Sandbox.v2025.12.18.zip
- SHA256 64bf664a701dfb99b837f0a4eeb438b1a105d0f0b8a5d76575026edb9f0fa0ae
Overview
overview
8Static
static
7Sandbox.v2...18.zip
windows10-2004-x64
6Sandbox.v2...18.zip
windows11-ltsc_2024-x64
8Sandbox.v2...en.png
windows10-2004-x64
1Sandbox.v2...en.png
windows11-ltsc_2024-x64
1Sandbox.v2...th.png
windows10-2004-x64
1Sandbox.v2...th.png
windows11-ltsc_2024-x64
1Sandbox.v2...ap.png
windows10-2004-x64
1Sandbox.v2...ap.png
windows11-ltsc_2024-x64
1Sandbox.v2...le.png
windows10-2004-x64
1Sandbox.v2...le.png
windows11-ltsc_2024-x64
1Sandbox.v2...or.png
windows10-2004-x64
1Sandbox.v2...or.png
windows11-ltsc_2024-x64
8Sandbox.v2...es.png
windows10-2004-x64
1Sandbox.v2...es.png
windows11-ltsc_2024-x64
8Sandbox.v2...la.png
windows10-2004-x64
1Sandbox.v2...la.png
windows11-ltsc_2024-x64
8Sandbox.v2...te.png
windows10-2004-x64
1Sandbox.v2...te.png
windows11-ltsc_2024-x64
1Sandbox.v2...le.png
windows10-2004-x64
1Sandbox.v2...le.png
windows11-ltsc_2024-x64
1Sandbox.v2...um.png
windows10-2004-x64
1Sandbox.v2...um.png
windows11-ltsc_2024-x64
8Sandbox.v2...ew.png
windows10-2004-x64
1Sandbox.v2...ew.png
windows11-ltsc_2024-x64
8Sandbox.v2...at.png
windows10-2004-x64
1Sandbox.v2...at.png
windows11-ltsc_2024-x64
8Sandbox.v2...us.png
windows10-2004-x64
1Sandbox.v2...us.png
windows11-ltsc_2024-x64
1Sandbox.v2...ll.png
windows10-2004-x64
1Sandbox.v2...ll.png
windows11-ltsc_2024-x64
1Sandbox.v2...er.png
windows10-2004-x64
1Sandbox.v2...er.png
windows11-ltsc_2024-x64
8Static task
static1
Behavioral task
behavioral1
Sample
Sandbox.v2025.12.18.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Sandbox.v2025.12.18.zip
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral3
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/steam_gen.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/steam_gen.png
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral5
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/synth.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/synth.png
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral7
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/tap.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/tap.png
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral9
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/taptoggle.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/taptoggle.png
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral11
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/temp_sensor.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/temp_sensor.png
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral13
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/termites.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/termites.png
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral15
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/tesla.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/tesla.png
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral17
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/thermite.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/thermite.png
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral19
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/toggle.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/toggle.png
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral21
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/uranium.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/uranium.png
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral23
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/view.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/view.png
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral25
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/view_heat.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/view_heat.png
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral27
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/virus.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/virus.png
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral29
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/wall.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/wall.png
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral31
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/water.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Sandbox.v2025.12.18/Sandbox.v2025.12.18/help/images/water.png
Resource
win11ltsc2024-20260706-en
Detects file using ACProtect software.
| resource | yara_rule |
|---|---|
| static1/unpack001/Sandbox.v2025.12.18/Sandbox.v2025.12.18/steam_api.dll | acprotect |
File was altered after it was signed.
| resource |
|---|
| unpack001/Sandbox.v2025.12.18/Sandbox.v2025.12.18/steam_api.dll |
File was codesigned using an insecure algorithm.
| resource |
|---|
| unpack001/Sandbox.v2025.12.18/_Redist/xnafx40_redist.msi |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Sandbox.v2025.12.18/Sandbox.v2025.12.18/sandbox.exe |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/Sandbox.v2025.12.18/Sandbox.v2025.12.18/steam_api.rne |
| unpack001/Sandbox.v2025.12.18/_Redist/dotNetFx40_Full_setup.exe |
| unpack001/Sandbox.v2025.12.18/_Redist/dxwebsetup.exe |
| unpack001/Sandbox.v2025.12.18/_Redist/oalinst.exe |
| unpack001/Sandbox.v2025.12.18/_Redist/vcredist_x64.exe |
| unpack001/Sandbox.v2025.12.18/_Redist/vcredist_x86.exe |
Unsigned PE
Checks for missing Authenticode signature.
count=40, id=241, version=40116,
count=166, id=243, version=40116,
count=38, id=242, version=40116,
count=64, id=261, version=26706,
count=34, id=260, version=26706,
count=25, id=259, version=26706,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=30145,
count=339, id=1, productName=Unmarked objects,
count=19, id=260, version=35220,
count=27, id=260, version=27054,
count=4, id=261, version=27054,
count=1, id=255, version=27054,
count=1, id=151,
count=1, id=258, version=27054,
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
Codesign digest Mismatch
File was altered after it was signed.
Sep 17, 2024
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
count=11, id=259, version=30795,
count=191, id=261, version=30795,
count=21, id=260, version=30795,
count=2, id=123, productName=VS2005 build 50727, version=50727,
count=23, id=259, version=33731,
count=18, id=260, version=33731,
count=70, id=261, version=33731,
count=15, id=257, version=30795,
count=143, id=1, productName=Unmarked objects,
count=86, id=264, version=33814,
count=1, id=256, version=33814,
count=1, id=255, version=33814,
count=1, id=258, version=33814,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 21, 2015
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=158, version=20928,
count=3, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=43, id=171, version=21009,
count=18, id=158, version=21009,
count=105, id=170, version=21009,
count=21, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=194, id=1, productName=Unmarked objects,
count=69, id=175, version=20928,
count=1, id=171, version=20928,
count=1, id=155, version=20928,
count=1, id=154, version=20928,
count=1, id=157, version=20928,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 2, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=13, id=25, version=9210,
count=126, id=1, productName=Unmarked objects,
count=1, id=69, version=9111,
count=24, id=28, version=9178,
count=1, id=61, version=9210,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jun 3, 2009
CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US
count=18, id=125, productName=VS2005 build 50727, version=50727,
count=107, id=109, productName=VS2005 build 50727, version=50727,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=135, id=1, productName=Unmarked objects,
count=9, productName=Unmarked objects (old),
count=34, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=259, version=24123,
count=19, id=260, version=24123,
count=38, id=261, version=24123,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=337, id=1, productName=Unmarked objects,
count=75, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Jan 8, 2020
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=259, version=24123,
count=19, id=260, version=24123,
count=38, id=261, version=24123,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=337, id=1, productName=Unmarked objects,
count=75, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=125, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Mar 19, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=125, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Aug 23, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US