Nuevo Archivo WinRAR.rar
- SHA256 39d98890cd86a653c0562c96cc108dc14d6ae2711bd63f6cef73e3b2a585994d
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nuevo Archivo WinRAR.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nuevo Archivo WinRAR.rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
General
- Target Nuevo Archivo WinRAR.rar
- Size 1.0MB
- Sample260722-xe5cjssdnb
- SHA256 39d98890cd86a653c0562c96cc108dc14d6ae2711bd63f6cef73e3b2a585994d
- MD5 4e8d80679bd814c104e62c46f4ebb685
- SHA1 8b4b560528da4d13395733a511ccf726ad27445d
- SHA512 7596a82305b968fae28268b8ee6bfb258342ee17777c983466a0dffab6b648e3dd6556e07dc4cf352f9b4f9441c40bcb6dae9608896d97dd690c28f2a909639a
- SSDEEP 24576:uvt9AsdKflETuQ5TZ+/IPtc+0RUbkT7kNStvYWY:QA08uF5TZGWbkT7jtAWY
- TLSH T1E6353358A7112FBA72722BC000CF554A0BE1F4BED8F50039371046F85B56D5BAA7FAE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 3 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Nueva carpeta/Xeno.dll unpack001/Nueva carpeta/Xeno.exe unpack001/Nueva carpeta/XenoUI.dll
File Explorer
-
Nuevo Archivo WinRAR.rar.rar 1.0MB
-
Nueva carpeta/Xeno.dll.dll 2.3MB
-
Nueva carpeta/Xeno.exe.exe 160KB
-
Nueva carpeta/Xeno.exp1KB
-
Nueva carpeta/Xeno.lib2KB
-
Nueva carpeta/XenoUI.deps.json2KB
-
Nueva carpeta/XenoUI.dll.exe 145KB
-
Nueva carpeta/XenoUI.pdb43KB
-
Nueva carpeta/XenoUI.runtimeconfig.json429B
Nueva carpeta/Xeno.dll
- IMPHASH 286278b3da1b78e0314227220011da8e
- SHA256 c75272bba336b65488dc79040fcfcacb72e682155a4fc12bc2d5641d987f4bf9
- MD5 defcae4a1f3a4e88865fd459f65e6bda
- SHA1 0bf44ba500a73c302f0f52e180147a127b336d3f
- SHA512 5e18d34459d6abad455bfa009b84d6fe0094afc66e2e838a5755fc67651a58df52a5bd480c7b436d7e9dc0606be28e26184b7c4d8b6464cae0916f51def2db27
- SSDEEP 49152:lNL3nuCfjyJDh8sa3QrOps5DA4eSewD4W9NSA9jG:lUa6C9Oa
- TLSH T11EB58E17A69901ECD076D1F88A5B5513E7B17C4903316BEB02E0B9652F23AF68F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
4c:46:31:e8:5b:e2:75:c5:c4:3f:50:b3:2d:a0:06:09:08:c9:c6:a3:d3:fe:11:c4:c6:c7:09:b6:69:b4:70:55
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Rizve A
Chains
Jun 4, 2026
CN=Rizve A
Subject
CN=Rizve A
Serial Number
3f:da:0d:2c:31:c5:c2:a8:47:90:e6:e2:f2:0d:13:06
Issuer
CN=Rizve A
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 10, 2026 - May 10, 2027
Subject
CN=Sectigo Public Time Stamping Signer R36,O=Sectigo Limited,ST=West Yorkshire,C=GB
Serial Number
a4:29:3b:6e:1e:dd:d7:a7:34:08:87:ad:7a:4e:b7:24
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 27, 2025 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
1660064
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\rizve\OneDrive\Desktop\Projects\Xeno\build\Release\net9.0-windows8.0\Xeno.pdb
libcrypto-3-x64
ERR_error_string
X509_VERIFY_PARAM_set1_host
X509_STORE_add_cert
ERR_get_error
d2i_X509
PEM_read_bio_X509_AUX
X509_STORE_set_flags
X509_free
EVP_DigestFinal_ex
BIO_free
EVP_sha3_512
EVP_EncryptUpdate
EVP_aes_256_gcm
EVP_sha3_256
EVP_CIPHER_CTX_ctrl
EVP_CIPHER_get_block_size
EVP_sha512
EVP_aes_256_ccm
EVP_aes_256_cfb128
EVP_aes_256_ecb
EVP_CIPHER_CTX_get0_cipher
EVP_aes_256_ofb
EVP_EncryptFinal_ex
EVP_sha1
ERR_clear_error
EVP_CIPHER_CTX_free
EVP_aes_256_ctr
RAND_bytes
EVP_sha3_224
EVP_sha512_256
EVP_DigestInit_ex
EVP_MD_CTX_free
EVP_sha224
EVP_DecryptInit_ex
EVP_DigestUpdate
EVP_sha256
EVP_md5
