Report - github.com/rlz-ve/x/releases/download/1.0.9/Xeno-v1.0.9-x64.zip

Report Overview

Visitedpublic

2024-11-04 21:30:23

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
github.com	1423	2007-10-09	2016-07-13	2024-10-30	517 B	4.3 kB	140.82.121.3
objects.githubusercontent.com	134060	2014-02-06	2021-11-01	2024-10-30	962 B	4.6 MB	185.199.108.133

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

objects.githubusercontent.com/github-production-release-asset-2e65be/883345985/5aac4921-808e-460b-aaf7-933dcc90ca5f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241104%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241104T212952Z&X-Amz-Expires=300&X-Amz-Signature=b1f42200eb94d76a31c690d4885cf1b7fc32cbaa5eaa35df0c69b5d2ed8e2351&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DXeno-v1.0.9-x64.zip&response-content-type=application%2Foctet-stream

IP / ASN

185.199.108.133

#54113 FASTLY

File Overview

File TypeZip archive data, at least v2.0 to extract, compression method=store

Size4.6 MB (4626851 bytes)

MD5d5a09d7b68fb0697fdfc609660c0d507

SHA159ee0ff14f24c4495aa40ccd0086d23ccea7a7fa

SHA256bfc0c1c083308a3d5f06d3e21dc76ec1e6702c7f4b27bf2ad3e42b296c8ed72d

Archive (39)

