a14fea02ea00fc1a648258012bdf78a88e57b5bfa6f37cca7dd9397e5e8a00a0

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/05/2026, 18:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
seelen-ui.exe
Size 49.4MB
Sample260503-wze3qaft21
SHA256 a14fea02ea00fc1a648258012bdf78a88e57b5bfa6f37cca7dd9397e5e8a00a0
MD5 0cd0cbff4b740875e2967654e0590811
SHA1 ea1a5f1f968285719cef7ed645c544273d0a93b1
SHA512 9eeedf9eedccc6040715d36ba7bd294ec5d6380a11360d542b527e95f20be9e6c191a5071ef77479488af24a4591cdc90f0e620e18c1992fb9436daed7974a62
SSDEEP 393216:6UGLHK/7HPnmVKdFt9wirzsKHYRWqMvZTqiFfQ9Y+/LA7A0sYQMQOKoYchq:OLH47HPmqzoKh5BNQxjA/p1Ycw
TLSH
T101B79D017EAA6D5AD288CC70C34B8BA30E1130EF1E76F67F85C646252F7D6B85F19219
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence trojan

Malware Config

Signatures

Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

Run Powershell and hide display window.

execution

PowerShell

T1059.001

pid	Process
1816	powershell.exe
2764	powershell.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000\Control Panel\International\Geo\Nation	seelen-ui.exe

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	seelen-ui.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	seelen-ui.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in System32 directory 57 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\symbols\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\seelen_ui.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\exe\seelen_ui.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\exe\seelen_ui.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\symbols\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\symbols\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\symbols\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\ntdll.pdb	seelen-ui.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-de-ch-1901.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-la.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-ml.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_298335697\crs.pb	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\dll\win32u.pdb	seelen-ui.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-da.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-sq.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-und-ethi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_298335697\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_298335697\manifest.fingerprint	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\symbols\dll\user32.pdb	seelen-ui.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-el.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-pt.hyb	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\symbols\dll\win32u.pdb	seelen-ui.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-af.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-gl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\_metadata\verified_contents.json	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\user32.pdb	seelen-ui.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-es.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-sl.hyb	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\symbols\dll\ntdll.pdb	seelen-ui.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-uk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-hy.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-or.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-ta.hyb	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\ntdll.pdb	seelen-ui.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-lv.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-mr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-as.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-te.hyb	msedgewebview2.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\win32u.pdb	seelen-ui.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-be.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-it.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-nb.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-nl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-de-1901.hyb	msedgewebview2.exe

Drops file in Windows directory 18 IoCs

description	ioc	Process
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\symbols\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\symbols\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\symbols\dll\ntdll.pdb	seelen-ui.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies Control Panel 1 IoCs

defense_evasion

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000\Control Panel\Colors	seelen-ui.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134223061993838237"	msedgewebview2.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2023547815-1162023398-1465618254-1000\{6C5F27C9-1A0B-426B-93C5-FB0093CB7FE1}	seelen-ui.exe

Suspicious behavior: EnumeratesProcesses 9 IoCs

pid	Process
1816	powershell.exe
1816	powershell.exe
1012	slu-service.exe
1012	slu-service.exe
2764	powershell.exe
2764	powershell.exe
2764	powershell.exe
2980	msedgewebview2.exe
2980	msedgewebview2.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
456	seelen-ui.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4596	msedgewebview2.exe
3260	msedgewebview2.exe
3260	msedgewebview2.exe
3260	msedgewebview2.exe
3260	msedgewebview2.exe
3260	msedgewebview2.exe
3260	msedgewebview2.exe
3260	msedgewebview2.exe
3260	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	1816	powershell.exe
Token: SeTcbPrivilege	1012	slu-service.exe
Token: SeDebugPrivilege	2764	powershell.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1644	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
3260	msedgewebview2.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
3260	msedgewebview2.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
456	seelen-ui.exe
456	seelen-ui.exe
3260	msedgewebview2.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
3260	msedgewebview2.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe
456	seelen-ui.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1012	slu-service.exe

