Skip to content

Adding libcares-2.dll #164

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
wietze merged 2 commits into from
Feb 26, 2026
Merged

Adding libcares-2.dll #164

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a4cd7fb
Adding libcares-2.dll
wietze Feb 26, 2026
5758d0e
Fixing vendor
wietze Feb 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions yml/3rd_party/c-ares/libcares-2.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
---
Name: libcares-2.dll
Author: Wietze Beukema
Created: 2026-02-26
Vendor: c-ares
ExpectedLocations:
- '%LOCALAPPDATA%\GitKraken\app-%VERSION%'
VulnerableExecutables:
- Path: 'ahost.exe'
Type: Sideloading
SHA256:
- a52e245dd7937094711b10c479274a2cccea2dfb89f7d4c9f22879214718f92b
Resources:
- https://www.trellix.com/en-us/blogs/research/hiding-in-plain-sight-multi-actor-ahost-exe-attacks/
- https://www.virustotal.com/gui/file/7c41ac7b5bf15e34d50d6abbe28254e94e6c21e0ccab9fa68aca05049a515758