General

  • Target

    forlorn exec.rar

  • Size

    12.9MB

  • MD5

    8efefc2dc8922b8d9a9a2fa7e80f4127

  • SHA1

    e94afc0cc712dc9ce884794db669de95e182b38d

  • SHA256

    f3da105df43ac2bf23e2f05097c27af4a46f17d46655c1350ea7d94a00d83daa

  • SHA512

    42f2c7a9567b57f0403502e245e70d80fba0c12d6a9854be95026cf6f87ffc1e4c3e2e80ec89beb0df97877b23387c6a3ceb6b8b551e322e03304174e342e372

  • SSDEEP

    393216:bvutTDQL5GWokHIWlZ+3yCi758abymNnF9Sfi0twHEBkR9GAR7:b+TDYGIIo8Z760iky3PR7

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • forlorn exec.rar
    .rar
  • Forlorn Executor.deps.json
  • Forlorn Executor.dll
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Forlorn Executor.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • Forlorn Executor.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.fingerprint
  • Forlorn Executor.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/manifest.json
  • Forlorn Executor.exe.WebView2/EBWebView/AutoLaunchProtocolsComponent/1.0.0.8/protocols.json
  • Forlorn Executor.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-674252C7-7290.pma
  • Forlorn Executor.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/crl-set
  • Forlorn Executor.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.fingerprint
  • Forlorn Executor.exe.WebView2/EBWebView/CertificateRevocation/6498.2023.8.1/manifest.json
  • Forlorn Executor.exe.WebView2/EBWebView/Crashpad/settings.dat
  • Forlorn Executor.exe.WebView2/EBWebView/Crashpad/throttle_store.dat
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001
    .gz
  • f_000001
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Code Cache/js/index
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Code Cache/wasm/index
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Collections/collectionsSQLite
  • Forlorn Executor.exe.WebView2/EBWebView/Default/DIPS
  • Forlorn Executor.exe.WebView2/EBWebView/Default/DashTrackerDatabase
  • Forlorn Executor.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_0
  • Forlorn Executor.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_1
  • Forlorn Executor.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_2
  • Forlorn Executor.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_3
  • Forlorn Executor.exe.WebView2/EBWebView/Default/DawnGraphiteCache/index
  • Forlorn Executor.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_0
  • Forlorn Executor.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_1
  • Forlorn Executor.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_2
  • Forlorn Executor.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_3
  • Forlorn Executor.exe.WebView2/EBWebView/Default/DawnWebGPUCache/index
  • Forlorn Executor.exe.WebView2/EBWebView/Default/EdgeEDrop/EdgeEDropSQLite.db
  • Forlorn Executor.exe.WebView2/EBWebView/Default/EdgeHubAppUsage/EdgeHubAppUsageSQLite.db
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Extension Rules/000003.log
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Extension Rules/LOG
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Extension Scripts/LOG
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Extension State/000003.log
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Extension State/CURRENT
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Extension State/LOG
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Extension State/LOG.old
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001
  • Forlorn Executor.exe.WebView2/EBWebView/Default/ExtensionActivityComp
  • Forlorn Executor.exe.WebView2/EBWebView/Default/ExtensionActivityEdge
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Favicons
  • Forlorn Executor.exe.WebView2/EBWebView/Default/GPUCache/data_0
  • Forlorn Executor.exe.WebView2/EBWebView/Default/GPUCache/data_1
  • Forlorn Executor.exe.WebView2/EBWebView/Default/GPUCache/data_2
  • Forlorn Executor.exe.WebView2/EBWebView/Default/GPUCache/data_3
  • Forlorn Executor.exe.WebView2/EBWebView/Default/GPUCache/index
  • Forlorn Executor.exe.WebView2/EBWebView/Default/History
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Login Data
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Network Action Predictor
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Network/Network Persistent State
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Network/Reporting and NEL