Suspicious use of WriteProcessMemory 53 IoCs

description	pid	Process	procid_target
PID 1644 wrote to memory of 1816	1644	seelen-ui.exe	84
PID 1816 wrote to memory of 1012	1816	powershell.exe	86
PID 1644 wrote to memory of 4596	1644	seelen-ui.exe	88
PID 4596 wrote to memory of 1612	4596	msedgewebview2.exe	89
PID 4596 wrote to memory of 4884	4596	msedgewebview2.exe	91
PID 4596 wrote to memory of 4884	4596	msedgewebview2.exe	91
PID 4596 wrote to memory of 4884	4596	msedgewebview2.exe	91
PID 4596 wrote to memory of 3440	4596	msedgewebview2.exe	92
PID 4596 wrote to memory of 3648	4596	msedgewebview2.exe	93
PID 4596 wrote to memory of 3648	4596	msedgewebview2.exe	93
PID 4596 wrote to memory of 2596	4596	msedgewebview2.exe	95
PID 4596 wrote to memory of 2596	4596	msedgewebview2.exe	95
PID 4596 wrote to memory of 2596	4596	msedgewebview2.exe	95
PID 1012 wrote to memory of 4416	1012	slu-service.exe	96
PID 2652 wrote to memory of 456	2652	explorer.exe	98
PID 456 wrote to memory of 3260	456	seelen-ui.exe	101
PID 3260 wrote to memory of 3264	3260	msedgewebview2.exe	102
PID 3260 wrote to memory of 4212	3260	msedgewebview2.exe	103
PID 3260 wrote to memory of 4212	3260	msedgewebview2.exe	103
PID 3260 wrote to memory of 4212	3260	msedgewebview2.exe	103
PID 3260 wrote to memory of 4652	3260	msedgewebview2.exe	104
PID 3260 wrote to memory of 432	3260	msedgewebview2.exe	105
PID 3260 wrote to memory of 432	3260	msedgewebview2.exe	105
PID 3260 wrote to memory of 3488	3260	msedgewebview2.exe	106
PID 3260 wrote to memory of 3488	3260	msedgewebview2.exe	106
PID 3260 wrote to memory of 3488	3260	msedgewebview2.exe	106
PID 3260 wrote to memory of 4180	3260	msedgewebview2.exe	109
PID 3260 wrote to memory of 4180	3260	msedgewebview2.exe	109
PID 3260 wrote to memory of 4180	3260	msedgewebview2.exe	109
PID 3260 wrote to memory of 1684	3260	msedgewebview2.exe	111
PID 3260 wrote to memory of 1684	3260	msedgewebview2.exe	111
PID 3260 wrote to memory of 1684	3260	msedgewebview2.exe	111
PID 3260 wrote to memory of 1348	3260	msedgewebview2.exe	112
PID 3260 wrote to memory of 1348	3260	msedgewebview2.exe	112
PID 3260 wrote to memory of 1348	3260	msedgewebview2.exe	112
PID 3260 wrote to memory of 4924	3260	msedgewebview2.exe	117
PID 3260 wrote to memory of 4924	3260	msedgewebview2.exe	117
PID 3260 wrote to memory of 4924	3260	msedgewebview2.exe	117
PID 3260 wrote to memory of 2904	3260	msedgewebview2.exe	118
PID 3260 wrote to memory of 2904	3260	msedgewebview2.exe	118
PID 3260 wrote to memory of 2904	3260	msedgewebview2.exe	118
PID 3260 wrote to memory of 548	3260	msedgewebview2.exe	121
PID 3260 wrote to memory of 548	3260	msedgewebview2.exe	121
PID 3260 wrote to memory of 548	3260	msedgewebview2.exe	121
PID 3260 wrote to memory of 4788	3260	msedgewebview2.exe	122
PID 3260 wrote to memory of 4788	3260	msedgewebview2.exe	122
PID 3260 wrote to memory of 4788	3260	msedgewebview2.exe	122
PID 456 wrote to memory of 2764	456	seelen-ui.exe	142
PID 3260 wrote to memory of 3004	3260	msedgewebview2.exe	144
PID 3260 wrote to memory of 3004	3260	msedgewebview2.exe	144
PID 3260 wrote to memory of 2980	3260	msedgewebview2.exe	145
PID 3260 wrote to memory of 1880	3260	msedgewebview2.exe	146
PID 3260 wrote to memory of 1880	3260	msedgewebview2.exe	146

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\seelen-ui.exe
"C:\Users\Admin\AppData\Local\Temp\seelen-ui.exe"
1⤵
- Checks whether UAC is enabled
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1644
- C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Start-Process 'C:\Users\Admin\AppData\Local\Temp\slu-service.exe' -Verb runAs"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:1816
- - C:\Users\Admin\AppData\Local\Temp\slu-service.exe
    "C:\Users\Admin\AppData\Local\Temp\slu-service.exe"
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:1012
  - - C:\Windows\explorer.exe
      "explorer.exe" C:\Users\Admin\AppData\Local\Temp\seelen-ui.exe
      4⤵
      PID:4416
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --aggressive-cache-discard --disable-background-networking --disable-breakpad --disable-component-extensions-with-background-pages --disable-features=translate,msWebOOUI,msPdfOOUI,msSmartScreenProtection,RendererAppContainer,BackForwardCache,InterestCohort,SharedArrayBuffer,CalculateNativeWinOcclusion,OptimizationHints,AutofillServerCommunication --disable-site-isolation-trials --disable-sync --disk-cache-size=0 --media-cache-size=0 --no-first-run --no-pings --lang=en-US --mojo-named-platform-channel-pipe=1644.4200.17187628757255016688
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4596
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x11c,0x7ffe478cb078,0x7ffe478cb084,0x7ffe478cb090
    3⤵
    PID:1612
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-breakpad --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1728,i,16036110319668839103,3717384660044027133,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=1724 /prefetch:2
    3⤵
    PID:4884
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2040,i,16036110319668839103,3717384660044027133,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:3
    3⤵
    PID:3440
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2396,i,16036110319668839103,3717384660044027133,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:8
    3⤵
    PID:3648
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3656,i,16036110319668839103,3717384660044027133,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
    3⤵
    PID:2596

C:\Users\Admin\AppData\Local\Temp\slu-service.exe
C:\Users\Admin\AppData\Local\Temp\slu-service.exe
1⤵
PID:3872

