47d0ca2c740a354997f38d028550a73bc79c72f9967cf2603a6a3bce0f2f3460

Resubmissions

30/04/2026, 15:33

30/04/2026, 15:25

max time kernel
149s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/04/2026, 15:25

Target
Xeno-v1.3.35.exe
Size 156.0MB
Sample260430-stps7abs2m
SHA256 47d0ca2c740a354997f38d028550a73bc79c72f9967cf2603a6a3bce0f2f3460
MD5 10fd9fdd1375cecd6efc521efae5a383
SHA1 d75b22d3b6656dac3b061a30c39f5b0fab817761
SHA512 fb3c9c0fdd280ae226f032da594ef98492e702a49ce196b4d40bc3e3dbd3f3b1be71737984114d9628432c60128e1bf1d2a747d25c6041ad28125a253fd500da
SSDEEP 1572864:bVU4t/Ct6JMgabao+nh+bw4FlWMZBZHuoM2t52kOUeEbaVO7GJbdHDexdypGT+LY:VYUJkH0sEQ
TLSH
T113788B03E29A00E9E05DD1B587578237EE72B8864738A6DF2754175A2F77FE02B39B10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2380 wrote to memory of 3768	2380	Xeno-v1.3.35.exe	83
PID 2380 wrote to memory of 3768	2380	Xeno-v1.3.35.exe	83

C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35.exe
"C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2380
- C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35.exe
  "C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Xeno" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1664 --field-trial-handle=1568,i,5742273191092433040,11141122565610934532,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
  2⤵
  PID:3768