New [v1.1.0]-UNC.zip
- SHA256 199e2a09b06ddb2f0c3f6316e84450cf2a1ef970c5023a45f2a57fcd73912abe
Overview
overview
10Static
static
9Release.zip
windows7-x64
10Release.zip
windows10-2004-x64
1Release/Ne...0].exe
windows7-x64
10Release/Ne...0].exe
windows10-2004-x64
10Release/au...in.dll
windows7-x64
3Release/au...in.dll
windows10-2004-x64
3Release/lo...ng.dll
windows7-x64
1Release/lo...ng.dll
windows10-2004-x64
1Release/lo...ng.dll
windows7-x64
1Release/lo...ng.dll
windows10-2004-x64
1Release/lo...ng.dll
windows7-x64
1Release/lo...ng.dll
windows10-2004-x64
1Release/lo...er.dll
windows7-x64
1Release/lo...er.dll
windows10-2004-x64
1Release/lo...-1.dll
windows7-x64
1Release/lo...-1.dll
windows10-2004-x64
1Release/ru...er.dll
windows7-x64
1Release/ru...er.dll
windows10-2004-x64
1Release/ru...er.dll
windows7-x64
1Release/ru...er.dll
windows10-2004-x64
1Release/ru...er.dll
windows7-x64
3Release/ru...er.dll
windows10-2004-x64
3Release/sc...Env.js
windows7-x64
3Release/sc...Env.js
windows10-2004-x64
3Release/wo...re.dll
windows7-x64
1Release/wo...re.dll
windows10-2004-x64
1Release/wo...pet.js
windows7-x64
3Release/wo...pet.js
windows10-2004-x64
3Behavioral task
behavioral1
Sample
Release.zip
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Release.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Release/NewIn [v1.1.0].exe
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
Release/NewIn [v1.1.0].exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Release/autoexec/bin.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Release/autoexec/bin.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Release/locales/resources/app.asar.unpacked/node_modules/btime/binding.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Release/locales/resources/app.asar.unpacked/node_modules/btime/binding.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Release/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.dll
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
Release/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Release/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Release/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Release/locales/resources/vk_swiftshader.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Release/locales/resources/vk_swiftshader.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Release/locales/resources/vulkan-1.dll
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
Release/locales/resources/vulkan-1.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Release/runtimes/win-arm64/native/WebView2Loader.dll
Resource
win7-20241023-en
Behavioral task
behavioral18
Sample
Release/runtimes/win-arm64/native/WebView2Loader.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Release/runtimes/win-x64/native/WebView2Loader.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Release/runtimes/win-x64/native/WebView2Loader.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Release/runtimes/win-x86/native/WebView2Loader.dll
Resource
win7-20241010-en
Behavioral task
behavioral22
Sample
Release/runtimes/win-x86/native/WebView2Loader.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Release/scripts/UNCCheckEnv.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Release/scripts/UNCCheckEnv.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Release/workspace/Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
Release/workspace/Xeno.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Release/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/adblock_snippet.js
Resource
win7-20241023-en
Behavioral task
behavioral28
Sample
Release/workspace/Xeno.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/adblock_snippet.js
Resource
win10v2004-20241007-en
| resource | yara_rule |
|---|---|
| static1/unpack002/Release/autoexec/bin | cryptone |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack002/Release/locales/resources/app.asar.unpacked/node_modules/btime/binding.node |
| unpack002/Release/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.node |
| unpack002/Release/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.node |
Nov 21, 2024
SERIALNUMBER=AAN-1705,CN=Cypherix Software (India) LLP,O=Cypherix Software (India) LLP,ST=Maharashtra,C=IN,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#1302494e
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=163, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Aug 30, 2016
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Flash Player,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
count=391, id=131, productName=VS2008 build 21022, version=21022,
count=5, id=132, productName=VS2008 build 21022, version=21022,
count=3, id=150, version=20413,
count=30, productName=Unmarked objects (old),
count=17, id=137, version=30729,
count=1, id=110, productName=VS2005 build 50727, version=50727,
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=39, id=123, productName=VS2005 build 50727, version=50727,
count=719, id=1, productName=Unmarked objects,
count=24, id=109, productName=VS2005 build 50727, version=50727,
count=526, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=65, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=1538, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=3, id=151,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=260, version=27412,
count=5, id=259, version=27412,
count=134, id=261, version=27412,
count=14, id=260, version=28920,
count=9, id=259, version=28920,
count=39, id=261, version=28920,
count=3, id=257, version=27412,
count=120, id=1, productName=Unmarked objects,
count=2, id=265, version=29110,
count=1, id=256, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=255, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=258, productName=VS2019 v16.7.0 build 29110, version=29110,
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=260, version=27412,
count=5, id=259, version=27412,
count=134, id=261, version=27412,
count=14, id=260, version=28920,
count=9, id=259, version=28920,
count=39, id=261, version=28920,
count=5, id=257, version=27412,
count=125, id=1, productName=Unmarked objects,
count=3, id=265, version=29110,
count=1, id=256, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=255, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=258, productName=VS2019 v16.7.0 build 29110, version=29110,
Unsigned PE
Checks for missing Authenticode signature.
count=11, id=260, version=27412,
count=5, id=259, version=27412,
count=134, id=261, version=27412,
count=14, id=260, version=28920,
count=9, id=259, version=28920,
count=39, id=261, version=28920,
count=3, id=257, version=27412,
count=118, id=1, productName=Unmarked objects,
count=2, id=265, version=29110,
count=1, id=256, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=255, productName=VS2019 v16.7.0 build 29110, version=29110,
count=1, id=258, productName=VS2019 v16.7.0 build 29110, version=29110,
Mar 2, 2023
CN=Dynalist Inc,O=Dynalist Inc,ST=Ontario,C=CA
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Mar 2, 2023
CN=Dynalist Inc,O=Dynalist Inc,ST=Ontario,C=CA
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Mar 2, 2023
CN=Dynalist Inc,O=Dynalist Inc,ST=Ontario,C=CA
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Mar 2, 2023
CN=Dynalist Inc,O=Dynalist Inc,ST=Ontario,C=CA
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Jan 9, 2025
Jan 9, 2025
Jan 9, 2025
Jan 9, 2025
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=260, version=29118,
count=4, id=259, version=29118,
count=26, id=261, version=29118,
count=6, id=257, version=29118,
count=2, id=253, version=23601,
count=1, id=263, version=26213,
count=19, id=257, version=26213,
count=393, id=1, productName=Unmarked objects,
count=222, id=265, version=29335,
count=1, id=256, productName=VS2019 v16.8.3 build 29335, version=29335,
count=1, id=255, productName=VS2019 v16.8.3 build 29335, version=29335,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.8.3 build 29335, version=29335,