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
1⤵
- Suspicious use of WriteProcessMemory
PID:2652
- C:\Users\Admin\AppData\Local\Temp\seelen-ui.exe
  "C:\Users\Admin\AppData\Local\Temp\seelen-ui.exe"
  2⤵
  - Checks computer location settings
  - Checks whether UAC is enabled
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - Modifies Control Panel
  - Modifies registry class
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:456
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --aggressive-cache-discard --disable-background-networking --disable-breakpad --disable-component-extensions-with-background-pages --disable-features=translate,msWebOOUI,msPdfOOUI,msSmartScreenProtection,RendererAppContainer,BackForwardCache,InterestCohort,SharedArrayBuffer,CalculateNativeWinOcclusion,OptimizationHints,AutofillServerCommunication --disable-site-isolation-trials --disable-sync --disk-cache-size=0 --media-cache-size=0 --no-first-run --no-pings --lang=en-US --mojo-named-platform-channel-pipe=456.2968.1631964794291192960
    3⤵
    - Drops file in Program Files directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:3260
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x17c,0x180,0x184,0x160,0x1b8,0x7ffe478cb078,0x7ffe478cb084,0x7ffe478cb090
      4⤵
      PID:3264
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-breakpad --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1772,i,12062055980453088088,16987072676565311789,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=1768 /prefetch:2
      4⤵
      PID:4212
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2076,i,12062055980453088088,16987072676565311789,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=2136 /prefetch:3
      4⤵
      PID:4652
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2332,i,12062055980453088088,16987072676565311789,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:8
      4⤵
      PID:432
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3532,i,12062055980453088088,16987072676565311789,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
      4⤵
      PID:3488
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=2384,i,12062055980453088088,16987072676565311789,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:1
      4⤵
      PID:4180
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3628,i,12062055980453088088,16987072676565311789,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=3400 /prefetch:1
      4⤵
      PID:1684
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4384,i,12062055980453088088,16987072676565311789,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
      4⤵
      PID:1348
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4752,i,12062055980453088088,16987072676565311789,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:1
      4⤵
      PID:4924
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4728,i,12062055980453088088,16987072676565311789,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:1
      4⤵
      PID:2904
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=5348,i,12062055980453088088,16987072676565311789,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:1
      4⤵
      PID:548
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=5668,i,12062055980453088088,16987072676565311789,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:1
      4⤵
      PID:4788
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=6116,i,12062055980453088088,16987072676565311789,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:8
      4⤵
      PID:3004
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --disable-breakpad --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=788,i,12062055980453088088,16987072676565311789,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2980
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5332,i,12062055980453088088,16987072676565311789,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:8
      4⤵
      PID:1880
- - C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Export-StartLayout -Path 'C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\start-layout.json'"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:2764

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x150 0x240
1⤵
PID:1344

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:5952

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

hyph-af.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-af.hyb
Size 70KB
SHA256 5487ee44a4cd706d0086522e90c59c76cdf2ac68ce506fd3eae6054b9220c0cf
MD5 ffa9db945f0f0c15b8bba75a6e064880
SHA1 49217a9d5bb7a868464403b4e3c82e80df53456c
SHA512 cc67b2dfbbb009dd3fdb999fe86410425455613c12dac755a3cded435cd25ca4363782d70f3b7bb7c0fdd63e2eb649ae6a4053d929f463b646b43d7dbfda79c0
SSDEEP 1536:dH4Yzf/r1T2bhKC+wQ/MJ4tpBMfWDMxFaye3yrGZ3vGV9YODhX3yKfhGt:dxLr1qFKpNpufWIqye3KgGVnDxe
TLSH
T1D56329C3C62BDF90CC6419F4594D0AA811D816C6E7C039BE9B6C54797A27CB82BC13EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-as.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3260_2083288638\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3260_298335697\manifest.json
Size 102B
SHA256 e741cdf9904ddfa667e409e6c84d20225efc506588802ca959e1c6b0926ddfd8
MD5 ee1ed8500e24dfe42b5be26a96d5fdfe
SHA1 f4b08becd340a875a34eb0dc3fff2024625643f6
SHA512 0b782a4871d0fde1c775237f9392f9ecf7355b886f50584a101a0764631ddf22a25d0d19a0041bd22d943d68529a86168e202c6276d0cc9c5751b580f4d2783e
TLSH
T1EDB01221EC10B4B31004036C086CC3D0632B2F072C4079280DE19F84E90D9EBE872529
MD5 SHA1 SHA512 TLSH

