Purity WIN MAC.zip
- SHA256 36231b9b933f41b9d60a3606212f579d1d61700f18876e2d7d0edef781f75c55
Overview
overview
7Static
static
3Purity_Setup.dmg
windows11-21h2-x64
3Applicatio...Purity
windows11-21h2-x64
3Applicatio...ommand
windows11-21h2-x64
3Library/Ap...ty.pdf
windows11-21h2-x64
3LUXONIX_Pu...se.rtf
windows11-21h2-x64
1LUXONIX_Pu...se.rtf
windows11-21h2-x64
1LUXONIX_Pu...flight
windows11-21h2-x64
3Purity_Setup.exe
windows11-21h2-x64
7$PLUGINSDI...ns.dll
windows11-21h2-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$R0.dll
windows11-21h2-x64
3$_4_/Purity.dll
windows11-21h2-x64
3Purity.dll
windows11-21h2-x64
3Purity.exe
windows11-21h2-x64
3Purity.pdf
windows11-21h2-x64
3msvcr80.dll
windows11-21h2-x64
3uninst Purity.exe
windows11-21h2-x64
7$PLUGINSDI...ns.dll
windows11-21h2-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3Behavioral task
behavioral1
Sample
Purity_Setup.dmg
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
Applications/LUXONIX/Purity.app/Contents/MacOS/Purity
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Applications/LUXONIX/Uninstaller/uninstall Purity.command
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
Library/Application Support/LUXONIX/Purity/Purity.pdf
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
LUXONIX_Purity_1_2_5_mac/LUXONIX_Purity_1_2_5_mac.pkg/Contents/Resources/English.lproj/License.rtf
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
LUXONIX_Purity_1_2_5_mac/LUXONIX_Purity_1_2_5_mac.pkg/Contents/Resources/ko.lproj/License.rtf
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
LUXONIX_Purity_1_2_5_mac/LUXONIX_Purity_1_2_5_mac.pkg/Contents/Resources/postflight
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
Purity_Setup.exe
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
$R0.dll
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
$_4_/Purity.dll
Resource
win11-20260513-en
Behavioral task
behavioral14
Sample
Purity.dll
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
Purity.exe
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
Purity.pdf
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
msvcr80.dll
Resource
win11-20260513-en
Behavioral task
behavioral18
Sample
uninst Purity.exe
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11-20260513-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11-20260513-en
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Purity_Setup.exe |
| unpack006/$PLUGINSDIR/InstallOptions.dll |
| unpack006/$PLUGINSDIR/LangDLL.dll |
| unpack006/$PLUGINSDIR/System.dll |
| unpack006/$_4_/Purity.dll |
| unpack006/Purity.dll |
| unpack006/Purity.exe |
| unpack006/uninst Purity.exe |
| unpack008/$PLUGINSDIR/InstallOptions.dll |
| unpack008/$PLUGINSDIR/LangDLL.dll |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack006/$R0 |
| unpack006/msvcr80.dll |
| resource | yara_rule |
|---|---|
| static1/unpack001/Purity_Setup.exe | nsis_installer_1 |
| static1/unpack001/Purity_Setup.exe | nsis_installer_2 |
| static1/unpack006/uninst Purity.exe | nsis_installer_1 |
| static1/unpack006/uninst Purity.exe | nsis_installer_2 |
file http://luxonix.com
file http://luxonix.com/forum/http:/luxonix.com/phpBB2/profile.php?mode=register2.
file http://www.luxonix.com/Forum
file http://www.luxonix.com/forum/
file http://www.luxonix.com/forum/*
file http://www.luxonix.com/forum/Post
Unsigned PE
Checks for missing Authenticode signature.
NSIS installer
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=155, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=72, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=48, version=9044,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=22, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=14, version=7299,
count=19, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=42, version=8803,
count=4, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 12, 2009
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=162, id=1, productName=Unmarked objects,
count=184, id=110, productName=VS2005 build 50727, version=50727,
count=83, id=125, productName=VS2005 build 50727, version=50727,
count=487, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=126, version=50327,
count=35, id=125, productName=VS2005 build 50727, version=50727,
count=169, id=109, productName=VS2005 build 50727, version=50727,
count=63, id=110, productName=VS2005 build 50727, version=50727,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=235, id=1, productName=Unmarked objects,
count=71, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=126, version=50327,
count=35, id=125, productName=VS2005 build 50727, version=50727,
count=169, id=109, productName=VS2005 build 50727, version=50727,
count=63, id=110, productName=VS2005 build 50727, version=50727,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=235, id=1, productName=Unmarked objects,
count=71, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=126, version=50327,
count=54, id=110, productName=VS2005 build 50727, version=50727,
count=35, id=125, productName=VS2005 build 50727, version=50727,
count=163, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=25, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=233, id=1, productName=Unmarked objects,
count=41, id=114, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
file http://luxonix.com
file http://luxonix.com/forum/http:/luxonix.com/phpBB2/profile.php?mode=register2.
file http://www.luxonix.com/Forum
file http://www.luxonix.com/forum/
file http://www.luxonix.com/forum/*
file http://www.luxonix.com/forum/Post
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Jul 12, 2009
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=162, id=1, productName=Unmarked objects,
count=184, id=110, productName=VS2005 build 50727, version=50727,
count=83, id=125, productName=VS2005 build 50727, version=50727,
count=487, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.
NSIS installer
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=155, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=72, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=48, version=9044,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=22, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,