Modified	Filename	Size	MD5	File type
2024-11-03 11:37	index.html	169 kB	001dcbb8f41cdcbf9b4d1e3a0ed4b2d2	HTML document, Unicode text, UTF-8 text, with very long lines (61271), with CRLF line terminators
2024-09-08 19:51	workerMain.js	137 kB	d0ac5294c58e523cddf25bc6d785fa48	JavaScript source, ASCII text, with very long lines (1119), with CRLF line terminators
2024-09-08 19:51	lua.js	4.7 kB	eebda1fdd970433750c115eae2f03865	JavaScript source, ASCII text, with CRLF line terminators
2024-09-08 19:51	editor.main.css	301 kB	23c7db6e12f6454ef6e7fb98d17924d8	ASCII text, with very long lines (65249), with CRLF line terminators
2024-09-08 19:51	editor.main.js	2.2 MB	a7e3083cfe200263edfb4bf011b893a3	JavaScript source, Unicode text, UTF-8 text, with very long lines (65245), with CRLF line terminators
2024-09-08 19:51	editor.main.nls.de.js	47 kB	d1fd2fb756c73970b9c5e0ba07bff708	Unicode text, UTF-8 text, with very long lines (16089), with CRLF line terminators
2024-09-08 19:51	editor.main.nls.es.js	48 kB	36f546b28ca17ece9f8eb9bcf8344e13	Unicode text, UTF-8 text, with very long lines (16082), with CRLF line terminators
2024-09-08 19:51	editor.main.nls.fr.js	51 kB	1a29080733878dd44e0c118e84cd0c39	Unicode text, UTF-8 text, with very long lines (16773), with CRLF line terminators
2024-09-08 19:51	editor.main.nls.it.js	49 kB	18e88f58301ad5ae926204507ab99c6b	Unicode text, UTF-8 text, with very long lines (17192), with CRLF line terminators
2024-09-08 19:51	editor.main.nls.ja.js	53 kB	3bf851cc70f515cbbe1d39da93e4f041	Unicode text, UTF-8 text, with very long lines (7783), with CRLF line terminators
2024-09-08 19:51	editor.main.nls.js	39 kB	e871d4d9539c26d7d2bf32801ebdecf0	Unicode text, UTF-8 text, with very long lines (13654), with CRLF line terminators
2024-09-08 19:51	editor.main.nls.ko.js	48 kB	60fcd422ac97a1b645ff48cb6928f7af	Unicode text, UTF-8 text, with very long lines (8116), with CRLF line terminators
2024-09-08 19:51	editor.main.nls.ru.js	78 kB	6e7d5b984917b00f131c47473ce2b866	Unicode text, UTF-8 text, with very long lines (16153), with CRLF line terminators
2024-09-08 19:51	editor.main.nls.zh-cn.js	37 kB	05e49314cf801f5d3992b55243690ea7	Unicode text, UTF-8 text, with very long lines (5836), with CRLF line terminators
2024-09-08 19:51	editor.main.nls.zh-tw.js	37 kB	becbf441d95b0bc1565faf47ce9de373	Unicode text, UTF-8 text, with very long lines (5745), with CRLF line terminators
2024-09-08 19:51	loader.js	30 kB	bc15bb48d4d5c60ce7f16819f4d988c4	JavaScript source, ASCII text, with very long lines (1023), with CRLF line terminators
2024-11-04 15:48	config.json	81 B	4ca63e045869245351e9dffbca730f0c	JSON text data
2024-11-04 16:02	fe0c0071-4c7c-4271-989e-b59e012c4a0d	165 B	05b8810e7e421e8b4803912236d12402	ASCII text, with CRLF line terminators
2024-09-07 14:16	libcrypto-3-x64.dll	4.7 MB	e3e4236c4483dbe1bc5954fd63c965b8	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections
2024-09-07 14:16	libssl-3-x64.dll	822 kB	4e2a30eba5388b0fe1838137a61ac255	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections
2024-06-11 05:23	Microsoft.Web.WebView2.Core.dll	571 kB	b037ca44fd19b8eedb6d5b9de3e48469	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
2024-06-11 05:22	Microsoft.Web.WebView2.WinForms.dll	38 kB	8153423918c8cbf54b44acec01f1d6c2	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
2024-06-11 05:22	Microsoft.Web.WebView2.Wpf.dll	52 kB	4a292c5c2abf1aab91dee8eecafe0ab6	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
2023-03-08 02:09	Newtonsoft.Json.dll	712 kB	adf3e3eecde20b7c9661e9c47106a14a	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
2024-06-11 05:23	WebView2Loader.dll	140 kB	8f2648cd543236ef1b4856715731e069	PE32+ executable (DLL) (console) Aarch64, for MS Windows, 7 sections
2024-06-11 05:22	WebView2Loader.dll	165 kB	c5f0c46e91f354c58ecec864614157d7	PE32+ executable (DLL) (console) x86-64, for MS Windows, 10 sections
2024-06-11 05:23	WebView2Loader.dll	116 kB	9d7744e15bb8e3d005079b18979c8544	PE32 executable (DLL) (console) Intel 80386, for MS Windows, 6 sections
2024-10-12 14:33	Dex.lua	420 kB	e37374a8aa47cf8ac6d56901436e199f	JavaScript source, ASCII text, with very long lines (467), with CRLF line terminators
2024-11-04 16:12	Infinite Yield.lua	480 kB	a8c69257b0db73b3e531d62cd872bc8b	JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators
2024-10-12 14:34	Sine Wave.lua	1.1 kB	0bbb2aebfadc119226992045dcaa30b4	JavaScript source, ASCII text, with CRLF line terminators
2024-10-12 14:34	Spinning Donut.lua	1.8 kB	967403f0ecb43917e841a085851b732d	JavaScript source, ASCII text, with CRLF line terminators
2024-10-12 14:34	UNCCheckEnv.lua	29 kB	b76726d10354343d9af5c268e40b47c4	JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators
2024-11-04 15:56	Xeno.dll	962 kB	770eaddc9dba7479fb3e13ec371d2e41	PE32+ executable (DLL) (console) x86-64, for MS Windows, 6 sections
2024-11-04 15:55	Xeno.exe	143 kB	4a2e503ab9a31880995e60ece8784b13	PE32+ executable (GUI) x86-64, for MS Windows, 6 sections
2024-11-04 15:55	XenoUI.deps.json	2.6 kB	5a6f595e20ec811e25737019810cac58	JSON text data
2024-11-04 15:55	XenoUI.dll	75 kB	fda7f3e9fa5d932bcd7e2067c9e3d163	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows, 2 sections
2024-11-04 15:55	XenoUI.runtimeconfig.json	458 B	07b9a30265ca4e69c7016a1b6e3ffc27	JSON text data
2024-09-07 14:16	xxhash.dll	48 kB	0e9fecea29b2b3d5ef064e112436e9d1	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections
2024-09-07 14:16	zstd.dll	654 kB	567198a0119e3e2ec94208f1cda7aa28	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	Detect pe file that no import table