Submit Download

__PSScriptPolicyTest_4w0q4kst.tir.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_4w0q4kst.tir.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 7d5f2bb72e8515269e9972f7c16cd65f8ebbca8640873db2f89bbe1da3d4d613
MD5 c5f2354f7d00256ab3e659e31a2d9382
SHA1 5a4734d132baa0cfbfc9b7480e6cb580c72685a7
SHA512 30b89964b484a0daef73b2587cee97d74f0483d61e64dee5943de289581ef960d865d40259fe3dfc275dda23f92a30de10124cddd3bef20c4742b7d918cf27e3
TLSH
T1F8D01223F2014138C0602033040665490600C10BC00D400059288D2EFE880601B174D2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 64e1a8a107e5c6932439ddcc659f9c67a6859bdd9a3f4ea0c66c49abc137f299
MD5 78368c25d72b3fc0db9beca0b3e01551
SHA1 8e24892649bc8f9e7be4c51402d6afa6f8cdd7ee
SHA512 0ab0eb7199dae15ca7bec274ab0867bb310c9243d890c5e7e75b84840267cb3488fc9fc063eb727de78fd344fce90e6a3cdb1a248baec9331802c7af03bc3906
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 fb4a15c2ca400e1ab515e4e0cdb49c2953fe62a4e852ef287a37a0ba5b5342a6
MD5 0f54d4a9c9c19414467b5b242f09abdf
SHA1 f3a951912db847c71772b270df707c910deb7a81
SHA512 32d1e25035f1638a69879418ed85f8632aeeaf769c5731e6238f8881188cffd2123aea2e93306f25d60f9d391bac3ef7b2f713104d24656a47cdc7ce59e2deeb
TLSH
T139D01223F6014138C0602132040565490700C00BC10D410059288D3EFE880601B174D2
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 468456974fd86b33647942820dce7284879acfab9e9e6eca008e1fdcf9006fb5
MD5 d1f604157b0745a40453afb93a6caa42
SHA1 3d5d77429b03674ebb0ba34d925ba1b09310df5e
SHA512 0644ce93724a57dedd8aec208e5a038e323a1b9871d5046d58a87c60479626693e6c8f25b7c7f7b60fd35aac133d2e660ecbd8f8d579ad1fc6703ae117a485a0
SSDEEP 3:MsFl/ll+l:/FE
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 0ff81bfe8be0518d8f0d6ac60e1782d0c04745701c9ec549404fddf3e0604f8f
MD5 42f45fe60d4fc7b74fca481a35dfb6dc
SHA1 cc94dbd2fc84990d3ca849deedbe78d37331c735
SHA512 c8855091db9b73ca924a8d3c8c84edba9bc5cc4766816872561d7f2b0d09874636247db6f82815f3d8dfd7a2202e8d664f7b8668925af166cb3e4b01163a2bf9
SSDEEP 3:MsEllllkEthXllkl2zEklslMlZll:/M/xT02znEk
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Cache\Cache_Data\index
Size 256KB
SHA256 153b1ecaca0ed05e526571eeb6fb2be88d7e586935751b4803f1cf3eb57bab32
MD5 5bb1e97a33a8c222a0cb55d8593ce630
SHA1 5bfcd2bda1c4e7da1d3ffb6c853a46e794c2084f
SHA512 244dc9ec0365591c1b2e60692f97db5784ca7065b90cd76e6793e6859cae41046014d6924ad72fde3215eaac6398c6d71a97393aae8bdffbe91381eb8f2752d4
SSDEEP 3:LstlNllkll/lXh:LsX3lEtX
MD5 SHA1 SHA512 SSDEEP

Submit Download

5024420bc0cfc7a7_0

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Code Cache\js\5024420bc0cfc7a7_0
Size 237B
SHA256 1d21def23a02f7f191ada3a6a5ce2c223b58848f5c9e32b40f2211ccf0fd0216
MD5 0c55a555ec3331cb07c9e53761cf5bdd
SHA1 d7617911cac4f95706c7e50dea4120a8fc0fc752
SHA512 3d7eddf3b09ab26fef32f1ee9496172edbd0c229b396ac828624ef2beb9c064fc34726f0dcf70f600ee087bf6ae6ada27e0d122a39729b0b3a3ab80764a64228
TLSH
T177D0A75FC826A295C09687B2CE731E48CEF794A025A8015425559C9766C86750ABBB18
MD5 SHA1 SHA512 TLSH

