XenoUI[.]dll | Triage™

General

Target
XenoUI.dll
Size 145KB
Sample260731-wflfdsec64
SHA256 0f0b1c9d186e46dbba795176287c07e874b3222b0a98ebc8a32525afc60d106e
MD5 2e268797de4eb51aa0089b678d184033
SHA1 1c9b735816b3231bc3c88afdb71b0ca0d83cd15e
SHA512 f5f4917f676af9a916cc4a5bc164c2e56b9084f4346f1fa741a1190c651a8aaa9f888d9a07a8f63fbf1e8fbe48a971df5fd95bc561f4e850c1ecaf49d1aabb2c
SSDEEP 3072:LBMd4YOG6EEaScUrl12TbyG1VCV57Pby6SgV9Sj0LC55dVPOdX0t9lhx:+4trr2HyGKdby6p9Sj0Uh2dkhhx
TLSH
T199E3AF41376C8E22CAAF0FBD64B252955A71BF16A563E70E14CC349C6CF7382865236F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
XenoUI.dll

File Explorer

XenoUI.dll

.exe 145KB

XenoUI.dll

SHA256 0f0b1c9d186e46dbba795176287c07e874b3222b0a98ebc8a32525afc60d106e
MD5 2e268797de4eb51aa0089b678d184033
SHA1 1c9b735816b3231bc3c88afdb71b0ca0d83cd15e
SHA512 f5f4917f676af9a916cc4a5bc164c2e56b9084f4346f1fa741a1190c651a8aaa9f888d9a07a8f63fbf1e8fbe48a971df5fd95bc561f4e850c1ecaf49d1aabb2c
SSDEEP 3072:LBMd4YOG6EEaScUrl12TbyG1VCV57Pby6SgV9Sj0LC55dVPOdX0t9lhx:+4trr2HyGKdby6p9Sj0Uh2dkhhx
TLSH
T199E3AF41376C8E22CAAF0FBD64B252955A71BF16A563E70E14CC349C6CF7382865236F
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

71:6b:c3:2b:b3:81:72:5a:79:cf:3c:bb:d1:d4:c3:62:e9:48:df:99:c2:c7:19:d5:8c:eb:49:69:77:3e:a7:01

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Rizve A

Chains

Jun 18, 2026

CN=Rizve A

Subject

CN=Rizve A

Serial Number

3f:da:0d:2c:31:c5:c2:a8:47:90:e6:e2:f2:0d:13:06

Issuer

CN=Rizve A

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 10, 2026 - May 10, 2027

Subject

CN=Sectigo Public Time Stamping Signer R37,O=Sectigo Limited,ST=Greater London,C=GB

Serial Number

e7:4e:f2:55:b0:50:4f:fa:db:a6:df:f7:fc:8b:a3:15

Issuer

CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 25, 2026 - Jun 24, 2037

Subject

CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB

Serial Number

90:ac:08:72:20:fd:c5:a7:c4:6b:5c:c7:0d:f7:3d:06

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 25, 2026 - Mar 24, 2041

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\rizve\OneDrive\Desktop\Projects\Xeno\XenoUI\obj\Release\net9.0-windows8.0\XenoUI.pdb

Sharing

General

Malware Config

Signatures

File Explorer

XenoUI.dll

PE Signature issue

generic