EVP_EncryptInit_ex
EVP_aes_256_ocb
EVP_MD_CTX_new
EVP_DecryptFinal_ex
EVP_sha512_224
BIO_new_mem_buf
EVP_DecryptUpdate
OPENSSL_thread_stop
OpenSSL_version
EVP_CIPHER_CTX_new
EVP_aes_256_cbc
EVP_sha384
EVP_CIPHER_get_mode
EVP_sha3_384
EVP_aes_256_xts
libssl-3-x64
SSL_write
TLS_client_method
SSL_ctrl
SSL_CTX_set_verify
SSL_accept
SSL_read
SSL_CTX_set_cipher_list
SSL_CTX_new
SSL_CTX_use_certificate_chain_file
SSL_get1_peer_certificate
SSL_get0_param
SSL_CTX_check_private_key
TLS_server_method
SSL_get_error
SSL_CTX_set_verify_depth
SSL_CTX_set_client_CA_list
SSL_set_fd
SSL_CTX_use_PrivateKey_file
SSL_CTX_ctrl
SSL_CTX_free
SSL_new
SSL_load_client_CA_file
SSL_CTX_set_default_verify_paths
SSL_CTX_set_options
SSL_CTX_get_cert_store
SSL_free
OPENSSL_init_ssl
SSL_CTX_load_verify_locations
SSL_connect
libcurl
curl_global_init
curl_share_init
curl_slist_free_all
curl_slist_append
curl_version
curl_easy_setopt
curl_easy_cleanup
curl_easy_strerror
curl_easy_init
curl_easy_getinfo
curl_easy_perform
curl_share_setopt
kernel32
WaitNamedPipeW
PeekNamedPipe
ReadFile
lstrlenW
LoadResource
LockResource
SizeofResource
FindResourceW
Process32FirstW
Process32NextW
GetModuleFileNameW
GetModuleFileNameA
AllocConsole
GlobalUnlock
WideCharToMultiByte
GetFileInformationByHandleEx
CopyFile2
AreFileApisANSI
SetFileInformationByHandle
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetLocaleInfoEx
LocalFree
InitOnceBeginInitialize
InitOnceComplete
InitializeSListHead
DisableThreadLibraryCalls
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
MapViewOfFileFromApp
GetConsoleWindow
GetCurrentProcessId
GlobalLock
CreateFileMappingFromApp
FreeConsole
GlobalFree
GlobalAlloc
GetConsoleMode
MultiByteToWideChar
UnmapViewOfFile
CreateFile2
CreateFileW
GetDynamicTimeZoneInformation
WriteFile
WriteConsoleA
GetStdHandle
SetConsoleTitleA
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetFileSizeEx
VirtualQueryEx
GetProcessTimes
GetSystemTimeAsFileTime
VirtualAllocEx
QueryFullProcessImageNameA
FormatMessageA
CreateEventW
SetEvent
CloseHandle
ResetEvent
RaiseException
GetLastError
QueryPerformanceCounter
GetTempPathW
GetCurrentThreadId
K32GetProcessImageFileNameW
OpenProcess
GetExitCodeProcess
LoadLibraryA
GetProcAddress
ReadProcessMemory
WriteProcessMemory
TerminateProcess
GetProcessId
CreateToolhelp32Snapshot
Sleep
user32
SetWindowPos
IsWindow
GetSystemMenu
PostMessageW
keybd_event
OpenClipboard
ClientToScreen
CloseClipboard
EmptyClipboard
GetForegroundWindow
mouse_event
DrawMenuBar
SetClipboardData
EnableMenuItem
SetForegroundWindow
GetWindowThreadProcessId
GetWindowTextLengthW
GetWindowRect
IsWindowVisible
LockWindowUpdate
MonitorFromWindow
SetWindowLongPtrW
GetWindowLongPtrW
GetWindowPlacement
RedrawWindow
GetMonitorInfoW
SetWindowPlacement
EnumWindows
IsZoomed
advapi32
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
GetCurrentHwProfileW
shell32
ShellExecuteW
msvcp140
_Cnd_broadcast
?__ExceptionPtrCreate@@YAXPEAX@Z
_Strxfrm
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?classic@locale@std@@SAAEBV12@XZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Strcoll
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?fail@ios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
_Thrd_start
_Mtx_init
_Mtx_destroy
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_current_owns