Submit Download

be67a3ba943d7f13_0

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Code Cache\js\be67a3ba943d7f13_0
Size 32KB
SHA256 c399862a9054523a0c5f907002271cfd53035861324132609d5c4e7aff12de3f
MD5 adf24c77a565574dad35a000fbdd1a26
SHA1 650f3f3ef92a42478b36bb931f566ee6e90e96e3
SHA512 9d616717e150aac8448a4d6cae3b9813ccbf95ca2d84b75f04f71c3c5d0f64070579261d8952c0976ff8b238d82a3403234d3406ec7d1d32854ddcaca4738081
SSDEEP 384:+3+3Wpq+rOdsxtMeh1HON252PHwzFwrRocyUaN3JIoXxLo1wqpvB6S:Yx+6nQPH6GaN3qoBIe
TLSH
T1E1E2D9015B41DBD6CA7F16F26250891B7B3D4A9D7F83D3231774A33A6C623DD8948E0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 496674ee4838c511b77dcc0b66998089d93ccf7f92262a314119751a0422d3f4
MD5 62a13eb4a27f07c31f7e0da8e747b8a8
SHA1 4adadf872d8469ba0136fc38fe1404361135621b
SHA512 676db301ab9c83cd4b773da0b652fb14c35012831f9c82fcd85504c7a11031b05305fe7da31655f8e1ab3e01aba1171551882cf4ce660a5e105bb7cbbee45d24
TLSH
T147B0118A38000002C2080332B0E22088BAB00CB8220E0B0A30F832A8C0222882E80A80
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index
Size 48B
SHA256 fd608cd26f4ce8b5afae209474df2cbf7a4742b2ba34151f1bf8850c9b6621bf
MD5 fcad80b9d54727c18519fa8127e4b67d
SHA1 740a8dede2cc8d8c957e91ef8e2eb96cfb506c4d
SHA512 77df6f1868835c7432a788aee495d441d4ce71504f9551265d87588af93ca6417e95ae333b130039bb4354aa473c772c176b720359413da2f721b09b10442fe5
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Extension State\LOG
Size 293B
SHA256 d60ca0d757d26541cf8c631b07b4e7fc4d5b40c0539df8f309093a6c8b71f8d7
MD5 ea1e71b79f46b66f88ca77729c6a41f8
SHA1 1a44da71f3ddabf832f85cec1bade6342bc578cc
SHA512 d754ec3fd7ffd8b439a2478938547a1365d13cb795b97da2aa8a9f6f86bdeaf3614b1b60c2d3e954bd665c4956ae79ef53bf501293afe739a1347f97df78cebf
TLSH
T120E0C281A4ACE57F045C8CFF96BA174ACB913404BA8937890FE9D9043887948A646786
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Extension State\LOG.old
Size 334B
SHA256 103d072b25d3cb69e36e07021ffb403ecbe210c647cf90487301f0ae0727a766
MD5 a7969caadac11ac8f180eabaf90b52fc
SHA1 f242a5e7793772f4f20f4ac9c8f961e8be5a4367
SHA512 97d8a5adb33d6bef664daa73542b9e2df645e5696b2a4b9693cc2f1d4d300044af42e80faa93f4180f842a6726fd0fc43f17a9ad3dbf49e8ebd02907f1ef7359
TLSH
T10BE0268438DCE12FA48C68BFA3FD3B05C3D53C0EB6883AC5478AC4402802D00629D360
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Favicons
Size 20KB
SHA256 46b5ecada4edb2585f87953f7847aefc938be2404b9d9455c772b97295b7b1cb
MD5 babd43551f1b29eb82e221460676126a
SHA1 e9bff307613a14b35830893bdb6d1ecc931b425d
SHA512 5ab681c170dbd1d374bd66edd02cbe21272819ef7389ad1e886bcba112deb91eb68fa930747986da5ca794881939570013e38edd9f8e6f718f7d202e74a82f41
SSDEEP 24:LLipxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBmI:UBmw6fU1zBmI
TLSH
T1C292EE075E383407DBA10E7D366B18768E3FE26C5FA29C94347410618CF9482D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\History
Size 184KB
SHA256 7ac0739f534f89ae63c46cd41f0cffaf0335fe348933e3e3d660044351f2a746
MD5 c77e3d0b59e286bc3b50eff7cb8f464c
SHA1 b260bf6f86fb9aff5b2396bfb49dea658a6f05e5
SHA512 e9d95b19019dda281d5cdc16315ae5368b3bab7786955354de93dabe5885c958c556a09e4b57a707244e0052cbabb00029619deba1810677bf9ea06e7287e8fb
SSDEEP 96:xhBttejzH+bF+UIYysX0fxQp97fEHt/DfLjLqL/hbgI4VgNr2jWRk/E0:xhBqH+bF+UI3iWGVfWN3qL/8VgZQW3
TLSH
T1AA04EC1E5F743612CDBD513668E745B3597CF03F8B636AC62CA114B1CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Local Storage\leveldb\LOG.old
Size 346B
SHA256 a6db8b1a30f5a408b3db878ac277b9f876a7ec36f094da823e8d02fe66c73d6d
MD5 17b88d0b87b60da2c04df19fef82e8cf
SHA1 99ec6221d8d6def7d31f718c12670578738400f8
SHA512 c51ebd712e7de1a15fc5780eec20ef070f18e935ad85685c0fcd5f7a8080c5c0aa872a03c308a3a2b8f6b7f629bfd1d5d9d7ec4a6cae1b632f089f07efa40d0c
TLSH
T12BE020D0349DA26F21C8146FA3FD3709C3F03408AB8E2FC10F44D9417C4640462D97D2
MD5 SHA1 SHA512 TLSH

Submit Download

Network Action Predictor

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Network Action Predictor
Size 4KB
SHA256 8c471cab38a1696289186d01b06ff6af2a888852dc18d6fb8d2a0e54898104ed
MD5 d25d5e1dc1d93430e64ee17e48ce442e
SHA1 d5c7ca9a57e6cc68927a249fe8e601d52680ac7a
SHA512 f4cff7510b4ad81090e0b1842652f8eb7995f7aefd0ce651151bc24ca3a4305d34ecae41cf193d9b846e8f6359ccf545e5d05e63e6e766fa9761ccebce620f6c
TLSH
T154819284F7C02420DA306EF7A5024BB85E62CA82A5124F93487002D0FCA78ECDC75AAA
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ea6e51b8-f22a-4bd2-9e18-35c190549148.tmp