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Network/TransportSecurity
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Network/Trust Tokens
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Preferences
  • Forlorn Executor.exe.WebView2/EBWebView/Default/PreferredApps
  • Forlorn Executor.exe.WebView2/EBWebView/Default/README
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Safe Browsing Network/Safe Browsing Cookies
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Secure Preferences
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Session Storage/000003.log
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Session Storage/CURRENT
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Session Storage/LOG
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Session Storage/LOG.old
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Shared Dictionary/db
  • Forlorn Executor.exe.WebView2/EBWebView/Default/SharedStorage
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Top Sites
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Visited Links
  • Forlorn Executor.exe.WebView2/EBWebView/Default/Web Data
  • Forlorn Executor.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db
  • Forlorn Executor.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log
  • Forlorn Executor.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT
  • Forlorn Executor.exe.WebView2/EBWebView/Default/shared_proto_db/LOG
  • Forlorn Executor.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old
  • Forlorn Executor.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001
  • Forlorn Executor.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log
  • Forlorn Executor.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT
  • Forlorn Executor.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG
  • Forlorn Executor.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old
  • Forlorn Executor.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001
  • Forlorn Executor.exe.WebView2/EBWebView/GrShaderCache/data_0
  • Forlorn Executor.exe.WebView2/EBWebView/GrShaderCache/data_1
  • Forlorn Executor.exe.WebView2/EBWebView/GrShaderCache/data_2
  • Forlorn Executor.exe.WebView2/EBWebView/GrShaderCache/data_3
  • Forlorn Executor.exe.WebView2/EBWebView/GrShaderCache/f_000001
  • Forlorn Executor.exe.WebView2/EBWebView/GrShaderCache/f_000002
  • Forlorn Executor.exe.WebView2/EBWebView/GrShaderCache/f_000003
  • Forlorn Executor.exe.WebView2/EBWebView/GrShaderCache/f_000004
  • Forlorn Executor.exe.WebView2/EBWebView/GrShaderCache/f_000005
  • Forlorn Executor.exe.WebView2/EBWebView/GrShaderCache/f_000006
  • Forlorn Executor.exe.WebView2/EBWebView/GrShaderCache/f_000007
  • Forlorn Executor.exe.WebView2/EBWebView/GrShaderCache/f_000008
  • Forlorn Executor.exe.WebView2/EBWebView/GrShaderCache/index
  • Forlorn Executor.exe.WebView2/EBWebView/GraphiteDawnCache/data_0
  • Forlorn Executor.exe.WebView2/EBWebView/GraphiteDawnCache/data_1
  • Forlorn Executor.exe.WebView2/EBWebView/GraphiteDawnCache/data_2
  • Forlorn Executor.exe.WebView2/EBWebView/GraphiteDawnCache/data_3
  • Forlorn Executor.exe.WebView2/EBWebView/GraphiteDawnCache/index
  • Forlorn Executor.exe.WebView2/EBWebView/Last Version
  • Forlorn Executor.exe.WebView2/EBWebView/Local State
  • Forlorn Executor.exe.WebView2/EBWebView/OriginTrials/0.0.1.7/manifest.fingerprint
  • Forlorn Executor.exe.WebView2/EBWebView/OriginTrials/0.0.1.7/manifest.json
  • Forlorn Executor.exe.WebView2/EBWebView/PKIMetadata/14.0.0.1/crs.pb
  • Forlorn Executor.exe.WebView2/EBWebView/PKIMetadata/14.0.0.1/ct_config.pb
  • Forlorn Executor.exe.WebView2/EBWebView/PKIMetadata/14.0.0.1/kp_pinslist.pb
  • Forlorn Executor.exe.WebView2/EBWebView/PKIMetadata/14.0.0.1/manifest.fingerprint
  • Forlorn Executor.exe.WebView2/EBWebView/PKIMetadata/14.0.0.1/manifest.json
  • Forlorn Executor.exe.WebView2/EBWebView/ShaderCache/data_0
  • Forlorn Executor.exe.WebView2/EBWebView/ShaderCache/data_1
  • Forlorn Executor.exe.WebView2/EBWebView/ShaderCache/data_2
  • Forlorn Executor.exe.WebView2/EBWebView/ShaderCache/data_3
  • Forlorn Executor.exe.WebView2/EBWebView/ShaderCache/index
  • Forlorn Executor.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings
  • Forlorn Executor.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-0
  • Forlorn Executor.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
    .dll windows:6 windows x64 arch:x64

