f9ed08ffc4be5bb22df952087413d0e0f98a1ca47b2515aafd2f50d3bcd7375e
- SHA256 f9ed08ffc4be5bb22df952087413d0e0f98a1ca47b2515aafd2f50d3bcd7375e
Overview
overview
6Static
static
3DenuvOwO/r...vm.sys
windows10-2004-x64
3DenuvOwO/r...de.dll
windows10-2004-x64
1DenuvOwO/r...hv.dll
windows10-2004-x64
1DenuvOwO/r...kd.sys
windows10-2004-x64
3DenuvOwO/r...og.dll
windows10-2004-x64
1DenuvOwO/r...al.dll
windows10-2004-x64
1DenuvOwO/r...er.exe
windows10-2004-x64
1DenuvOwO/r...er.exe
windows11-ltsc_2024-x64
1DenuvOwO/r...ex.dll
windows10-2004-x64
1DenuvOwO/r...ex.dll
windows11-ltsc_2024-x64
1DenuvOwO/r...64.dll
windows10-2004-x64
1DenuvOwO/r...64.dll
windows11-ltsc_2024-x64
1DenuvOwO/r...64.dll
windows10-2004-x64
1DenuvOwO/r...64.dll
windows11-ltsc_2024-x64
1VBS.cmd
windows10-2004-x64
6VBS.cmd
windows11-ltsc_2024-x64
6Static task
static1
Behavioral task
behavioral1
Sample
DenuvOwO/runtime/media/driver_amd/SimpleSvm.sys
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
DenuvOwO/runtime/media/driver_intel/hyperevade.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral3
Sample
DenuvOwO/runtime/media/driver_intel/hyperhv.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
DenuvOwO/runtime/media/driver_intel/hyperkd.sys
Resource
win10v2004-20260911-en
Behavioral task
behavioral5
Sample
DenuvOwO/runtime/media/driver_intel/hyperlog.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
DenuvOwO/runtime/media/driver_intel/kdserial.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral7
Sample
DenuvOwO/runtime/media/hypervisor-launcher.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
DenuvOwO/runtime/media/hypervisor-launcher.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
DenuvOwO/runtime/media/reflex.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
DenuvOwO/runtime/media/reflex.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
DenuvOwO/runtime/media/steam_api64.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
DenuvOwO/runtime/media/steam_api64.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
DenuvOwO/runtime/media/steamclient64.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
DenuvOwO/runtime/media/steamclient64.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
VBS.cmd
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
VBS.cmd
Resource
win11ltsc2024-20260911-en
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/DenuvOwO/runtime/media/hypervisor-launcher.exe |
| unpack001/DenuvOwO/runtime/media/reflex.dll |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| unpack001/DenuvOwO/runtime/media/driver_amd/SimpleSvm.sys |
| unpack001/DenuvOwO/runtime/media/driver_intel/hyperevade.dll |
| unpack001/DenuvOwO/runtime/media/driver_intel/hyperhv.dll |
| unpack001/DenuvOwO/runtime/media/driver_intel/hyperkd.sys |
| unpack001/DenuvOwO/runtime/media/driver_intel/hyperlog.dll |
| unpack001/DenuvOwO/runtime/media/driver_intel/kdserial.dll |
| unpack001/DenuvOwO/runtime/media/steam_api64.dll |
| unpack001/DenuvOwO/runtime/media/steamclient64.dll |
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 2, 2026
CN=Anti Denuvo Sanctuary
count=3, id=257, version=33145,
count=47, id=1, productName=Unmarked objects,
count=4, id=259, version=33145,
count=8, id=260, version=33145,
count=1, id=259, version=35222,
count=1, id=261, version=35222,
count=1, id=258, version=35222,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 2, 2026
CN=WDKTestCert Andrea\,134148471099622667
count=3, id=257, version=33145,
count=4, id=1, productName=Unmarked objects,
count=5, id=259, version=33145,
count=7, id=260, version=33145,
count=12, id=260, version=35222,
count=1, id=256, version=35222,
count=1, id=258, version=35222,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 2, 2026
CN=WDKTestCert Andrea\,134148471099622667
count=2, id=257, version=35222,
count=5, id=257, version=33145,
count=65, id=1, productName=Unmarked objects,
count=6, id=259, version=33145,
count=8, id=260, version=33145,
count=8, id=259, version=35222,
count=74, id=260, version=35222,
count=1, id=256, version=35222,
count=1, id=258, version=35222,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 2, 2026
CN=WDKTestCert Andrea\,134148471099622667
count=2, id=257, version=33145,
count=5, id=259, version=33145,
count=8, id=260, version=33145,
count=7, id=257, version=35222,
count=290, id=1, productName=Unmarked objects,
count=1, id=259, version=35222,
count=43, id=260, version=35222,
count=1, id=258, version=35222,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 2, 2026
CN=WDKTestCert Andrea\,134148471099622667
count=3, id=257, version=33145,
count=24, id=1, productName=Unmarked objects,
count=5, id=259, version=33145,
count=7, id=260, version=33145,
count=4, id=260, version=35222,
count=1, id=256, version=35222,
count=1, id=258, version=35222,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 2, 2026
CN=WDKTestCert Andrea\,134148471099622667
count=1, id=263, version=27412,
count=4, id=262, version=27412,
count=5, id=257, version=33145,
count=13, id=1, productName=Unmarked objects,
count=4, id=259, version=33145,
count=7, id=260, version=33145,
count=17, id=260, version=35222,
count=1, id=256, version=35222,
count=1, id=258, version=35222,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=3, id=259, version=35207,
count=9, id=260, version=35207,
count=22, id=261, version=35207,
count=5, id=257, version=33145,
count=133, id=1, productName=Unmarked objects,
count=19, productName=Unmarked objects (old),
count=1, id=255, version=35223,
count=1, id=258, version=35223,
Unsigned PE
Checks for missing Authenticode signature.
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=3, id=259, version=35207,
count=7, id=260, version=35207,
count=12, id=261, version=35207,
count=7, id=257, version=33145,
count=78, id=1, productName=Unmarked objects,
count=7, productName=Unmarked objects (old),
count=1, id=256, version=35222,
count=1, id=258, version=35222,
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 2, 2026
CN=GSE,OU=GSE,O=GSE,C=UK
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Oct 2, 2026
CN=GSE,OU=GSE,O=GSE,C=UK