_Thrd_hardware_concurrency
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?_Winerror_map@std@@YAHH@Z
_Thrd_yield
_Mtx_trylock
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getctype@_Locinfo@std@@QEBA?AU_Ctypevec@@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??0ctype_base@std@@QEAA@_K@Z
??1ctype_base@std@@UEAA@XZ
_Toupper
_Tolower
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??7ios_base@std@@QEBA_NXZ
_Cnd_init
_Cnd_destroy
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_timedwait
?_Throw_C_error@std@@YAXH@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
_Query_perf_frequency
?uncaught_exceptions@std@@YAHXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
_Query_perf_counter
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?good@ios_base@std@@QEBA_NXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Xtime_get_ticks
?_Xbad_function_call@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_lock
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
_Mtx_unlock
?_Random_device@std@@YAIXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??Bios_base@std@@QEBA_NXZ
_Cnd_signal
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Cnd_wait
_Thrd_id
_Thrd_join
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
ws2_32
WSAAccept
WSASocketW
getpeername
WSAPoll
getnameinfo
listen
connect
ioctlsocket
shutdown
send
recv
WSAGetLastError
WSACleanup
__WSAFDIsSet
select
WSACloseEvent
WSACreateEvent
WSASetLastError
WSAStartup
WSAEventSelect
WSAWaitForMultipleEvents
closesocket
freeaddrinfo
getaddrinfo
setsockopt
ntohs
socket
getsockname
bind
WSAEnumNetworkEvents
crypt32
CertCloseStore
CertOpenStore
CertEnumCertificatesInStore
CertFreeCertificateContext
dwmapi
DwmSetWindowAttribute
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memchr
__std_type_info_destroy_list
_CxxThrowException
__current_exception_context
__current_exception
memmove
memcmp
__std_exception_destroy
memcpy
memset
__CxxFrameHandler3
wcsrchr
strchr
_purecall
__C_specific_handler
__std_type_info_compare
__std_terminate
__std_exception_copy
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
realloc
calloc
api-ms-win-crt-runtime-l1-1-0
_initterm
abort
_seh_filter_dll
_beginthreadex
terminate
_errno
_configure_narrow_argv
_cexit
_initialize_narrow_environment
_crt_atexit
system
_invalid_parameter_noinfo
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
strerror
_initterm_e
api-ms-win-crt-convert-l1-1-0
strtoll
strtoul
atoi
strtod
strtoull
strtol
api-ms-win-crt-string-l1-1-0
isspace
isdigit
strncpy
_strnicmp
isalpha
tolower
strcpy_s
strncmp
strlen
isalnum
strspn
wcslen
strcmp
wcscpy_s
api-ms-win-crt-stdio-l1-1-0
fsetpos
fread
_fseeki64
_get_stream_buffer_pointers
fgetpos
__acrt_iob_func
fputc
fwrite
fgetc
fclose
fflush
_fsopen
setvbuf
__stdio_common_vsprintf
__stdio_common_vswprintf
freopen_s
ungetc
__stdio_common_vfprintf
api-ms-win-crt-filesystem-l1-1-0
_wstat64i32
_lock_file
_unlock_file
_mkdir
_fullpath
_stat64i32
api-ms-win-crt-math-l1-1-0
sin
_ldsign
pow
tan
tanh
log10
round
sinh
_fdsign
ldexp
_dsign
log
fmod
floorf
floor
exp
cosh
cos
sqrt
ceilf
atan2
acos
atan
asin
ceil
log2
api-ms-win-crt-time-l1-1-0
strftime
_localtime64_s
_mkgmtime64
_gmtime64_s
_time64
api-ms-win-crt-locale-l1-1-0
localeconv
___lc_codepage_func
Attach
Execute
GetClients