    f51f0d794c7fcc93503306a9cd9ba55d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Forlorn Executor.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/manifest.fingerprint
  • Forlorn Executor.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/manifest.json
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Indexed Rules/36/10.34.0.57/LICENSE
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Indexed Rules/36/10.34.0.57/Ruleset Data
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Filtering Rules
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Filtering Rules-AA
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/LICENSE
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Part-DE
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Part-ES
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Part-FR
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Part-IT
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Part-NL
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Part-RU
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/Part-ZH
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/adblock_snippet.js
    .js
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/manifest.fingerprint
  • Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/manifest.json
  • Forlorn Executor.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/LICENSE
  • Forlorn Executor.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/_metadata/verified_contents.json
  • Forlorn Executor.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/keys.json
  • Forlorn Executor.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/manifest.fingerprint
  • Forlorn Executor.exe.WebView2/EBWebView/TrustTokenKeyCommitments/2024.10.11.1/manifest.json
  • Forlorn Executor.exe.WebView2/EBWebView/Variations
  • Forlorn Executor.exe.WebView2/EBWebView/component_crx_cache/alpjnmnfbgfkmmpcfpejmmoebdndedno_1.4AF7EE72E9C8E11DAB4124EB233B3B5771D0EE966ECE3055FB251667528D3D0D
    .zip
  • crs.pb
  • ct_config.pb
  • kp_pinslist.pb
  • manifest.json
  • Forlorn Executor.exe.WebView2/EBWebView/component_crx_cache/eeobbhfgfagbclfofmgbdfoicabjdbkn_1.8BFD50D350D47445B57BB1D61BBDE41CEDA7AC43DC81FCE95BF1AC646D97D2A0
    .zip
  • manifest.json
  • protocols.json
  • Forlorn Executor.exe.WebView2/EBWebView/component_crx_cache/fgbafbciocncjfbbonhocjaohoknlaco_1.D551321488BC5B99465F9047C5EFED82B96666074E4C836AE7B5B91D1DEEE2E5
    .zip
  • LICENSE
  • _metadata/verified_contents.json
  • keys.json
  • manifest.json
  • Forlorn Executor.exe.WebView2/EBWebView/component_crx_cache/fppmbhmldokgmleojlplaaodlkibgikh_1.A81D1959892AE4180554347DF1B97834ABBA2E1A5E6B9AEBA000ECEA26EABECC
    .zip
  • Microsoft.CognitiveServices.Speech.core.dll
    .dll windows:6 windows x64 arch:x64

