RexVolt.rar
- SHA256 954e2d48ca5d85cb2bc38d398e956b697937eea140654476e429210887694b4a
Overview
overview
4Static
static
3RexVolt/Bi...er.exe
windows10-2004-x64
3RexVolt/Bi...er.exe
windows11-21h2-x64
1RexVolt/Bin/Xeno.dll
windows10-2004-x64
1RexVolt/Bin/Xeno.dll
windows11-21h2-x64
1RexVolt/Bi...64.dll
windows10-2004-x64
1RexVolt/Bi...64.dll
windows11-21h2-x64
1RexVolt/Bi...rl.dll
windows10-2004-x64
1RexVolt/Bi...rl.dll
windows11-21h2-x64
1RexVolt/Bi...64.dll
windows10-2004-x64
1RexVolt/Bi...64.dll
windows11-21h2-x64
1RexVolt/Bin/zlib1.dll
windows10-2004-x64
1RexVolt/Bin/zlib1.dll
windows11-21h2-x64
1RexVolt/Mi...re.dll
windows10-2004-x64
1RexVolt/Mi...re.dll
windows11-21h2-x64
1RexVolt/Mi...ms.dll
windows10-2004-x64
1RexVolt/Mi...ms.dll
windows11-21h2-x64
1RexVolt/Mi...pf.dll
windows10-2004-x64
1RexVolt/Mi...pf.dll
windows11-21h2-x64
1RexVolt/Mo...x.html
windows10-2004-x64
4RexVolt/Mo...x.html
windows11-21h2-x64
4RexVolt/Mo...ain.js
windows10-2004-x64
3RexVolt/Mo...ain.js
windows11-21h2-x64
3RexVolt/Mo...tes.js
windows10-2004-x64
3RexVolt/Mo...tes.js
windows11-21h2-x64
3RexVolt/Mo...ase.js
windows10-2004-x64
3RexVolt/Mo...ase.js
windows11-21h2-x64
3RexVolt/Mo...ses.js
windows10-2004-x64
3RexVolt/Mo...ses.js
windows11-21h2-x64
3RexVolt/Mo...del.js
windows10-2004-x64
3RexVolt/Mo...del.js
windows11-21h2-x64
3RexVolt/Mo...num.js
windows10-2004-x64
3RexVolt/Mo...num.js
windows11-21h2-x64
3Static task
static1
Behavioral task
behavioral1
Sample
RexVolt/Bin/Decompiler.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
RexVolt/Bin/Decompiler.exe
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
RexVolt/Bin/Xeno.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
RexVolt/Bin/Xeno.dll
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
RexVolt/Bin/libcrypto-3-x64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
RexVolt/Bin/libcrypto-3-x64.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
RexVolt/Bin/libcurl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
RexVolt/Bin/libcurl.dll
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
RexVolt/Bin/libssl-3-x64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
RexVolt/Bin/libssl-3-x64.dll
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
RexVolt/Bin/zlib1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
RexVolt/Bin/zlib1.dll
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
RexVolt/Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
RexVolt/Microsoft.Web.WebView2.Core.dll
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
RexVolt/Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
RexVolt/Microsoft.Web.WebView2.WinForms.dll
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
RexVolt/Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
RexVolt/Microsoft.Web.WebView2.Wpf.dll
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
RexVolt/Monaco/index.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
RexVolt/Monaco/index.html
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
RexVolt/Monaco/vs/base/worker/workerMain.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
RexVolt/Monaco/vs/base/worker/workerMain.js
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
RexVolt/Monaco/vs/basic-languages/lua/autocompletes.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
RexVolt/Monaco/vs/basic-languages/lua/autocompletes.js
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
RexVolt/Monaco/vs/basic-languages/lua/autocompletes/base.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
RexVolt/Monaco/vs/basic-languages/lua/autocompletes/base.js
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
RexVolt/Monaco/vs/basic-languages/lua/autocompletes/classes.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
RexVolt/Monaco/vs/basic-languages/lua/autocompletes/classes.js
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
RexVolt/Monaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
RexVolt/Monaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
RexVolt/Monaco/vs/basic-languages/lua/autocompletes/classes/Enum.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
RexVolt/Monaco/vs/basic-languages/lua/autocompletes/classes/Enum.js
Resource
win11-20260513-en
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/RexVolt/Bin/Decompiler.exe |
| unpack001/RexVolt/Bin/libcurl.dll |
| unpack001/RexVolt/Bin/zlib1.dll |
| unpack001/RexVolt/QuorumAPI.dll |
| unpack001/RexVolt/Rexvolt Executor.dll |
| unpack001/RexVolt/Rexvolt Executor.exe |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/RexVolt/Bin/Xeno.dll |
