Xeno.zip
- SHA256 56489de235e87258e3f0eed199f0410d0fcdc3c73c0033f57ed1094471e71e9c
Static task
static1
2 signatures
Errors
Reason
scan timeout
General
- Target Xeno.zip
- Size 29.3MB
- Sample261011-htmzgsdf59
- SHA256 56489de235e87258e3f0eed199f0410d0fcdc3c73c0033f57ed1094471e71e9c
- MD5 387ced799c39a093ed6a36d3ef0d21ec
- SHA1 e39b51edf78edd5f02f022842149c23fcbb19468
- SHA512 f15ad0965bdb05c86d67592d3692bc070f41c00b05c5902a72775c6af74c233e464fd6ceec494f55a6624dfb5eb6d5826be4e98cf3b3e228d079665ee127998a
- SSDEEP 786432:LOrxK8Kielwlz/M/6MrBPhj5BJ0A4FJxKmYrczPaEnO:LO1HelwlzDMVz0A4FJjTO
- TLSH T10E673301DFD13763A9BE8BACE2C4BD941BA2661A052581CF1FE1C1F4D186B9057FAC1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Xeno.exe - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Xeno.dll unpack001/XenoUI.dll
File Explorer
-
Xeno.zip.zip 29.3MB
-
Xeno.dll.dll 2.3MB
-
Xeno.exe.exe 64.4MB
-
Xeno.exp1KB
-
Xeno.lib2KB
-
XenoUI.deps.json2KB
-
XenoUI.dll.exe 145KB
-
XenoUI.pdb43KB
-
XenoUI.runtimeconfig.json429B
Xeno.dll
- IMPHASH 2ffbc497f3a508a9dbf50449fa9f7733
- SHA256 548bc003d52e694b6176b3fb5595fddf07ccecb685eb712c730dc657b382fd48
- MD5 3139b471779a494d4680d9a0515b3459
- SHA1 2f67cb31ecbfb7c275251290818933e33507bdf6
- SHA512 e21406a945fa4664119c3303a084ed5af5cc738fee2d4d6f376898cfb537ce6355266a3ce12712a187e917c511924c75c57c19591459b3884758c16b8f403f3a
- SSDEEP 49152:q+jqPOu2DM1P8daBpcU5TgySscBxFkUXDBIhm1R:ce8/WbTFhDDP
- TLSH T18CB58E67A59900ECD076D1F88A1B5513E7B27C4903306AEB02E0B9652F27BF58F3EB15
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
e4:a5:9d:29:44:43:30:cd:7f:95:28:27:fb:5d:a8:c0:0d:ad:84:5b:52:98:3a:89:0f:44:c6:1d:9b:d2:97:85
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Rizve A
Chains
Aug 6, 2026
CN=Rizve A
Subject
CN=Rizve A
Serial Number
3f:da:0d:2c:31:c5:c2:a8:47:90:e6:e2:f2:0d:13:06
Issuer
CN=Rizve A
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 10, 2026 - May 10, 2027
Subject
CN=Sectigo Public Time Stamping Signer R37,O=Sectigo Limited,ST=Greater London,C=GB
Serial Number
e7:4e:f2:55:b0:50:4f:fa:db:a6:df:f7:fc:8b:a3:15
Issuer
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Jun 24, 2037
Subject
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Serial Number
90:ac:08:72:20:fd:c5:a7:c4:6b:5c:c7:0d:f7:3d:06
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Mar 24, 2041
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
1699168
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\rizve\OneDrive\Desktop\Projects\Xeno\build\Release\net9.0-windows8.0\Xeno.pdb
libcrypto-3-x64
ERR_error_string
X509_VERIFY_PARAM_set1_host
X509_STORE_add_cert
ERR_get_error
d2i_X509
PEM_read_bio_X509_AUX
X509_STORE_set_flags
X509_free
EVP_DigestFinal_ex
BIO_free
EVP_sha3_512
EVP_EncryptUpdate
EVP_aes_256_gcm
EVP_sha3_256
EVP_CIPHER_CTX_ctrl
EVP_CIPHER_get_block_size
EVP_sha512
EVP_aes_256_ccm
EVP_aes_256_cfb128
EVP_aes_256_ecb
EVP_CIPHER_CTX_get0_cipher
EVP_aes_256_ofb
EVP_EncryptFinal_ex
EVP_sha1
ERR_clear_error
EVP_CIPHER_CTX_free
EVP_aes_256_ctr
RAND_bytes
EVP_sha3_224
EVP_sha512_256
EVP_DigestInit_ex
EVP_MD_CTX_free
EVP_sha224
EVP_DecryptInit_ex
EVP_DigestUpdate
EVP_sha256
EVP_md5
EVP_EncryptInit_ex
EVP_aes_256_ocb
EVP_MD_CTX_new
EVP_DecryptFinal_ex
EVP_sha512_224