    f51f0d794c7fcc93503306a9cd9ba55d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • manifest.json
  • Forlorn Executor.exe.WebView2/EBWebView/component_crx_cache/kpfehajjjbbcifeehjgfgnabifknmdad_1.00AF3F07B5ABB71F6D30337E1EEF62FA280F06EF19485C0CF6B72171F92CCC0A
    .zip
  • _metadata/verified_contents.json
  • hyph-af.hyb
  • hyph-as.hyb
  • hyph-be.hyb
  • hyph-bg.hyb
  • hyph-bn.hyb
  • hyph-cs.hyb
  • hyph-cu.hyb
  • hyph-cy.hyb
  • hyph-da.hyb
  • hyph-de-1901.hyb
  • hyph-de-1996.hyb
  • hyph-de-ch-1901.hyb
  • hyph-el.hyb
  • hyph-en-gb.hyb
  • hyph-en-us.hyb
  • hyph-es.hyb
  • hyph-et.hyb
  • hyph-eu.hyb
  • hyph-fr.hyb
  • hyph-ga.hyb
  • hyph-gl.hyb
  • hyph-gu.hyb
  • hyph-hi.hyb
  • hyph-hr.hyb
  • hyph-hu.hyb
  • hyph-hy.hyb
  • hyph-it.hyb
  • hyph-ka.hyb
  • hyph-kn.hyb
  • hyph-la.hyb
  • hyph-lt.hyb
  • hyph-lv.hyb
  • hyph-ml.hyb
  • hyph-mn-cyrl.hyb
  • hyph-mr.hyb
  • hyph-mul-ethi.hyb
  • hyph-nb.hyb
  • hyph-nl.hyb
  • hyph-nn.hyb
  • hyph-or.hyb
  • hyph-pa.hyb
  • hyph-pt.hyb
  • hyph-ru.hyb
  • hyph-sk.hyb
  • hyph-sl.hyb
  • hyph-sq.hyb
  • hyph-sv.hyb
  • hyph-ta.hyb
  • hyph-te.hyb
  • hyph-tk.hyb
  • hyph-uk.hyb
  • hyph-und-ethi.hyb
  • manifest.json
  • Forlorn Executor.exe.WebView2/EBWebView/component_crx_cache/ndikpojcjlepofdkaaldkinkjbeeebkl_1.69D0D51AD8D1AABAAE811B5BC6F72729BEEBE8AB40C8E6080C8255453F913377
    .zip
  • Filtering Rules
  • Filtering Rules-AA
  • LICENSE
  • Part-DE
  • Part-ES
  • Part-FR
  • Part-IT
  • Part-NL
  • Part-RU
  • Part-ZH
  • adblock_snippet.js
    .js
  • manifest.json
  • Forlorn Executor.exe.WebView2/EBWebView/component_crx_cache/oankkpibpaokgecfckkdkgaoafllipag_1.44C48B9ECD87ACDDD850F9AA5E1C9D48B7A398DEC13D376CD62D55DADBD464A5
    .zip
  • crl-set
  • manifest.json
  • Forlorn Executor.exe.WebView2/EBWebView/component_crx_cache/ohckeflnhegojcjlcpbfpciadgikcohk_1.95FD9D48E4FC245A3F3A99A3A16ECD1355050BA3F4AFC555F19A97C7F9B49677
    .zip
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/_metadata/verified_contents.json
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-af.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-as.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-be.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-bg.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-bn.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-cs.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-cu.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-cy.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-da.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-de-1901.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-de-1996.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-de-ch-1901.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-el.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-en-gb.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-en-us.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-es.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-et.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-eu.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-fr.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-ga.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-gl.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-gu.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-hi.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-hr.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-hu.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-hy.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-it.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-ka.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-kn.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-la.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-lt.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-lv.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-ml.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-mn-cyrl.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-mr.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-mul-ethi.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-nb.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-nl.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-nn.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-or.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-pa.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-pt.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-ru.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-sk.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-sl.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-sq.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-sv.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-ta.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-te.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-tk.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-uk.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/hyph-und-ethi.hyb
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/manifest.fingerprint