| unpack001/RexVolt/Newtonsoft.Json.dll |
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=34321,
count=3, id=259, version=34321,
count=9, id=260, version=34321,
count=23, id=261, version=34321,
count=203, id=1, productName=Unmarked objects,
count=1152, productName=Unmarked objects (old),
count=1, id=258, version=34435,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
May 28, 2026
CN=Rizve A
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35721,
count=6, id=259, version=35721,
count=8, id=260, version=35721,
count=37, id=261, version=35721,
count=14, id=257, version=33145,
count=5, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=257, version=35215,
count=5, id=257, version=35217,
count=585, id=1, productName=Unmarked objects,
count=123, id=264, version=36246,
count=1, id=256, version=36246,
count=1, id=255, version=36246,
count=1, id=151,
count=1, id=258, version=36246,
Oct 1, 2025
SERIALNUMBER=05901601,CN=FireDaemon Technologies Limited,O=FireDaemon Technologies Limited,ST=Suffolk,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=10, id=259, version=35207,
count=14, id=260, version=35207,
count=31, id=261, version=35207,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=195, id=1, productName=Unmarked objects,
count=11, id=257, version=33140,
count=42, productName=Unmarked objects (old),
count=978, id=260, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
Unsigned PE
Checks for missing Authenticode signature.
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=6, id=253, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=13, id=261, version=35207,
count=14, id=257, version=33145,
count=3, id=257, version=35215,
count=194, id=1, productName=Unmarked objects,
count=180, id=260, version=35215,
count=1, id=256, version=35215,
count=1, id=255, version=35215,
count=1, id=151,
count=1, id=258, version=35215,
Oct 1, 2025
SERIALNUMBER=05901601,CN=FireDaemon Technologies Limited,O=FireDaemon Technologies Limited,ST=Suffolk,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
count=10, id=259, version=35207,
count=12, id=260, version=35207,
count=32, id=261, version=35207,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=33140,
count=3, id=257, version=35217,
count=655, id=1, productName=Unmarked objects,
count=107, id=260, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=35207,
count=4, id=253, version=35207,
count=3, id=259, version=35207,
count=8, id=260, version=35207,
count=12, id=261, version=35207,
count=2, id=257, version=33145,
count=50, id=1, productName=Unmarked objects,
count=15, id=260, version=35215,
count=1, id=256, version=35215,
count=1, id=255, version=35215,
count=1, id=151,
count=1, id=258, version=35215,
May 4, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 4, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 4, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Sep 16, 2025
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=10, id=259, version=35207,
count=13, id=260, version=35207,
count=86, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=212, id=1, productName=Unmarked objects,
count=10, id=265, version=35225,
count=1, id=258, version=35225,
Mar 8, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jan 24, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=260, version=29118,
count=4, id=259, version=29118,
count=26, id=261, version=29118,
count=6, id=257, version=29118,
count=2, id=253, version=23601,
count=1, id=263, version=26213,
count=19, id=257, version=26213,
count=393, id=1, productName=Unmarked objects,
count=222, id=265, version=29335,
count=1, id=256, productName=VS2019 v16.8.3 build 29335, version=29335,
count=1, id=255, productName=VS2019 v16.8.3 build 29335, version=29335,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.8.3 build 29335, version=29335,
Mar 8, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jan 24, 2021
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=260, version=29118,
count=4, id=259, version=29118,
count=26, id=261, version=29118,
count=6, id=257, version=29118,
count=2, id=253, version=23601,
count=1, id=263, version=26213,
count=19, id=257, version=26213,
count=393, id=1, productName=Unmarked objects,
count=222, id=265, version=29335,
count=1, id=256, productName=VS2019 v16.8.3 build 29335, version=29335,
count=1, id=255, productName=VS2019 v16.8.3 build 29335, version=29335,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.8.3 build 29335, version=29335,
May 4, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
May 4, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US