BIO_new_mem_buf
EVP_DecryptUpdate
OPENSSL_thread_stop
OpenSSL_version
EVP_CIPHER_CTX_new
EVP_aes_256_cbc
EVP_sha384
EVP_CIPHER_get_mode
EVP_sha3_384
EVP_aes_256_xts
libssl-3-x64
SSL_write
TLS_client_method
SSL_ctrl
SSL_CTX_set_verify
SSL_accept
SSL_read
SSL_CTX_set_cipher_list
SSL_CTX_new
SSL_CTX_use_certificate_chain_file
SSL_get1_peer_certificate
SSL_get0_param
SSL_CTX_check_private_key
TLS_server_method
SSL_get_error
SSL_CTX_set_verify_depth
SSL_CTX_set_client_CA_list
SSL_set_fd
SSL_CTX_use_PrivateKey_file
SSL_CTX_ctrl
SSL_CTX_free
SSL_new
SSL_load_client_CA_file
SSL_CTX_set_default_verify_paths
SSL_CTX_set_options
SSL_CTX_get_cert_store
SSL_free
OPENSSL_init_ssl
SSL_CTX_load_verify_locations
SSL_connect
libcurl
curl_global_init
curl_share_init
curl_slist_free_all
curl_slist_append
curl_version
curl_easy_setopt
curl_easy_cleanup
curl_easy_strerror
curl_easy_init
curl_easy_getinfo
curl_easy_perform
curl_share_setopt
kernel32
WaitNamedPipeW
PeekNamedPipe
ReadFile
lstrlenW
LoadResource
LockResource
SizeofResource
FindResourceW
Process32FirstW
Process32NextW
GetModuleFileNameW
GetModuleFileNameA
AllocConsole
GlobalUnlock
WideCharToMultiByte
GetFileInformationByHandleEx
CopyFile2
AreFileApisANSI
SetFileInformationByHandle
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetLocaleInfoEx
LocalFree
InitOnceBeginInitialize
InitOnceComplete
InitializeSListHead
DisableThreadLibraryCalls
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
MapViewOfFileFromApp
GetConsoleWindow
GetCurrentProcessId
GlobalLock
CreateFileMappingFromApp
FreeConsole
GlobalFree
GlobalAlloc
GetConsoleMode
MultiByteToWideChar
UnmapViewOfFile
CreateFile2
CreateFileW
GetDynamicTimeZoneInformation
WriteFile
WriteConsoleA
GetStdHandle
SetConsoleTitleA
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetFileSizeEx
VirtualQueryEx
GetProcessTimes
GetSystemTimeAsFileTime
VirtualAllocEx
QueryFullProcessImageNameA
FormatMessageA
CreateEventW
SetEvent
CloseHandle
ResetEvent
RaiseException
GetLastError
QueryPerformanceCounter
GetTempPathW
GetCurrentThreadId
K32GetProcessImageFileNameW
OpenProcess
GetExitCodeProcess
LoadLibraryA
GetProcAddress
ReadProcessMemory
WriteProcessMemory
TerminateProcess
GetProcessId
CreateToolhelp32Snapshot
Sleep
user32
SetWindowPos
IsWindow
GetSystemMenu
PostMessageW
keybd_event
OpenClipboard
ClientToScreen
CloseClipboard
EmptyClipboard
GetForegroundWindow
mouse_event
DrawMenuBar
SetClipboardData
EnableMenuItem
SetForegroundWindow
GetWindowThreadProcessId
GetWindowTextLengthW
GetWindowRect
IsWindowVisible
LockWindowUpdate
MonitorFromWindow
SetWindowLongPtrW
GetWindowLongPtrW
GetWindowPlacement
RedrawWindow
GetMonitorInfoW
SetWindowPlacement
EnumWindows
IsZoomed
advapi32
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
GetCurrentHwProfileW
shell32
ShellExecuteW
msvcp140
_Cnd_broadcast
?__ExceptionPtrCreate@@YAXPEAX@Z
_Strxfrm
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?classic@locale@std@@SAAEBV12@XZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Strcoll
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?fail@ios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
_Thrd_start
_Mtx_init
_Mtx_destroy
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_current_owns
_Thrd_hardware_concurrency
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?_Winerror_map@std@@YAHH@Z
_Thrd_yield
_Mtx_trylock
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getctype@_Locinfo@std@@QEBA?AU_Ctypevec@@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??0ctype_base@std@@QEAA@_K@Z
??1ctype_base@std@@UEAA@XZ
_Toupper
_Tolower
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??7ios_base@std@@QEBA_NXZ
_Cnd_init
_Cnd_destroy
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_timedwait
?_Throw_C_error@std@@YAXH@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
_Query_perf_frequency
?uncaught_exceptions@std@@YAHXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
_Query_perf_counter
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?good@ios_base@std@@QEBA_NXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Xtime_get_ticks
?_Xbad_function_call@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_lock
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
_Mtx_unlock
?_Random_device@std@@YAIXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??Bios_base@std@@QEBA_NXZ
_Cnd_signal
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Cnd_wait
_Thrd_id
_Thrd_join
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
ws2_32
WSAAccept
WSASocketW
getpeername
WSAPoll
getnameinfo
listen
connect
ioctlsocket
shutdown
send
recv
WSAGetLastError
WSACleanup
__WSAFDIsSet
select
WSACloseEvent
WSACreateEvent
WSASetLastError
WSAStartup
WSAEventSelect
WSAWaitForMultipleEvents
closesocket
freeaddrinfo
getaddrinfo
setsockopt
ntohs
socket
getsockname
bind
WSAEnumNetworkEvents
crypt32
CertCloseStore
CertOpenStore
CertEnumCertificatesInStore
CertFreeCertificateContext
dwmapi
DwmSetWindowAttribute
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memchr
__std_type_info_destroy_list
_CxxThrowException
__current_exception_context
__current_exception
memmove
memcmp
__std_exception_destroy
memcpy
memset
__CxxFrameHandler3
wcsrchr
strchr
_purecall
__C_specific_handler
__std_type_info_compare
__std_terminate
__std_exception_copy
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
realloc
calloc
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_initterm
abort
_configure_narrow_argv
_beginthreadex
terminate
_errno
_initialize_narrow_environment
_cexit
_initialize_onexit_table
system
_invalid_parameter_noinfo
_crt_atexit
_register_onexit_function
_execute_onexit_table
strerror
_initterm_e
api-ms-win-crt-convert-l1-1-0
strtod
atoi
strtol
strtoull
strtoll
api-ms-win-crt-string-l1-1-0
isspace
strncpy
isdigit
strncmp
_strnicmp
isalpha
tolower
strcpy_s
strlen
strspn
wcslen
wcscpy_s
strcmp
api-ms-win-crt-stdio-l1-1-0
ungetc
fsetpos
fread
_fseeki64
_get_stream_buffer_pointers
fwrite
__acrt_iob_func
fgetc
fclose
fflush
fputc
_fsopen
setvbuf
__stdio_common_vswprintf
__stdio_common_vsprintf
fgetpos
freopen_s
__stdio_common_vfprintf
api-ms-win-crt-filesystem-l1-1-0
_wstat64i32
_lock_file
_unlock_file
_mkdir
_fullpath
_stat64i32
api-ms-win-crt-math-l1-1-0
_ldsign
acos
sinh
sin
pow
tan
tanh
round
ldexp
_fdsign
_dsign
log10
log
fmod
floorf
floor
exp
cosh
sqrt
cos
ceilf
atan2
asin
atan
log2
ceil
api-ms-win-crt-time-l1-1-0
strftime
_localtime64_s
_mkgmtime64
_gmtime64_s
_time64
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
localeconv
Attach
Execute
GetClients
Initialize
SetSetting
Version
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
465KB
Virtual Size
465KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
30KB
Virtual Size
252KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
89KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35721,
count=6, id=259, version=35721,
count=8, id=260, version=35721,
count=37, id=261, version=35721,
count=14, id=257, version=33145,
count=5, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=257, version=35215,
count=5, id=257, version=35217,
count=583, id=1, productName=Unmarked objects,
count=123, id=264, version=36252,
count=1, id=256, version=36252,
count=1, id=255, version=36252,
count=1, id=151,
count=1, id=258, version=36252,
Xeno.exe
- IMPHASH 25f4444e0f8d2a8ae40cbacacc252543
- SHA256 77fd4cbef60b11ea933b6aca4d2269505b32cba776c2b642b1635ab3c8739170
- MD5 2cfb5fa9eb3d892a07a8276860efb414
- SHA1 d0f20be462d49f47def2a210e59956e5d5c1d1c7
- SHA512 ba18a52ef14f50436282545c69aa4d44e2e5f952d9eaca95bf73d6090ffd8554b138dc204096659dee80b44631f1b9fb27d3a4214273746a41f6900305776342
- SSDEEP 393216:Mau9zp88ZIKOpa4/TGWDO1c8DyLlZbtYOcTglb/vG5L5OtsFt6NTapArRNr6JNGF:0O8ZInFDOu8Dybxc4WV5OtsFUtasYY
- TLSH T129E7AE15B3D80A16E63FC27DC2638102E7F1B4931352C7CF4558EA992F63BC1AA77266
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6041680
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\coreclr\windows.x64.Release\Corehost.Static\singlefilehost.pdb
kernel32
RaiseException
FreeLibrary
SetErrorMode
RaiseFailFastException
GetExitCodeProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
AddVectoredExceptionHandler
MultiByteToWideChar
GetTickCount
FlushInstructionCache
QueryPerformanceFrequency
QueryPerformanceCounter
RtlLookupFunctionEntry
LocateXStateFeature
RtlDeleteFunctionTable
InterlockedPushEntrySList
InterlockedFlushSList
InitializeSListHead
GetTickCount64
DuplicateHandle
QueueUserAPC
WaitForSingleObjectEx
SetThreadPriority
GetThreadPriority
GetCurrentThreadId
TlsAlloc
GetCurrentThread
GetCurrentProcessId
CreateThread
GetModuleHandleW
WaitForMultipleObjectsEx
SignalObjectAndWait
RtlCaptureContext
SetThreadStackGuarantee
VirtualQuery
WriteFile
GetStdHandle
GetConsoleOutputCP
MapViewOfFileEx
UnmapViewOfFile
GetStringTypeExW
InterlockedPopEntrySList
ExitProcess
Sleep
CreateMemoryResourceNotification
VirtualAlloc
VirtualFree
VirtualProtect
SleepEx
SwitchToThread
SuspendThread
ResumeThread
InitializeContext
SetXStateFeaturesMask
RtlRestoreContext
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer
ReadFile
GetFileSize
GetEnvironmentVariableW
SetEnvironmentVariableW
CreateEventW
SetEvent
ResetEvent
GetThreadContext
SetThreadContext
GetEnabledXStateFeatures
CopyContext
WerRegisterRuntimeExceptionModule
RtlInstallFunctionTableCallback
GetSystemDefaultLCID
GetUserDefaultLCID
RtlUnwind
HeapAlloc
HeapFree
GetProcessHeap
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
FormatMessageW
CreateSemaphoreExW
ReleaseSemaphore
GetACP
LCMapStringEx
LocalFree
VerSetConditionMask
VerifyVersionInfoW
QueryThreadCycleTime
GetLogicalProcessorInformationEx
SetThreadGroupAffinity
GetThreadGroupAffinity
GetProcessGroupAffinity
GetCurrentProcessorNumberEx
GetProcessAffinityMask
QueryInformationJobObject
CloseHandle
GetSystemTimeAsFileTime
GetModuleFileNameW
CreateProcessW
GetCPInfo
LoadLibraryExW
CreateFileW
GetFileAttributesExW
GetFullPathNameW
LoadLibraryExA
OutputDebugStringA
OpenEventW
ReleaseMutex
ExitThread
CreateMutexW
HeapReAlloc
CreateNamedPipeA
WaitForMultipleObjects
DisconnectNamedPipe
CreateFileA
CancelIoEx
GetOverlappedResult
ConnectNamedPipe
FlushFileBuffers
SetFilePointer
MapViewOfFile
GetActiveProcessorGroupCount
GetSystemTime
SetConsoleCtrlHandler
GetLocaleInfoEx
GetUserDefaultLocaleName
RtlAddFunctionTable
LoadLibraryW
CreateDirectoryW
RemoveDirectoryW
CreateActCtxW
ActivateActCtx
FindResourceW
GetWindowsDirectoryW
GetFileSizeEx
FindFirstFileExW
FindNextFileW
GetTempPathW
FindClose
LoadLibraryA
GetCurrentDirectoryW
IsWow64Process
EncodePointer
DecodePointer
CreateFileMappingA
TlsSetValue
TlsGetValue
GetSystemInfo
GetCurrentProcess
OutputDebugStringW
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
GetCommandLineW
GetProcAddress
GetModuleHandleExW
SetThreadErrorMode
FlushProcessWriteBuffers
SetLastError
DebugBreak
WaitForSingleObject
GetNumaHighestNodeNumber
SetThreadAffinityMask
SetThreadIdealProcessorEx
GetThreadIdealProcessorEx
VirtualAllocExNuma
GetNumaProcessorNodeEx
VirtualUnlock
GetLargePageMinimum
IsProcessInJob
K32GetProcessMemoryInfo
GetLogicalProcessorInformation
GlobalMemoryStatusEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlVirtualUnwind
IsProcessorFeaturePresent
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsFree
RtlPcToFileHeader
TryAcquireSRWLockExclusive
GetExitCodeThread
GetStringTypeW
InitializeCriticalSectionEx
GetLastError
CreateFileMappingW
advapi32
ReportEventW
AdjustTokenPrivileges
RegGetValueW
SetKernelObjectSecurity
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
OpenProcessToken
DeregisterEventSource
RegisterEventSourceW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
EventRegister
SetThreadToken
RevertToSelf
OpenThreadToken
EventWriteTransfer
EventWrite
LookupPrivilegeValueW
ole32
CoCreateFreeThreadedMarshaler
CreateStreamOnHGlobal
CoRevokeInitializeSpy
CoGetContextToken
CoGetObjectContext
CoUnmarshalInterface
CoMarshalInterface
CoGetMarshalSizeMax
CLSIDFromProgID
CoReleaseMarshalData
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
CoInitializeEx
CoRegisterInitializeSpy
CoWaitForMultipleHandles
CoUninitialize
CoGetClassObject
oleaut32
CreateErrorInfo
SysFreeString
GetErrorInfo
SetErrorInfo
SysStringLen
SysAllocString
SysAllocStringLen
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayDestroy
QueryPathOfRegTypeLi
LoadTypeLibEx
SafeArrayGetVartype
VariantChangeType
VariantChangeTypeEx
VariantClear
VariantInit
VarCyFromDec
SafeArrayAllocDescriptorEx
GetRecordInfoFromTypeInfo
SafeArraySetRecordInfo
SafeArrayAllocData
SafeArrayGetElemsize
SysStringByteLen
SysAllocStringByteLen
SafeArrayCreateVector
SafeArrayPutElement
LoadRegTypeLi
user32
LoadStringW
MessageBoxW
shell32
ShellExecuteW
api-ms-win-crt-string-l1-1-0
strncat_s
wcsncat_s
_wcsicmp
wcsnlen
wcscat_s
towupper
iswascii
_strdup
strncpy
strnlen
wcstok_s
isdigit
isupper
isalpha
towlower
_wcsdup
iswspace
isspace
islower
strtok_s
strcmp
strcspn
__strncnt
_wcsnicmp
strlen
wcscpy_s
toupper
wcsncpy_s
strcpy_s
strcat_s
strncpy_s
_strnicmp
tolower
wcsncmp
iswupper
strncmp
_stricmp
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsscanf
fflush
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vswprintf
__stdio_common_vfwprintf
fputws
fputwc
_get_stream_buffer_pointers
_fseeki64
fread
fsetpos
ungetc
fgetpos
fgets
fgetc
fputc
_wfsopen
_wfopen
__p__commode
_set_fmode
__stdio_common_vsnprintf_s
setvbuf
_setmode
_dup
_fileno
ftell
fseek
fputs
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf_s
fwrite
_flushall
fopen
fclose
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_register_onexit_function
_configure_wide_argv
_initialize_wide_environment
_get_initial_wide_environment
_initterm
_initterm_e
_exit
_invoke_watson
__p___argc
__p___wargv
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_onexit_table
_beginthreadex
terminate
_controlfp_s
_wcserror_s
_invalid_parameter_noinfo
_errno
exit
abort
api-ms-win-crt-convert-l1-1-0
_atoi64
_ltow_s
_wtoi
strtoul
_wcstoui64
atol
_itow_s
strtoull
wcstoul
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
calloc
malloc
realloc
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-math-l1-1-0
asinhf
atanhf
cbrtf
acoshf
cosh
cbrt
coshf
exp
expf
acosh
atanh
floor
floorf
fma
fmaf
cosf
_fdopen
cos
ceilf
_copysignf
_isnanf
trunc
truncf
ilogb
ilogbf
tanhf
ceil
fmod
fmodf
atanf
frexp
atan2f
atan2
log
log10
log10f
atan
asinf
log2
log2f
logf
pow
powf
sin
sinf
asin
sinh
sinhf
sqrt
sqrtf
tan
tanf
tanh
acosf
_copysign
asinh
_isnan
_finite
modf
modff
_dclass
_ldclass
acos
__setusermatherr
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64_s
wcsftime
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-locale-l1-1-0
_unlock_locales
setlocale
__pctype_func
___lc_locale_name_func
_lock_locales
___lc_codepage_func
___mb_cur_max_func
_configthreadlocale
localeconv
api-ms-win-crt-filesystem-l1-1-0
_wrename
_unlock_file
_wremove
_lock_file
CLRJitAttachState
DotNetRuntimeInfo
MetaDataGetDispenser
g_CLREngineMetrics
g_dacTable
Name
.text
Size
6.1MB
Virtual Size
6.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.CLR_UEF
Size
512B
Virtual Size
221B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
38KB
Virtual Size
127KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
216KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Section
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=20, id=259, version=35207,
count=18, id=260, version=35207,
count=96, id=261, version=35207,
count=8, id=260, version=33145,
count=13, id=257, version=33145,
count=521, id=1, productName=Unmarked objects,
count=21, id=259, version=35223,
count=653, id=265, version=35223,
count=1, id=256, version=35223,
count=1, id=255, version=35223,
count=1, id=258, version=35223,
Xeno.exp
- SHA256 b29565ca546538917a4017a430e2f6b0254395e7d5d3235395453f88174bd87b
- MD5 2aae7de1c949d1bbe8662d5d3a0b33c3
- SHA1 8280b99d182f678016c54bc618cae7ed0a0e93d0
- SHA512 604622fb532ae09e6785a9ee0d2faa7851bff6888f8f567bf9013feffae5da7e40dbe863084107c95737b4dbee5d0880fe2cf314165fbbb24a6f38d47e292ebe
- TLSH T1DB21CE019BC09D12F1045D38D2D6A70AF7F3FE829787431E5BC4811B2D8B7C6A254822
- MD5 SHA1 SHA512 TLSH
Xeno.lib
- SHA256 17435aadcba87c4f30736ead7e38c23fb9576df7053ee6ea64aefdd637b7cdf2
- MD5 c7cf20e7ba05b36ce4c8afd84ca50687
- SHA1 c184b463d96b6acfe62a54b780e7a860f103fb15
- SHA512 6de043a604ba360f6346df9ec649696ab648b0bb9b1d58899dd489ef720171571471236f17f4bec53fdb84654d521df5641cfc64dd5cd93433936c00a466032b
- TLSH T13F51CE37D5D65E2BD32CC1B9C042A89D227C654A2303AF7F39AD14E14779B98E351C46
- MD5 SHA1 SHA512 TLSH
XenoUI.deps.json
- SHA256 7ff9c9f6cb3abc82fb609bac087fcfb31b3e86dba3298f2074a04f35c7b1200f
- MD5 52092b9130fdf7a54794e587a8cef160
- SHA1 da6ae384a5fe9f35147a61a162acdc1125318d75
- SHA512 a4683ad14691fe750aa8ee6005725d46b5bddc3dc8ef3ffed465a19f779d7e9dbb8bc516fc5a3ed705f09207a86ccfe6bdd1f76ffd44bcb3cb3a5b1fd8c6b6b2
- TLSH T161514515E9804EA748B02BFA657943C9F721136F6002594BB8BD289CCFB7F766581F38
- MD5 SHA1 SHA512 TLSH
XenoUI.dll
- SHA256 df0340b85421ca26bb402298a0be16b256717ab5a50bc5fced8def1775935b28
- MD5 ae10fbd713d66bb20ee8b62195acdfc3
- SHA1 361d03203b859be7bcf38442338b550972bffefb
- SHA512 098f81334f3933c20a75be58b150516775e6116e91d47a39f45eb55aaf7af20871cf39b74accf1279a60e2c77682e082e32e185a23c9d154c97c04dd837962c0
- SSDEEP 3072:g1gdAO0a8Uwz2TbyG3BOZB7Pby6SgV9Sj0LC55dVPOdXmqTc7:TAnaCz2HyGkFby6p9Sj0Uh2dWb7
- TLSH T1BEE3AF41376CCA12CABF0FBD64B152955A71BE17A5A3E70E14CC349C6CF738286523AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
78:4c:70:d3:00:06:0c:81:04:ed:e0:4a:8b:44:c6:f1:35:18:16:9a:be:bd:d8:8c:c6:1b:3d:82:d6:43:b3:b0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Rizve A
Chains
Aug 6, 2026
CN=Rizve A
Subject
CN=Rizve A
Serial Number
3f:da:0d:2c:31:c5:c2:a8:47:90:e6:e2:f2:0d:13:06
Issuer
CN=Rizve A
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 10, 2026 - May 10, 2027
Subject
CN=Sectigo Public Time Stamping Signer R37,O=Sectigo Limited,ST=Greater London,C=GB
Serial Number
e7:4e:f2:55:b0:50:4f:fa:db:a6:df:f7:fc:8b:a3:15
Issuer
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Jun 24, 2037
Subject
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Serial Number
90:ac:08:72:20:fd:c5:a7:c4:6b:5c:c7:0d:f7:3d:06
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Mar 24, 2041
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\rizve\OneDrive\Desktop\Projects\Xeno\XenoUI\obj\Release\net8.0-windows8.0\XenoUI.pdb
Name
.text
Size
131KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
XenoUI.pdb
- SHA256 2cdee00118695abaf73bf67e708c32deecabb9cfc0d0f7f5b5e89be0a144a897
- MD5 1c4542c9575574544d0a2385f71f451f
- SHA1 8c8b3491b3cbcb7e76546456f423531b7383c24d
- SHA512 ee4c57d837b284687adca84978c80c3c81b20d708abad530cc6864cb337162f2bd2b7fa02414355da4b9c2eb92697c62b7c6a2148ae8e5d89a84d5daf3573e9b
- SSDEEP 768:3RRwlmQva+a9XjtgMCOdTnWCd7NFfRuFft7Fd1WeCuY6JxKbnSs7G2MTnoVp:3Hwlk1yMCOhv7Df8jvWejpK2MLMTe
- TLSH T193136A3B9388D725C6161476683BC34C7730C3286742EF32F1E66A28EDAF74917B6260
- MD5 SHA1 SHA512 SSDEEP TLSH
XenoUI.runtimeconfig.json
- SHA256 73b37384bb001e78db2014d328750eb2990393712fd63cd00c0f41965b3dbe96
- MD5 1043e1e5e960609d014e56f638202c24
- SHA1 aaa1583e8c9809a39a52c73efff1e5e439cfd3df
- SHA512 5fe61affcddd7b6235270cc3f0e7fa7f2e890852de6f5c7759234870d244ee1b32f95dfd7efb5e2f410d12557593491c53a5323b68966918f92a545c1f10d66e
- TLSH T1BEE02A3ACA206DB714F02BBEC02AC187FA3023AB00040D16BAFC180C2F361A22001F88
- MD5 SHA1 SHA512 TLSH