System32 directory.\r\nThey usually have a naming ending with sip.dll, i.e. msisip.dll is the Microsoft Installer (.msi) SIP.\r\nHow can I use them?\r\nThey need to be registered (regsvr32 \u003cdll\u003e) in order to be usable/reachable to digital signature tools, such as\r\nSignTool. Signtool will automatically recognize it and be able to use it for different file formats.\r\nAny tips?\r\nLook for MSDN online since installing MSDN locally will not have all available functions documented.\r\nComments\r\nAnonymous\r\nMay 06, 2015\r\nHello,\r\nis there a list of all file formats for which a SIP is available (for free?).\r\nThank you!\r\nSource: https://blogs.technet.microsoft.com/eduardonavarro/2008/07/11/sips-subject-interface-package-and-authenticode/\r\nhttps://blogs.technet.microsoft.com/eduardonavarro/2008/07/11/sips-subject-interface-package-and-authenticode/\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://blogs.technet.microsoft.com/eduardonavarro/2008/07/11/sips-subject-interface-package-and-authenticode/"
	],
	"report_names": [
		"sips-subject-interface-package-and-authenticode"
	],
	"threat_actors": [],
	"ts_created_at": 1775434615,
	"ts_updated_at": 1775791221,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/f2e2a4626e4244cf3d9fb6e7a31a5049c1d24c22.pdf",
		"text": "https://archive.orkl.eu/f2e2a4626e4244cf3d9fb6e7a31a5049c1d24c22.txt",
		"img": "https://archive.orkl.eu/f2e2a4626e4244cf3d9fb6e7a31a5049c1d24c22.jpg"
	}
}