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Network\ea6e51b8-f22a-4bd2-9e18-35c190549148.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Preferences
Size 6KB
SHA256 77f0bdaa70cbbe4acc7febee514c5cba11913263443878cadb9b41b98040831a
MD5 f7efaad68b80caccf878e64f393f7019
SHA1 e7a526cfa54c7713a323838e0e609e2e442560c7
SHA512 7ccdde9a84572c2a3030ddc17439923f6ca24b4910a52d2929eacdd625fe6846713e3512412bd3e14edeb24bae4194bfa94b559991d7a1c7b70bc691082db5b5
SSDEEP 96:sts05vs3SbDqEfaJi0vhEhktxm/7qx+WVHMSm+uecJUTKpdQjk+guvBJpkMOB:sts0F6EfcpaIU/S+WiTUTadJkpHkMC
TLSH
T1CFE1A8065E28697B4CCBE629BA36F762D3F6501265C11E48EBF88B1C08D66CC7217D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Preferences
Size 6KB
SHA256 0a64e46cf4a236a89d18e411aec140e3a481a9f99e13ee5a75dfd65e133e2bfb
MD5 479a41fcbc0f09157fa0f306bf94d418
SHA1 336f1537bee34b78f1f237b175fee65822b47e0c
SHA512 a2b91be5360a6be13bebcc4fe945fb1db4b9086eae789434fe726f8cfa12f0a5a8fb9e0fcfd5c31522c975d52f55049b15b85547d2c3b91a5e6022037827a70d
SSDEEP 96:sts05Eas3SbDqEfaJi0vhEhktxm/7qx+WVHMSm+uecJUTKpdQjk+guvkQkMOB:sts0B6EfcpaIU/S+WiTUTadJkbkMC
TLSH
T110E1A8069E28697B4CCBE629BA36F762D3F6501265C14E48EBF88B1C08D65CC7317D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Preferences
Size 5KB
SHA256 b081b6861b168f94f2bfbcbbb6c2169f2d38c86375bad659c7c7bedf0b94d059
MD5 72a48346f3150173dbfb9f3182c7c082
SHA1 3358de7ed834da45aa2d7516b88e6495183d25c4
SHA512 e6924597a6abcf2ee661fd654b792a910896267533b3dc199e77aef5eb3b6ae8ffdde967eb59eeae1075b68f3de0b4f5dfa21825aac8b69a2c0fe82974fb8ed3
SSDEEP 96:sts05+s3Nb9gffJi0oEEklm/7qx+WVHMSm+uecadQjk+guauKEB:sts0AzfxpF2/S+Wi8dJkauK8
TLSH
T143C1A8035F28A97B4CCFE21DBB36F652D2F6102166C50D58EBF8861C0DD95CC621B90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Preferences
Size 6KB
SHA256 0903958f4cd0bd8381a821be4d547f3a1d0085c8b674746875b7ed5dd5bc752f
MD5 90354fbc4c7b25157e656d71a1e77e2e
SHA1 2df39676e891c493acec6030951ee696e0846f52
SHA512 0e7d2cd328b8e47067b5ca0d5c120f9f37e2f256d04e1b161e862d3db22e1aee231ebbb339b348d941ba6c9961c7da291901380d0e56e17f002447ba99b0aeb4
SSDEEP 96:sts05yss3SbDgffJi0vhEhktwm/7qx+WVHMSm+uecJoRrrIdQjk+guLkMEB:sts01QfxpaIJ/S+WiToRrkdJkLkM8
TLSH
T1D3D1A9069E286A7B4CCFE629BE36F652D3F6101265C54E48EBF88A1C08D65CC7317D07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Preferences
Size 5KB
SHA256 7c8902e0acdb45ec1922d7c21d6dbf75e922405d0b8fd96f6cf938e79484ccef
MD5 af0060ffeb7dac54f09e1044bdc7e76c
SHA1 a0fa78659b6f91073d255bfb09cb4d178802c751
SHA512 1d7940336ad2c8fafb547d9327212cee9339d276319dfc56202854e5080e779623eb1511ea5c83978eb96b2c03919ea7970f6ed19fc2d2c7cdffbc197213e151
SSDEEP 96:sts05+s3ibDgffJi0oEhklm/7qx+WVHMSm+uecadQjk+guaWKEB:sts0AAfxpFP/S+Wi8dJkaWK8
TLSH
T150C198075E28A97B4CCFE61DBA36F652D3FA101266D54E48EBF8861C0CD95CC621B90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Preferences
Size 6KB
SHA256 a6626cc659f0c51af0069cd6d805efca2972a8d6b7a96a4b99f49feb4b0bdb36
MD5 f7fd681a0a06b82ea9c0738648690105
SHA1 003f9a67fdf6f89e4e5e210698cac9cc76f1455a
SHA512 257cd98981d021b55baf4ad1f3876b823f9309617aae2945aea3c68c8cbda886fd1fde2bf924afef8e3f19548a6982fe4ed022eb48bc52eb442c31ae7f3fea22
SSDEEP 96:sts05hs3SbDgfaJi0vhEhktxm/7qx+WVHMSm+uecJUTKpdQjk+guDkMEB:sts0jQfcpaIU/S+WiTUTadJkDkM8
TLSH
T1B9D199069E28697B4CCFE629BA35F756D3F6101265C54E48EBF84A1C08DA5CC7317D07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 de3958202f87432c6c4abbd1df2ac40bdbdcf879784a11ca82bf37ff9e6cd9b9
MD5 64cc76cfb818287e3c71ec0433013e2e
SHA1 abc95d4421954e21966275ff77244b848c5e6f1c
SHA512 6a4281b8b98bde420022220621ab53f38a3aa40eef8fac26fda8173d0064002979d117af91549d5225f2406fbfca214041b985b5c215bca98a1bb2c33e1893e4
SSDEEP 96:HlxifPlf/ROoKOpkF5d1xia7sMaTEv9V5h5pg5+eeuAxAxNZZKDU0nB:HW/WGZS9lUJxNX0B
TLSH
T1EED1C5A34969C538AF445FEBED287ECB8DAA009FA8E5490596D1C44807C2EFC21DA8D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Session Storage\LOG.old
Size 334B
SHA256 8d1772c090a3f5b7e3ae9725b132e1f87bc628d2ed9e739c78d764a62fe8ef3b
MD5 5cd0a2d3384780ab9c345fe022b3eaec
SHA1 3d04af2c94fcc6ea6315cf7af0ab9674a9048b49
SHA512 7885bc9c6c94d08df4eaaf2c29e42f375bbd794087dd55c51ab6c1563db737c5a60d63a73f208938efdb973594f7e635a792db753158635793d09206d6fcdbf0
TLSH
T132E04F94289DA53F60C468AF16FD7389C3E17809B79D2AD11F91D58029429147285AA1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 d0e7fef8c9c4d59cb2f44da92bd089f10b2963e83400661acc29ac2a9ead5381
MD5 4a2686fe6f97d3e67237e25915c7c227
SHA1 83775828009cd78630368757aef8f1a760964785
SHA512 7a1731320d4bc74f531ad6964e409ae84d760a9b5d225fb846df0d2b356beea1306ed88faeb0b0ceda48befc0e7a941fe1527fb196824ebb0059a18eb4d8bd31
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SharedStorage