Initialize
SetSetting
Version
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
460KB
Virtual Size
459KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
30KB
Virtual Size
252KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
89KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35721,
count=6, id=259, version=35721,
count=8, id=260, version=35721,
count=37, id=261, version=35721,
count=14, id=257, version=33145,
count=5, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=257, version=35215,
count=5, id=257, version=35217,
count=584, id=1, productName=Unmarked objects,
count=123, id=264, version=36246,
count=1, id=256, version=36246,
count=1, id=255, version=36246,
count=1, id=151,
count=1, id=258, version=36246,
Nueva carpeta/Xeno.exe
- IMPHASH bb3ac2c21e02c68abcad237dc3fa6d00
- SHA256 098e0ddda1fa6cec7def5be97f6cd85df891324b5ccd52e001cf415e09ee557b
- MD5 06c6c8928a5f9f32ad4778ece45176f3
- SHA1 69941334c19ff637e65acf791b74600a76455842
- SHA512 e22018318c674426a2550fdad3ea2c80252b81eb9aedd58c0ff597fe7c82344c0274bda2b8b2814d6a3098a859756ab1747cc150ecc2bfff5fdf42b7ada9e558
- SSDEEP 3072:IqeXA/4yIg9vkNPNu6H6xCYOihUE265AJw41V0:IvgvkNFNaxmpEgJ1V0
- TLSH T1D4F34C07A6A851BDE1B6C678CD924D41FB727C598B71A6CF03507AB60E737D0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
32:ed:ca:df:6b:83:ac:de:bb:73:d9:d5:83:dd:3b:7d:67:83:93:86:80:f9:9a:10:30:84:f3:66:c7:37:23:ba
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Rizve A
Chains
Jun 4, 2026
CN=Rizve A
Subject
CN=Rizve A
Serial Number
3f:da:0d:2c:31:c5:c2:a8:47:90:e6:e2:f2:0d:13:06
Issuer
CN=Rizve A
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 10, 2026 - May 10, 2027
Subject
CN=Sectigo Public Time Stamping Signer R36,O=Sectigo Limited,ST=West Yorkshire,C=GB
Serial Number
a4:29:3b:6e:1e:dd:d7:a7:34:08:87:ad:7a:4e:b7:24
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 27, 2025 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
72400
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
__p___argc
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_errno
_initialize_onexit_table
abort
_c_exit
_register_thread_local_exe_atexit_callback
terminate
__p___wargv
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
_set_fmode
fputwc
__p__commode
fputws
_wfsopen
fflush
__stdio_common_vfwprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
setvbuf
api-ms-win-crt-heap-l1-1-0
calloc
_set_new_mode
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
wcsncmp
toupper
strcmp
strlen
_wcsdup
wcsnlen
strcpy_s
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
wcsftime
_gmtime64_s
_time64
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
_configthreadlocale
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_lock_locales
setlocale
_unlock_locales
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=12, id=260, version=35207,
count=87, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=204, id=1, productName=Unmarked objects,
count=10, id=265, version=35225,
count=1, id=258, version=35225,
Nueva carpeta/Xeno.exp
- SHA256 2737ec0be101378e9d7c457c3742dcb7512058abd51e859ccf963c9840f29646
- MD5 30d09a0d2e236a86710df11467960877
- SHA1 bf3bb1daa2058715363ca17365bc012ed723f0ee
- SHA512 fb9cbef749093d74a3f596e1b642bc2518880bdff76050f970a7fd3cd5434964ed0075af1c9e9ba4241d2dfa5dfdac5f3fa1008a8b450bc8ab5af9753e347614
- TLSH T1D821CE0197C09D12F1045D38D2D6A60AF7F3FE8297C7431E5BC4811B2D8B7CAA254822
- MD5 SHA1 SHA512 TLSH
Nueva carpeta/Xeno.lib
- SHA256 de95b2d168d78458fa069d3935a46abd83e2d3f875bfa624c4cc4ac5d4e8bcda
- MD5 f40c3ae3b8a2a58a2cb96d2c2b274962
- SHA1 7feb29296cb6cd58cc4149aca153e652c8e64b9c
- SHA512 69d270c1994af305cc3117fb15d0d8ceb34ab65551c0ed175ddbb54cd1ac1658c25e102e8ecd68286069c0ff75e12d42fa17e161837b976b1360e43a3016dfdc
- TLSH T1C251CC37D5D64E2FD72CC4B98082A89D267C754A2303AF3F39AC14E147BAB98D391C56
- MD5 SHA1 SHA512 TLSH
Nueva carpeta/XenoUI.deps.json
- SHA256 21ef27edf8ab68d5228a8d5380f6024cd062937595e0f025ff02cced07ad88b0
- MD5 9f9ff7bfc655b11e416903251d2c21f9
- SHA1 49138920ac9999c1989947eed59daf7fef80f73d
- SHA512 209acd1782175e9b657d0694376f366ac926795f011cc3743f53c34f22310e48f29a90b48b28ebb2bb261093aef07ff2f2cc7f03f422855147c0c715a6986b7b
- TLSH T14D512315E9404EA748B02BFA657943C9F721136F6002594BB8BD289CCFB7F766581F38
- MD5 SHA1 SHA512 TLSH
Nueva carpeta/XenoUI.dll
- SHA256 d12e9318898f2aff7494fe89a2a8d3e55b2b7cf45ff74e66e152f4ced2012aab
- MD5 35352486776cd68ba3d38c79655fe145
- SHA1 4c287dd2db5b4f62637881c74ec0b0031e85d1fd
- SHA512 f8dbeb062dd4cd8e2117702c835ed580164f4dbb1485cd37f7dfcd7e9d327dcaf92722ded76a8b81690746304607b4fc1437ccf2b848ba5c3495131555b53b70
- SSDEEP 3072:91gdAO0a8Uw+2TbyG1XOQd7Pby6SgV9Sj0LC55dVPOdXmh94VM:4AnaC+2HyGBBby6p9Sj0Uh2dWAVM
- TLSH T112E3AF41376CCA12CABF0FBD64B152955A71BE17A5A3E70E14CC349C6CF738286523AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
f2:eb:5b:2c:9a:53:9e:92:d7:d5:7e:6c:3a:52:22:4f:c1:e5:19:92:bd:f8:53:c9:00:20:77:ff:0c:90:1f:a2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Rizve A
Chains
Jun 4, 2026
CN=Rizve A
Subject
CN=Rizve A
Serial Number
3f:da:0d:2c:31:c5:c2:a8:47:90:e6:e2:f2:0d:13:06
Issuer
CN=Rizve A
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 10, 2026 - May 10, 2027
Subject
CN=Sectigo Public Time Stamping Signer R36,O=Sectigo Limited,ST=West Yorkshire,C=GB
Serial Number
a4:29:3b:6e:1e:dd:d7:a7:34:08:87:ad:7a:4e:b7:24
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 27, 2025 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\rizve\OneDrive\Desktop\Projects\Xeno\XenoUI\obj\Release\net8.0-windows8.0\XenoUI.pdb
Name
.text
Size
131KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Nueva carpeta/XenoUI.pdb
- SHA256 a68b1133e5838878715e6190f5dc2bf5080cd055a0221ed849b18c13f449ebf3
- MD5 9c7f64f54ff2351f8ef41495adf595ad
- SHA1 b728711c983e9cf74884867170b45827963664e0
- SHA512 7eb32182fd6009b6ee5d729e51d930a7922eede2cb6d958497c74fdd3ea611c81b1ae63b08d8e6f81a368546c97e820a3db13eba708bc170e37c9b3c3ed8ab17
- SSDEEP 768:9RwlK3Vdp3MOgZTP2Pew4biSutot7Fd1We1uJUJKs5eBbeZs7GnM/noVL:rwlsVT3MOiTFw4HjvWeMY5CWMqM/6
- TLSH T1A9137B3B9388C625C625147698B7C38C7774C3642686EF32F1E62A18ECBF3684777618
- MD5 SHA1 SHA512 SSDEEP TLSH
Nueva carpeta/XenoUI.runtimeconfig.json
- SHA256 73b37384bb001e78db2014d328750eb2990393712fd63cd00c0f41965b3dbe96
- MD5 1043e1e5e960609d014e56f638202c24
- SHA1 aaa1583e8c9809a39a52c73efff1e5e439cfd3df
- SHA512 5fe61affcddd7b6235270cc3f0e7fa7f2e890852de6f5c7759234870d244ee1b32f95dfd7efb5e2f410d12557593491c53a5323b68966918f92a545c1f10d66e
- TLSH T1BEE02A3ACA206DB714F02BBEC02AC187FA3023AB00040D16BAFC180C2F361A22001F88
- MD5 SHA1 SHA512 TLSH