  • Forlorn Executor.exe.WebView2/EBWebView/hyphen-data/120.0.6050.0/manifest.json
  • Forlorn Executor.pdb
  • Forlorn Executor.runtimeconfig.json
  • Microsoft.Web.WebView2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Web.WebView2.Core.xml
    .xml
  • Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Web.WebView2.WinForms.xml
    .xml
  • Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Web.WebView2.Wpf.xml
    .xml
  • Monaco/index.html
    .html .js polyglot
  • Monaco/vs/base/worker/workerMain.js
    .js
  • Monaco/vs/basic-languages/bat/bat.js
  • Monaco/vs/basic-languages/coffee/coffee.js
  • Monaco/vs/basic-languages/cpp/cpp.js
  • Monaco/vs/basic-languages/csharp/csharp.js
  • Monaco/vs/basic-languages/csp/csp.js
  • Monaco/vs/basic-languages/css/css.js
  • Monaco/vs/basic-languages/dockerfile/dockerfile.js
  • Monaco/vs/basic-languages/fsharp/fsharp.js
  • Monaco/vs/basic-languages/go/go.js
  • Monaco/vs/basic-languages/handlebars/handlebars.js
    .js
  • Monaco/vs/basic-languages/html/html.js
    .js
  • Monaco/vs/basic-languages/ini/ini.js
  • Monaco/vs/basic-languages/java/java.js
  • Monaco/vs/basic-languages/less/less.js
  • Monaco/vs/basic-languages/lua/lua.js
  • Monaco/vs/basic-languages/markdown/markdown.js
    .js
  • Monaco/vs/basic-languages/msdax/msdax.js
  • Monaco/vs/basic-languages/mysql/mysql.js
  • Monaco/vs/basic-languages/objective-c/objective-c.js
  • Monaco/vs/basic-languages/pgsql/pgsql.js
  • Monaco/vs/basic-languages/php/php.js
  • Monaco/vs/basic-languages/postiats/postiats.js
  • Monaco/vs/basic-languages/powershell/powershell.js
  • Monaco/vs/basic-languages/pug/pug.js
  • Monaco/vs/basic-languages/python/python.js
  • Monaco/vs/basic-languages/r/r.js
  • Monaco/vs/basic-languages/razor/razor.js
    .js
  • Monaco/vs/basic-languages/redis/redis.js
  • Monaco/vs/basic-languages/redshift/redshift.js
  • Monaco/vs/basic-languages/ruby/ruby.js
  • Monaco/vs/basic-languages/rust/rust.js
  • Monaco/vs/basic-languages/sb/sb.js
  • Monaco/vs/basic-languages/scss/scss.js
  • Monaco/vs/basic-languages/solidity/solidity.js
  • Monaco/vs/basic-languages/sql/sql.js
  • Monaco/vs/basic-languages/st/st.js
  • Monaco/vs/basic-languages/swift/swift.js
  • Monaco/vs/basic-languages/vb/vb.js
  • Monaco/vs/basic-languages/xml/xml.js
  • Monaco/vs/basic-languages/yaml/yaml.js
  • Monaco/vs/editor/contrib/suggest/media/String_16x.svg
  • Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • Monaco/vs/editor/editor.main.css
  • Monaco/vs/editor/editor.main.js
    .js
  • Monaco/vs/editor/editor.main.nls.de.js
  • Monaco/vs/editor/editor.main.nls.es.js
  • Monaco/vs/editor/editor.main.nls.fr.js
  • Monaco/vs/editor/editor.main.nls.it.js
  • Monaco/vs/editor/editor.main.nls.ja.js
  • Monaco/vs/editor/editor.main.nls.js
  • Monaco/vs/editor/editor.main.nls.ko.js
  • Monaco/vs/editor/editor.main.nls.ru.js
  • Monaco/vs/editor/editor.main.nls.zh-cn.js
  • Monaco/vs/editor/editor.main.nls.zh-tw.js
  • Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • Monaco/vs/language/css/cssMode.js
    .js
  • Monaco/vs/language/css/cssWorker.js
    .js
  • Monaco/vs/language/html/htmlMode.js
    .js
  • Monaco/vs/language/html/htmlWorker.js
    .js
  • Monaco/vs/language/json/jsonMode.js
    .js
  • Monaco/vs/language/json/jsonWorker.js
    .js
  • Monaco/vs/language/typescript/lib/typescriptServices.js
    .js
  • Monaco/vs/language/typescript/tsMode.js
    .js
  • Monaco/vs/language/typescript/tsWorker.js
    .js
  • Monaco/vs/loader.js
    .js
  • Scripts/Dex.lua
    .js
  • Scripts/Infinite Yield.lua
    .js
  • Scripts/UNCCheckEnv.lua
    .js
  • Scripts/aimbot.lua
    .js
  • Scripts/controlbot.lua
  • Scripts/hack_menu.lua
  • bin/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    3a1f9d973bff43051a3daf411f707362


    Headers

    Imports

    Exports

    Sections

  • bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • bin/roxcore.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • roxcore.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • runtimes/win-arm64/native/WebView2Loader.dll
  • runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:10 windows x64 arch:x64

    f6946d311bccc86e2042a388e375de41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:10 windows x86 arch:x86

    72229ff546c74d09d9030ca49ce61b31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workspace/.tests/appendfile.txt
  • workspace/.tests/getcustomasset.txt
  • workspace/.tests/isfile.txt
  • workspace/.tests/listfiles/test_1.txt
  • workspace/.tests/listfiles/test_2.txt
  • workspace/.tests/loadfile.txt
  • workspace/.tests/readfile.txt
  • workspace/.tests/writefile
  • workspace/.tests/writefile.txt
  • workspace/Chat Bypasser/1430993116.txt
  • workspace/IY_FE.iy
  • workspace/Scripts/Dex.lua
    .js
  • workspace/Scripts/Infinite Yield.lua
    .js
  • workspace/Scripts/UNCCheckEnv.lua
    .js
  • workspace/Scripts/aimbot.lua
    .js
  • workspace/Scripts/controlbot.lua
  • workspace/Scripts/hack_menu.lua
  • workspace/lea.mp3