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\SharedStorage
Size 4KB
SHA256 1fe8f6113488865c546d2faa55b21482662ce4be19d4f505eeefa09bc3131489
MD5 b9263bbf24428aaca95d04d04f3aeb6f
SHA1 5346015345f6df766df4bc9b42da076f6fdd440f
SHA512 5bc2978bc96e1347500db552e2a2dfd9e5df25c8e16d3ab57e5519de43cb9c08f5aeefd1a6f6947d7fa253505918763b932f622636fc2a7a429fa72a5b49c7cc
TLSH
T1EE810440534000F1D05407F755D1130C0F07D3D4D5410F0355010041CC51D445C70FC4
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Site Characteristics Database\000003.log
Size 40B
SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
MD5 148079685e25097536785f4536af014b
SHA1 c5ff5b1b69487a9dd4d244d11bbafa91708c1a41
SHA512 c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Site Characteristics Database\LOG
Size 321B
SHA256 4f179f6927cdbbf91bcf32111d3909a8fe27392b8d7ea83da04de9ed57a1fe04
MD5 7b582344d82ef24620be713b67c74251
SHA1 bfb84b5a7b9afe2d06d1aedf952188ebc713ac59
SHA512 161f7dde19830583f5d08693dcb983fcb33880ce1fcf33a5e0c964cad33d4315a4f111d1a80a9f6ff43825b754e4972e151f273be09ee09244fb8302dca0ab5c
TLSH
T1E2E0267064DDA73F014A14FF6276A30EC3A17400EEED13911FA4E600394B844B582741
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Site Characteristics Database\LOG.old
Size 362B
SHA256 5110ec955ecba2e066577ff4aa1139bd0456c4e598b7c616a0e40be69cef69a2
MD5 7a656c46e62afa44240e9fedb0989b79
SHA1 683611367c037b61a9e969757d9dde130af16c67
SHA512 21d1ee0fe7d22067f1a92c9a32fecb01ee188370818966919760f2de51979bf879587a155f58d9f1166f580fd8a699b23a5223455845333f495ea678c9900e4d
TLSH
T140E0D8A03ADDB73F208E246F52FDBF09C3E53805FACE16E51B84E240294B800715A752
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Sync Data\LevelDB\000003.log
Size 46B
SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
MD5 90881c9c26f29fca29815a08ba858544
SHA1 06fee974987b91d82c2839a4bb12991fa99e1bdd
SHA512 15f7f8197b4fc46c4c5c2570fb1f6dd73cb125f9ee53dfa67f5a0d944543c5347bdab5cce95e91dd6c948c9023e23c7f9d76cff990e623178c92f8d49150a625
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Sync Data\LevelDB\LOG
Size 297B
SHA256 fc81b72e11b9ab923cd4815a9a598a251c92839d6375df60cdfac50f65e67dea
MD5 aa6481beda578b9ac4ac893b11cef200
SHA1 096a7692ed9460016d5a01791087ce2b6d9bed72
SHA512 763de7dedc1cf8fc110a3c75f6c514335defc962db423718c0a4da63e37374fc357d80db1bd92301a1d2ad00bad620008846c83ff7cf18cdce0e4077e329ce6f
TLSH
T147E0CDB1A4D8E63F048984EF92B9574AC7F0780457CD37C54B54D5047C47408B651BC2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Sync Data\LevelDB\LOG.old
Size 335B
SHA256 9e9565c70c680bf1c2f52f8bfc7d8fed74c6842866975fb3194d6e2ff174b1ca
MD5 f6d2f06d6d1172231c31dd922257f0e7
SHA1 3bead566b00c683ab3410cafe37973af9950ef3a
SHA512 cf778479028cb0b2e4184c9d8bd6b16151466ce41c3b39ed275227d87717e42586fb88654e1bb5b000e338a3ca1a462ee015d2b2ceac650e4887e3631766ec80
TLSH
T174E0DFF026DCA73F648464AB42FC7F0AC3F03C0AA78926C94B449040288380876BA6D0
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Visited Links
Size 128KB
SHA256 b50820354d25443b1079cf1e4670f6e660c665a042361535652ff4bfe7c61642
MD5 945e8cfb56779716b91ef45dbae1b060
SHA1 61529b3ac9ffca4d2d4b7a4c0407d36bb07efe90
SHA512 bd3a48096974bc806d832adab1c9844816bd9b4a6d937946de0d9a0c5680e60c763d375a1ba7b04a9cbb3de7d7cc31bd83ea481fbf3c11b48fd43b03147676cb
SSDEEP 3:ImtVgkQt:IiVgkw
MD5 SHA1 SHA512 SSDEEP