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	GET github.com/rlz-ve/x/releases/download/1.0.9/Xeno-v1.0.9-x64.zip	140.82.121.3	302 Found	0 B
URL github.com/rlz-ve/x/releases/download/1.0.9/Xeno-v1.0.9-x64.zip IP / ASN 140.82.121.3 #36459 GITHUB Requested byN/A Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-03 Times Seen5619361 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerSectigo Limited Subjectgithub.com FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0 ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT HTTP Headers GET /rlz-ve/x/releases/download/1.0.9/Xeno-v1.0.9-x64.zip HTTP/1.1 Host: github.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found server: GitHub.com date: Mon, 04 Nov 2024 21:29:52 GMT content-type: text/html; charset=utf-8 vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/883345985/5aac4921-808e-460b-aaf7-933dcc90ca5f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241104%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241104T212952Z&X-Amz-Expires=300&X-Amz-Signature=b1f42200eb94d76a31c690d4885cf1b7fc32cbaa5eaa35df0c69b5d2ed8e2351&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DXeno-v1.0.9-x64.zip&response-content-type=application%2Foctet-stream cache-control: no-cache strict-transport-security: max-age=31536000; includeSubdomains; preload x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 0 referrer-policy: no-referrer-when-downgrade content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com .rel.tunnels.api.visualstudio.com wss://.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com .actions.githubusercontent.com wss://.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/ content-length: 0 x-github-request-id: 27B9:1D7109:35B3B1A:367A86E:67293CD4 X-Firefox-Spdy: h2

	GET objects.githubusercontent.com/github-production-release-asset-2e65be/883345985/5aac4921-808e-460b-aaf7-933dcc90ca5f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241104%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241104T212952Z&X-Amz-Expires=300&X-Amz-Signature=b1f42200eb94d76a31c690d4885cf1b7fc32cbaa5eaa35df0c69b5d2ed8e2351&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DXeno-v1.0.9-x64.zip&response-content-type=application%2Foctet-stream	185.199.108.133	200 OK	4.6 MB
URL objects.githubusercontent.com/github-production-release-asset-2e65be/883345985/5aac4921-808e-460b-aaf7-933dcc90ca5f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241104%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241104T212952Z&X-Amz-Expires=300&X-Amz-Signature=b1f42200eb94d76a31c690d4885cf1b7fc32cbaa5eaa35df0c69b5d2ed8e2351&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DXeno-v1.0.9-x64.zip&response-content-type=application%2Foctet-stream IP / ASN 185.199.108.133 #54113 FASTLY Requested byN/A Resource Info File typeZip archive data, at least v2.0 to extract, compression method=store First Seen2024-11-04 Last Seen2025-01-04 Times Seen16 Size4.6 MB (4626851 bytes) MD5d5a09d7b68fb0697fdfc609660c0d507 SHA159ee0ff14f24c4495aa40ccd0086d23ccea7a7fa SHA256bfc0c1c083308a3d5f06d3e21dc76ec1e6702c7f4b27bf2ad3e42b296c8ed72d Certificate Info IssuerDigiCert Inc Subject.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT HTTP Headers GET /github-production-release-asset-2e65be/883345985/5aac4921-808e-460b-aaf7-933dcc90ca5f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241104%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241104T212952Z&X-Amz-Expires=300&X-Amz-Signature=b1f42200eb94d76a31c690d4885cf1b7fc32cbaa5eaa35df0c69b5d2ed8e2351&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DXeno-v1.0.9-x64.zip&response-content-type=application%2Foctet-stream HTTP/1.1 Host: objects.githubusercontent.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: application/octet-stream last-modified: Mon, 04 Nov 2024 21:23:28 GMT etag: "0x8DCFD16ECD5B51D" server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 0da6dc65-301e-0043-5bff-2e0709000000 x-ms-version: 2024-08-04 x-ms-creation-time: Mon, 04 Nov 2024 21:23:28 GMT x-ms-blob-content-md5: 1aCde2j7Bpf9/GCWYMDVBw== x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob content-disposition: attachment; filename=Xeno-v1.0.9-x64.zip x-ms-server-encrypted: true via: 1.1 varnish, 1.1 varnish fastly-restarts: 1 accept-ranges: bytes date: Mon, 04 Nov 2024 21:29:57 GMT age: 5 x-served-by: cache-iad-kcgs7200058-IAD, cache-hel1410023-HEL x-cache: HIT, HIT x-cache-hits: 40, 1 x-timer: S1730755797.991723,VS0,VE1 content-length: 4626851 X-Firefox-Spdy: h2

Detections

Host Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Mnemonic Secure DNS

Quad9 DNS

ThreatFox

File detected

Detections

JavaScript (0)

HTTP Transactions (2)

HTTP Headers

HTTP Headers