47d0ca2c740a354997f38d028550a73bc79c72f9967cf2603a6a3bce0f2f3460

Resubmissions

30/04/2026, 15:33

30/04/2026, 15:25

user interaction
yes
max time kernel
149s
max time network
163s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/04/2026, 15:25

Target
Xeno-v1.3.35.exe
Size 156.0MB
Sample260430-stps7abs2m
SHA256 47d0ca2c740a354997f38d028550a73bc79c72f9967cf2603a6a3bce0f2f3460
MD5 10fd9fdd1375cecd6efc521efae5a383
SHA1 d75b22d3b6656dac3b061a30c39f5b0fab817761
SHA512 fb3c9c0fdd280ae226f032da594ef98492e702a49ce196b4d40bc3e3dbd3f3b1be71737984114d9628432c60128e1bf1d2a747d25c6041ad28125a253fd500da
SSDEEP 1572864:bVU4t/Ct6JMgabao+nh+bw4FlWMZBZHuoM2t52kOUeEbaVO7GJbdHDexdypGT+LY:VYUJkH0sEQ
TLSH
T113788B03E29A00E9E05DD1B587578237EE72B8864738A6DF2754175A2F77FE02B39B10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3552 wrote to memory of 4452	3552	Xeno-v1.3.35.exe	78
PID 3552 wrote to memory of 4452	3552	Xeno-v1.3.35.exe	78

C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35.exe
"C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3552
- C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35.exe
  "C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Xeno" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1652 --field-trial-handle=1656,i,6062832627078187005,18017037720808217090,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
  2⤵
  PID:4452

memory/3552-2-0x000002822E3D0000-0x000002822E4EE000-memory.dmp

Download