General

  • Target
    Xeno-v1.3.60.exe
  • Size 84.8MB
  • Sample260916-sp2bescp8v
  • SHA256 4d53875a7fc6f65842488484d95eae9df10a7ace1e4cebdd6f4959770500f5d0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 2 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Xeno-v1.3.60.exe
    .exe 84.8MB
  • $PLUGINSDIR/StdUtils.dll
    .dll 100KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/app-64.7z
    .7z 84.2MB
  • LICENSE.electron.txt
    1KB
  • LICENSES.chromium.html
    7.9MB
  • Xeno-v1.3.60.exe
    .exe 156.0MB
  • chrome_100_percent.pak
    132KB
  • chrome_200_percent.pak
    191KB
  • d3dcompiler_47.dll
    .dll 4.7MB
  • ffmpeg.dll
    .dll 2.7MB
  • icudtl.dat
    10.1MB
  • libEGL.dll
    .dll 469KB
  • libGLESv2.dll
    .dll 7.1MB
  • locales/af.pak
    381KB
  • locales/am.pak
    619KB
  • locales/ar.pak
    680KB
  • locales/bg.pak
    706KB
  • locales/bn.pak
    911KB
  • locales/ca.pak
    430KB
  • locales/cs.pak
    441KB
  • locales/da.pak
    400KB
  • locales/de.pak
    427KB
  • locales/el.pak
    775KB
  • locales/en-GB.pak
    348KB
  • locales/en-US.pak
    351KB
  • locales/es-419.pak
    425KB
  • locales/es.pak
    425KB
  • locales/et.pak
    384KB
  • locales/fa.pak
    629KB
  • locales/fi.pak
    392KB
  • locales/fil.pak
    442KB
  • locales/fr.pak
    459KB
  • locales/gu.pak
    886KB
  • locales/he.pak
    549KB
  • locales/hi.pak
    928KB
  • locales/hr.pak
    428KB
  • locales/hu.pak
    460KB
  • locales/id.pak
    377KB
  • locales/it.pak
    417KB
  • locales/ja.pak
    510KB
  • locales/kn.pak
    1023KB
  • locales/ko.pak
    429KB
  • locales/lt.pak
    463KB
  • locales/lv.pak
    461KB
  • locales/ml.pak
    1.0MB
  • locales/mr.pak
    870KB
  • locales/ms.pak
    395KB
  • locales/nb.pak
    386KB
  • locales/nl.pak
    398KB
  • locales/pl.pak
    444KB
  • locales/pt-BR.pak
    419KB
  • locales/pt-PT.pak
    420KB
  • locales/ro.pak
    434KB
  • locales/ru.pak
    711KB
  • locales/sk.pak
    448KB
  • locales/sl.pak
    433KB
  • locales/sr.pak
    666KB
  • locales/sv.pak
    389KB
  • locales/sw.pak
    408KB
  • locales/ta.pak
    1.0MB
  • locales/te.pak
    973KB
  • locales/th.pak
    817KB
  • locales/tr.pak
    415KB
  • locales/uk.pak
    711KB
  • locales/ur.pak
    622KB
  • locales/vi.pak
    492KB
  • locales/zh-CN.pak
    357KB
  • locales/zh-TW.pak
    353KB
  • resources.pak
    5.0MB
  • resources/app.asar
    182.4MB
  • resources/app.asar.unpacked/native/xeno-addon/binding.gyp
    452B
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/obj/xeno/src/addon.obj
    1.7MB
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/obj/xeno/vcpkg.applocal.log
    5B
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/obj/xeno/win_delay_load_hook.obj
    117KB
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/obj/xeno/xeno.node.recipe
    337B
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/obj/xeno/xeno.tlog/CL.command.1.tlog
    6KB
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/obj/xeno/xeno.tlog/CL.read.1.tlog
    61KB
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/obj/xeno/xeno.tlog/CL.write.1.tlog
    838B
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/obj/xeno/xeno.tlog/Cl.items.tlog
    414B
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/obj/xeno/xeno.tlog/link.command.1.tlog
    2KB
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/obj/xeno/xeno.tlog/link.read.1.tlog
    5KB
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/obj/xeno/xeno.tlog/link.secondary.1.tlog
    420B
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/obj/xeno/xeno.tlog/link.write.1.tlog
    840B
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/obj/xeno/xeno.tlog/xeno.lastbuildstate
    233B
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/xeno.iobj
    602KB
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/xeno.ipdb
    203KB
  • resources/app.asar.unpacked/native/xeno-addon/build/Release/xeno.node
    .dll 152KB
  • resources/app.asar.unpacked/native/xeno-addon/build/config.gypi
    15KB
  • resources/app.asar.unpacked/native/xeno-addon/build/xeno.vcxproj
    .xml 12KB
  • resources/app.asar.unpacked/native/xeno-addon/build/xeno.vcxproj.filters
    .xml 2KB
  • resources/app.asar.unpacked/native/xeno-addon/package.json
    322B
  • resources/elevate.exe
    .exe 105KB
  • resources/public/Failed.png
    .png 20KB
  • resources/public/Xeno.dll
    .dll 2.3MB
  • resources/public/Xeno.ico
    271KB
  • resources/public/api-ms-win-crt-convert-l1-1-0.dll
    .dll 15KB
  • resources/public/api-ms-win-crt-environment-l1-1-0.dll
    .dll 18KB
  • resources/public/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll 13KB
  • resources/public/api-ms-win-crt-heap-l1-1-0.dll
    .dll 12KB
  • resources/public/api-ms-win-crt-locale-l1-1-0.dll
    .dll 11KB
  • resources/public/api-ms-win-crt-math-l1-1-0.dll
    .dll 20KB
  • resources/public/api-ms-win-crt-runtime-l1-1-0.dll
    .dll 16KB
  • resources/public/api-ms-win-crt-stdio-l1-1-0.dll
    .dll 17KB
  • resources/public/api-ms-win-crt-string-l1-1-0.dll
    .dll 18KB
  • resources/public/api-ms-win-crt-utility-l1-1-0.dll
    .dll 18KB
  • resources/public/concrt140.dll
    .dll 316KB
  • resources/public/index.html
    .html 383B
  • resources/public/libcrypto-3-x64.dll
    .dll 7.1MB
  • resources/public/libcurl.dll
    .dll 637KB
  • resources/public/libssl-3-x64.dll
    .dll 1.4MB
  • resources/public/msvcp140.dll
    .dll 544KB
  • resources/public/msvcp140_1.dll
    .dll 35KB
  • resources/public/msvcrt.dll
    .dll 683KB
  • resources/public/notification.mp3
    15KB
  • resources/public/ucrtbase.dll
    .dll 1011KB
  • resources/public/vcruntime140.dll
    .dll 121KB
  • resources/public/vcruntime140_1.dll
    .dll 48KB
  • resources/public/zlib1.dll
    .dll 88KB
  • snapshot_blob.bin
    253KB
  • v8_context_snapshot.bin
    564KB
  • vk_swiftshader.dll
    .dll 5.0MB
  • vk_swiftshader_icd.json
    106B
  • vulkan-1.dll
    .dll 910KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 424KB

Xeno-v1.3.60.exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 4d53875a7fc6f65842488484d95eae9df10a7ace1e4cebdd6f4959770500f5d0
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
4c:67:19:71:43:8f:5d:a6:23:21:20:9e:01:ca:a7:8e:d5:bf:61:30:73:ef:fa:f3:9e:23:f0:79:e7:94:41:5c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Rizve A
Minor OS version
0
Major OS version
4
Entry point
13199
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths