Xeno-v1.3.65.zip
- SHA256 200efe2404a9ec927e6abc373f75ba19fbd1a4dfddb95f1ae2c2da4954362516
Password
x11e1
Overview
overview
8Static
static
3Xeno-v1.3.65.zip
windows10-2004-x64
8Xeno-v1.3.65.zip
windows11-ltsc_2024-x64
1Xeno-v1.3.65\Xeno.dll
windows10-2004-x64
1Xeno-v1.3.65\Xeno.dll
windows11-ltsc_2024-x64
1Xeno-v1.3.65\Xeno.exe
windows10-2004-x64
8Xeno-v1.3.65\Xeno.exe
windows11-ltsc_2024-x64
8Xeno-v1.3....UI.exe
windows10-2004-x64
1Xeno-v1.3....UI.exe
windows11-ltsc_2024-x64
1Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Xeno-v1.3.65.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Xeno-v1.3.65.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Xeno-v1.3.65\Xeno.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Xeno-v1.3.65\Xeno.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Xeno-v1.3.65\Xeno.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral6
Sample
Xeno-v1.3.65\Xeno.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral7
Sample
Xeno-v1.3.65\XenoUI.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Xeno-v1.3.65\XenoUI.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Xeno-v1.3.65.zip
- Size 2.2MB
- Sample261113-ngb94sty5m
- SHA256 200efe2404a9ec927e6abc373f75ba19fbd1a4dfddb95f1ae2c2da4954362516
- MD5 8c8825b35a977b8d8c7f2bdafcffc7b5
- SHA1 3f527512a653186b4c11d3c294bbdf8dd0de71c1
- SHA512 ef8d0c6eb73360028683a0b5028ddda2ad855cdd92da208b23b7740a5b808b5c9ef4275c5c03b08ce0d6850c41a534f6ad722445fccaf9c3214a4ce0856e59f9
- SSDEEP 49152:xIMBiN0hVZBFabRJYBzUFeb3auxFpfjUPf9oY4g:Vw6hVLFAYhUFeLauxFp4doYh
- TLSH T13CB53370DE3817B29C0AFB1794BA0E6DB83A14F24D4B39E29C5537B0A2299C3D5079E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Xeno-v1.3.65\Xeno.exe - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Xeno-v1.3.65\Xeno.dll unpack001/Xeno-v1.3.65\XenoUI.dll
File Explorer
-
Xeno-v1.3.65.zip.zip 2.2MB
-
Xeno-v1.3.65\ReadMe.json608B
-
Xeno-v1.3.65\Xeno.dll.dll 2.3MB
-
Xeno-v1.3.65\Xeno.exe.exe 2.8MB
-
Xeno-v1.3.65\Xeno.exp1KB
-
Xeno-v1.3.65\Xeno.lib2KB
-
Xeno-v1.3.65\XenoUI.deps.json2KB
-
Xeno-v1.3.65\XenoUI.dll.exe 145KB
-
Xeno-v1.3.65\XenoUI.pdb43KB
-
Xeno-v1.3.65\XenoUI.runtimeconfig.json516B
Xeno-v1.3.65\ReadMe.json
- SHA256 60c6615b5c21d90e5f063e048cfad3b02a2227c038ab284226c14e8113dd2dcd
- MD5 122f4855990350eb1f998a431a20e5f6
- SHA1 3f5ed4672d0b37cce1056368670491b089d6b241
- SHA512 a621a984d426d4c39c305ef7ec31a305e31f9f6dce457c1c9d98a822ad3d363ae1ec47740bc5fb4c069d835fda92b6c85887952ee00175ab597b4290bd6a708f
- TLSH T160F0AC2F8B87D32284A036C596489254EB1B13EB1B58EAE505AA02DE314F0C9C0F99F7
- MD5 SHA1 SHA512 TLSH
Xeno-v1.3.65\Xeno.dll
- IMPHASH 24c9047f18bb6101afdad3bde92ea109
- SHA256 64cf85638d35d5fa741dc67866a31fa8a2f9606e501b22dc266214041a52b07a
- MD5 64f86791ddd2e64ea2c6878517c26c5a
- SHA1 0f7c8b2c7ef75bff80a8ebea251533054a85d1f2
- SHA512 934da22fecd205917b827c2aeb742093744a3d47d225b04c9d91d7eb835bd03cd82ab5e012c24d252df23cff8758cbec5f6d348ac628799b990c328282cad7ce
- SSDEEP 49152:Ho/h73ywvIn2CFolrUJXvxNZONxncaAeaO3sENKbv01S:QeMwvxNUl0tPEu0o
- TLSH T153B59E26F59901FCC076D1F8CB6BA623E7727849033056EB06E0DA653E17BE55B3AB10
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
x11e1
PE Signature issue
Digest
6d:57:ff:a0:b1:47:8c:d2:84:49:6b:b0:32:94:b0:42:fc:fd:71:53:4b:03:2f:02:f6:11:9a:9a:43:f9:16:61
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Rizve A
Chains
Oct 20, 2026
CN=Rizve A
Subject
CN=Rizve A
Serial Number
3f:da:0d:2c:31:c5:c2:a8:47:90:e6:e2:f2:0d:13:06
Issuer
CN=Rizve A
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 10, 2026 - May 10, 2027
Subject
CN=Sectigo Public Time Stamping Signer R37,O=Sectigo Limited,ST=Greater London,C=GB
Serial Number
e7:4e:f2:55:b0:50:4f:fa:db:a6:df:f7:fc:8b:a3:15
Issuer
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Jun 24, 2037
Subject
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Serial Number
90:ac:08:72:20:fd:c5:a7:c4:6b:5c:c7:0d:f7:3d:06
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Mar 24, 2041
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
1677920
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\rizve\OneDrive\Desktop\Projects\Xeno\build\Release\net9.0-windows8.0\Xeno.pdb
libcrypto-3-x64
ERR_error_string
X509_VERIFY_PARAM_set1_host
X509_STORE_add_cert
ERR_get_error
d2i_X509
PEM_read_bio_X509_AUX
X509_free
EVP_CIPHER_CTX_free
EVP_DigestFinal_ex
BIO_free
EVP_sha3_512
EVP_EncryptUpdate
EVP_aes_256_gcm
EVP_sha3_256
EVP_CIPHER_CTX_ctrl
EVP_CIPHER_get_block_size
EVP_sha512
EVP_aes_256_ccm
EVP_aes_256_cfb128
EVP_CIPHER_CTX_get0_cipher
EVP_aes_256_ecb
EVP_aes_256_ofb
EVP_EncryptFinal_ex
ERR_clear_error
X509_STORE_set_flags
EVP_sha1
EVP_aes_256_ctr
RAND_bytes
EVP_sha3_224
EVP_sha512_256
EVP_DigestInit_ex
EVP_MD_CTX_free
EVP_sha224
EVP_DecryptInit_ex
EVP_DigestUpdate
EVP_sha256
EVP_md5
EVP_EncryptInit_ex
EVP_aes_256_ocb
EVP_MD_CTX_new
EVP_DecryptFinal_ex
EVP_sha512_224
BIO_new_mem_buf
EVP_DecryptUpdate
OPENSSL_thread_stop
OpenSSL_version
EVP_CIPHER_CTX_new
EVP_aes_256_cbc
EVP_sha384
EVP_CIPHER_get_mode
EVP_sha3_384
EVP_aes_256_xts
libssl-3-x64
SSL_write
TLS_client_method
SSL_ctrl
SSL_CTX_set_verify
SSL_accept
SSL_read
SSL_CTX_set_cipher_list
SSL_CTX_new
SSL_CTX_use_certificate_chain_file
SSL_get1_peer_certificate
SSL_get0_param
SSL_CTX_check_private_key
TLS_server_method
SSL_get_error
SSL_CTX_set_verify_depth
SSL_CTX_set_client_CA_list
SSL_set_fd
SSL_CTX_use_PrivateKey_file
SSL_CTX_ctrl
SSL_CTX_free
SSL_new
SSL_load_client_CA_file
SSL_CTX_set_default_verify_paths
SSL_CTX_set_options
SSL_CTX_get_cert_store
SSL_free
OPENSSL_init_ssl
SSL_CTX_load_verify_locations
SSL_connect
libcurl
curl_global_init
curl_share_init
curl_slist_free_all
curl_slist_append
curl_version
curl_easy_setopt
curl_easy_cleanup
curl_easy_strerror
curl_easy_init
curl_easy_getinfo
curl_easy_perform
curl_share_setopt
kernel32
WaitNamedPipeW
PeekNamedPipe
ReadFile
lstrlenW
LoadResource
LockResource
SizeofResource
FindResourceW
Process32FirstW
Process32NextW
GetModuleFileNameW
GetModuleFileNameA
AllocConsole
GlobalUnlock
WideCharToMultiByte
GetFileInformationByHandleEx
CopyFile2
AreFileApisANSI
SetFileInformationByHandle
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetLocaleInfoEx
LocalFree
InitOnceBeginInitialize
InitOnceComplete
InitializeSListHead
DisableThreadLibraryCalls
IsProcessorFeaturePresent
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
MapViewOfFileFromApp
GetConsoleWindow
GetCurrentProcessId
GlobalLock
CreateFileMappingFromApp
FreeConsole
GlobalFree
GlobalAlloc
GetConsoleMode
MultiByteToWideChar
UnmapViewOfFile
CreateFile2
CreateFileW
GetDynamicTimeZoneInformation
WriteFile
WriteConsoleA
GetStdHandle
SetConsoleTitleA
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetFileSizeEx
VirtualQueryEx
GetProcessTimes
GetSystemTimeAsFileTime
VirtualAllocEx
FormatMessageA
CreateEventW
SetEvent
CloseHandle
ResetEvent
RaiseException
GetLastError
QueryPerformanceCounter
GetTempPathW
GetCurrentThreadId
K32GetProcessImageFileNameW
OpenProcess
GetExitCodeProcess
LoadLibraryA
GetProcAddress
ReadProcessMemory
WriteProcessMemory
TerminateProcess
GetProcessId
CreateToolhelp32Snapshot
Sleep
QueryFullProcessImageNameA
user32
GetWindowThreadProcessId
IsWindow
GetSystemMenu
PostMessageW
keybd_event
OpenClipboard
ClientToScreen
CloseClipboard
EmptyClipboard
GetForegroundWindow
mouse_event
DrawMenuBar
SetClipboardData
EnableMenuItem
SetForegroundWindow
IsZoomed
GetWindowTextLengthW
GetWindowRect
IsWindowVisible
SetWindowPos
MonitorFromWindow
SetWindowLongPtrW
GetWindowLongPtrW
GetWindowPlacement
RedrawWindow
GetMonitorInfoW
SetWindowPlacement
EnumWindows
LockWindowUpdate
advapi32
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
GetCurrentHwProfileW
shell32
ShellExecuteW
msvcp140
?__ExceptionPtrCreate@@YAXPEAX@Z
_Strxfrm
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?classic@locale@std@@SAAEBV12@XZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Strcoll
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?fail@ios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
_Thrd_start
_Mtx_init
_Mtx_destroy
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_current_owns
_Cnd_broadcast
_Thrd_hardware_concurrency
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?_Winerror_map@std@@YAHH@Z
_Thrd_yield
_Mtx_trylock
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getctype@_Locinfo@std@@QEBA?AU_Ctypevec@@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??0ctype_base@std@@QEAA@_K@Z
??1ctype_base@std@@UEAA@XZ
_Toupper
_Tolower
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??7ios_base@std@@QEBA_NXZ
_Cnd_init
_Cnd_destroy
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_timedwait
?_Throw_C_error@std@@YAXH@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
_Query_perf_frequency
?uncaught_exceptions@std@@YAHXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
_Query_perf_counter
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?good@ios_base@std@@QEBA_NXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Xtime_get_ticks
?_Xbad_function_call@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_lock
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
_Mtx_unlock
?_Random_device@std@@YAIXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??Bios_base@std@@QEBA_NXZ
_Cnd_signal
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Cnd_wait
_Thrd_id
_Thrd_join
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
ws2_32
WSAAccept
WSASocketW
getpeername
WSAPoll
shutdown
listen
connect
getnameinfo
closesocket
send
recv
WSAGetLastError
WSACleanup
__WSAFDIsSet
select
WSACloseEvent
WSACreateEvent
WSASetLastError
WSAStartup
WSAEventSelect
ioctlsocket
freeaddrinfo
getaddrinfo
setsockopt
ntohs
socket
getsockname
bind
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
crypt32
CertCloseStore
CertOpenStore
CertEnumCertificatesInStore
CertFreeCertificateContext
dwmapi
DwmSetWindowAttribute
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_destroy
memchr
__std_type_info_destroy_list
__current_exception_context
__current_exception
memmove
memset
__std_exception_copy
memcmp
__CxxFrameHandler3
wcsrchr
strchr
_purecall
__C_specific_handler
__std_type_info_compare
__std_terminate
_CxxThrowException
memcpy
api-ms-win-crt-heap-l1-1-0
calloc
malloc
free
_callnewh
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_configure_narrow_argv
system
_initterm_e
_beginthreadex
terminate
_errno
_initialize_onexit_table
_initialize_narrow_environment
_initterm
_cexit
_invalid_parameter_noinfo
_crt_atexit
_register_onexit_function
_execute_onexit_table
strerror
abort
api-ms-win-crt-convert-l1-1-0
strtoull
strtol
strtoll
strtod
atoi
api-ms-win-crt-string-l1-1-0
isspace
strncpy
isalpha
isdigit
strncmp
_strnicmp
tolower
strcpy_s
strlen
strspn
wcslen
strcmp
wcscpy_s
api-ms-win-crt-stdio-l1-1-0
ungetc
fsetpos
fread
_fseeki64
_get_stream_buffer_pointers
fwrite
__acrt_iob_func
__stdio_common_vfprintf
fgetc
fclose
freopen_s
fflush
_fsopen
fputc
__stdio_common_vsprintf
__stdio_common_vswprintf
fgetpos
setvbuf
api-ms-win-crt-filesystem-l1-1-0
_mkdir
_stat64i32
_fullpath
_unlock_file
_lock_file
_wstat64i32
api-ms-win-crt-math-l1-1-0
_ldsign
ceilf
cos
cosh
acos
asin
tanh
exp
round
ldexp
_fdsign
_dsign
floor
floorf
fmod
log
atan
log10
pow
sin
tan
sinh
log2
atan2
ceil
sqrt
api-ms-win-crt-time-l1-1-0
strftime
_localtime64_s
_time64
_mkgmtime64
_gmtime64_s
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
localeconv
Attach
Execute
GetClients
Initialize
SetSetting
Version
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
420KB
Virtual Size
420KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
29KB
Virtual Size
252KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
89KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=36815,
count=6, id=259, version=36815,
count=9, id=260, version=36815,
count=37, id=261, version=36815,
count=14, id=257, version=33145,
count=5, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=2, id=257, version=35215,
count=5, id=257, version=35217,
count=583, id=1, productName=Unmarked objects,
count=123, id=264, version=37025,
count=1, id=256, version=37025,
count=1, id=255, version=37025,
count=1, id=151,
count=1, id=258, version=37025,
Xeno-v1.3.65\Xeno.exe
- IMPHASH 2c983f29837c6e472d242fd4e45c5d82
- SHA256 a81bca81013a281868467e34e01f947907e5838772282c585fb19dd2298e1fd6
- MD5 e5fe46a2d9430647fd3183e7b44ebc9d
- SHA1 bce5283fbed78ce033f23727d7d705b811c07edc
- SHA512 ae9768fb2eb233b0aaea42f1923ec8ef81e840ad72ad716f2309ad0538082a0e9811e1ee0afb9517df19e384c8249c9aea179934502efb2cddc39cdb6b1ff46c
- SSDEEP 12288:EAe/cH7+Osa2T2+2ayjw9/zeSC8I4BVg586qI4P/VPnXI5RgfpbGZLAUN9Zk23Sr:LmcHCOC
- TLSH T1DFD52313B24198F8F48BC078935BC163AB767C850B2574EF06E47A783E7A8D5AB39705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
x11e1
Minor OS version
0
Major OS version
6
Entry point
160608
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
pe_stub.pdb
kernel32
CloseHandle
GetModuleHandleW
FindResourceW
LoadResource
SizeofResource
LockResource
WaitForSingleObject
SetFilePointerEx
GetLastError
ExitProcess
HeapReAlloc
CreateProcessW
ReadProcessMemory
VirtualAllocEx
WriteProcessMemory
GetThreadContext
SetThreadContext
ResumeThread
GetTempPathW
DeleteFileW
GetCurrentProcess
VirtualAlloc
VirtualProtect
AllocConsole
GetEnvironmentStringsW
FreeEnvironmentStringsW
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
GetCurrentThreadId
SetLastError
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
WaitForSingleObjectEx
lstrlenW
GetCurrentProcessId
CreateMutexA
ReleaseMutex
WideCharToMultiByte
RtlVirtualUnwind
FormatMessageW
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
MultiByteToWideChar
WriteConsoleW
HeapAlloc
GetEnvironmentVariableW
GetModuleHandleA
GetFullPathNameW
FindFirstFileExW
CreateFileW
SetFileTime
SetFileInformationByHandle
GetFileInformationByHandle
GetFileInformationByHandleEx
CreateDirectoryW
GetModuleFileNameW
SetEnvironmentVariableW
FindNextFileW
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
LoadLibraryA
GetTickCount64
FindClose
HeapFree
GetCurrentDirectoryW
GetProcessHeap
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
shell32
ShellExecuteExW
advapi32
OpenProcessToken
RegCloseKey
RegSetValueExW
RegOpenKeyExW
GetTokenInformation
bcryptprimitives
ProcessPrng
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
ntdll
RtlNtStatusToDosError
NtReadFile
NtWriteFile
vcruntime140
__current_exception_context
__current_exception
memcpy
memmove
memset
memcmp
__CxxFrameHandler3
__C_specific_handler
api-ms-win-crt-string-l1-1-0
wcslen
api-ms-win-crt-runtime-l1-1-0
exit
_exit
_initterm_e
__p___argc
_seh_filter_exe
_cexit
_initterm
_register_thread_local_exe_atexit_callback
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_c_exit
_set_app_type
__p___argv
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
Name
.text
Size
161KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
660B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=3, id=259, version=35207,
count=9, id=260, version=35207,
count=22, id=261, version=35207,
count=9, id=257, version=33145,
count=125, id=1, productName=Unmarked objects,
count=7, productName=Unmarked objects (old),
count=1, id=255, version=35230,
count=1, id=258, version=35230,
Xeno-v1.3.65\Xeno.exp
- SHA256 4ffd0c2e9a1578cb745f46e5ffd694c94024ee6b094cc15defb9e73444e864ea
- MD5 ab2b8983b91abb44517eb9d0b35c50d3
- SHA1 842405112b379b6c518f81b7d4c39457d41cfec9
- SHA512 8420332f0917660b314f9d0b692a39248b76f9cc71a88cd2280d00f293d13b1507390989c6092ec85a25a40a6a114c6f941cf651b7ad4c80ca1d7bbd77b08675
- TLSH T1A421CE1257C0AE13F1045D38D2D6AA4AF7F3FE819787431E5BC4811B2D8B7D69254822
- MD5 SHA1 SHA512 TLSH
Xeno-v1.3.65\Xeno.lib
- SHA256 41638a2db86075f597c941d63cf12d1b416c81daa6596ec30b15bccf17636e0b
- MD5 108fe64802a5c8be04845a3450f3363a
- SHA1 4e6ba792b1c5f9af74b354567ae3a30a5ba5b1dd
- SHA512 2b9a411fc786db60886d1668a9930fca3c3a9101c4e25a97fbec5abb4e84f2d2f18130409641342867577ad8bbd419e4c7bd71b2b20431f631a5e6de6682ad8f
- TLSH T18051DB37D5D61E2BD32CC5B99082B899627C254E2303AF7F39AC64E1477AB98D381C46
- MD5 SHA1 SHA512 TLSH
Xeno-v1.3.65\XenoUI.deps.json
- SHA256 c3c913d075eeb90d53255194d29f4e602d5d93955e8892460daf0d0c6f1bd0d0
- MD5 8c596bd310c1d47269c525661566bfc4
- SHA1 ca1e8a9aa22e34b9a56dae4cdf1151ba7a0cd69a
- SHA512 e18d234bbb434279bd579c5e5b0ea52e31d8adcec5aa96a67eb1cde6ce1823796f5970e660ca67b6b3d7913bf8d2cd0c45cc9762092058e9673f35f213c75029
- TLSH T17251A801D6404DA784F06BF665B946CAF715536F60026A0BB8BD2A8CCFB7F766181F34
- MD5 SHA1 SHA512 TLSH
Xeno-v1.3.65\XenoUI.dll
- SHA256 37524c816a6b7fcd79dd76dc78020de3497073220fa041f4ad7aab7d6bcd53f4
- MD5 308c6b055255212a8c6193d3f2962d3f
- SHA1 5969258b7efcb0ff10ea3a5886f1afffee9c0045
- SHA512 7bddf4308e5fbebfd889e5c15184c49319f65ca1314c4252c7d559027ed06dd43fe0a9c094ed4bba5a1dc4b3ac958a5c8536a6a56711064fbcb360bf0d0bfafb
- SSDEEP 3072:ZBMd4YOG6EEaScUrlP2TbyGS6CMz7Pby6SgV9Sj0LC55dVPOdX09MheI:44trp2HyGjfby6p9Sj0Uh2dk+eI
- TLSH T149E3B041376C8A22CABF0FBD54B652955A71BF16A563E70E14CC349C2CF738286523AF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
x11e1
PE Signature issue
Digest
67:c0:8c:88:28:35:43:43:07:7d:c1:2a:3f:81:6b:0e:41:27:1e:c9:7e:68:62:0b:6b:fb:48:7a:6f:e0:4a:1c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Rizve A
Chains
Oct 20, 2026
CN=Rizve A
Subject
CN=Rizve A
Serial Number
3f:da:0d:2c:31:c5:c2:a8:47:90:e6:e2:f2:0d:13:06
Issuer
CN=Rizve A
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 10, 2026 - May 10, 2027
Subject
CN=Sectigo Public Time Stamping Signer R37,O=Sectigo Limited,ST=Greater London,C=GB
Serial Number
e7:4e:f2:55:b0:50:4f:fa:db:a6:df:f7:fc:8b:a3:15
Issuer
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Jun 24, 2037
Subject
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Serial Number
90:ac:08:72:20:fd:c5:a7:c4:6b:5c:c7:0d:f7:3d:06
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Mar 24, 2041
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\rizve\OneDrive\Desktop\Projects\Xeno\XenoUI\obj\Release\net9.0-windows8.0\XenoUI.pdb
Name
.text
Size
131KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Xeno-v1.3.65\XenoUI.pdb
- SHA256 8fc0e127ca00d8fb879cb1efbeb25da71e682cb660af091b51069912868dfced
- MD5 19a47b307a33ba1c794eaac1bd5acecf
- SHA1 83f4ebe89982771e1c0d24016f6e670e37832841
- SHA512 6b5ad5617be4969469de7d2cf34b9fa4431101ca19c8bbe60237e58d65271678842687c33e17b4b670b5eceaa5f8bb16082cec042160953fe9f296063c83a403
- SSDEEP 768:tRwlcarYC3/UbPXiLMuB3s5dgI6ruNCt7Fd1WeRSkueJRHbkZns71hM/noVT:7wlLYk/lzUgI6XjvWek2HIlMfM/q
- TLSH T18A136B7B9388C625C51614766876C39D37B4C3602746EF32F0E6AA28ECEF74857B7290
- MD5 SHA1 SHA512 SSDEEP TLSH
Xeno-v1.3.65\XenoUI.runtimeconfig.json
- SHA256 05917b409d59af31bc8d3021bc06302a0c21c7d05b449603d6cc9f0301a2b66c
- MD5 6cc5992b5f24e3ff259ff61441f0bce9
- SHA1 98e9fecdc80c90f6d250b9afca50eab4c4c0151b
- SHA512 64b9612846b342fd254c439be1833b4fde0e7bcea5979879d333b54a7633a9936df65639101ddb28023a3877f9a4dd1cbde29b2dfe79538bec48cc4a8aecb377
- TLSH T150F02069CA106DA704B937BAC63AC182FB30573B00041D92B9FC080C2F77DB22212F89
- MD5 SHA1 SHA512 TLSH