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Web Data
Size 216KB
SHA256 2a7b3bb5ac287c4d5fd81c76626b1e8e15f32f34d2b37738fdc98fa6ad43baaf
MD5 4ebc7325aec489f53e4635ea414d14a5
SHA1 c85641375cd9bd4a26922883598a02e8861a6bec
SHA512 a2ad8a907e9d3405fefc533ef4ae65fcb32615914163af646c6af02a412df1d3a2250d0ec8e04ab5d04b6d8453122d43d97aa3340358fe5e7c748e9e2117fb74
SSDEEP 192:njQLsS6Xuv9PhDnLUMjA03VpQYouZtuQKIqJZWTVTdhsrV0dwe:nEL3CuvrDnwMjA0FpQY5Z0QKIqJE6K
TLSH
T14924440A7B746001EDA6E9721CB080771D3C61AD8F22E6826DB254694DF6853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\shared_proto_db\LOG
Size 293B
SHA256 1508586a59f1a3895d892666f707da860495e83630c86383bcd8eff2011fb800
MD5 b0e2fd16a3d2b6c3d9e1aa7bcf91311f
SHA1 b1edf984c08070e95cc43b73147d9f8736ffc34f
SHA512 0cda04180f2795325d2dc05850cd7ecf86f15a6f502457a95b32d2310057cfd8f8eb8b416e979faaf2f7b66c3f0361ba95ad0bc3dd9bf64e069ae27bdba14bb8
TLSH
T103E02B51F8DCA57F106C44EF257B574AC388380AFEDC278D4F95D54C38878087946B46
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\shared_proto_db\LOG.old
Size 334B
SHA256 e1392221a16c211b3ac74ac9f66cf5628321a1a7477fd0fbfe9ae4ef9788e697
MD5 d573abf0b13ae589d8ca3a8301c6143c
SHA1 adaadab5b39470166760394d3306e6d16b3b588f
SHA512 af90d2e8f5563717b815b782bbf3be576423462516c601900bd2c1eb0c6a63ffdb91a0dba73259e295646a04e3ab6cbe018586993b78dc328b27ca99fed78359
TLSH
T199E0DFA0789CA26F608C649F22FD3B4EC3A9380ABA8A16C50B80C844280280075A9652
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\shared_proto_db\metadata\000003.log
Size 450B
SHA256 f790e03884b7fd0fa9e770df948c2d6a55d472318bf5ea67898d8bd2383ad168
MD5 884f04efc7c5c61f44bd8ce9d475d1de
SHA1 90eadd62689a043606cfb4cc3501a8ed0c077d41
SHA512 79b5b36ab5a0b2e842f49fa1ba62d5b2d09e050b9efa83c01a92d3a97dd4f15899b71a4d5f07bcc1ac4a315588a263a0b32a1e492abc688d20a9b80d9613d0b0
TLSH
T13FF0CD0BF3A0C004D015913A646BA7125374D4428FF8DD0F483AE4301F776141C477D4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\shared_proto_db\metadata\LOG
Size 311B
SHA256 57ded7b6ae447dbfab14c87fcd20a9b113cf0826a65bb74e66360132e9f35dfa
MD5 8c557fb901867b68c241835d650ce55e
SHA1 2b0015005dbc1a14623b842f2ea59c9a8b7812e8
SHA512 d24323880bfbd38f6a322f21ea00ee75dab09f1692b637e8e7d7b8a678ae15b39e5052b6a4449e6c78742812d71456dc3e5b811ad1e51e39b336a50e66a598af
TLSH
T1F1E0C285F8ACE5FF005945EF21BA57CAC7A53945BE882F890F91CE487C87848794A782
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\shared_proto_db\metadata\LOG.old
Size 349B
SHA256 1af7263f31cb9d16fc312483a1e48ebb8af024bda2d5f1982f10015880a8c5af
MD5 e6ce13b951e5876ddd2fedfab2285a08
SHA1 dc2c4f6feac4a2318dfa37da17d2c4f8993eb7b5
SHA512 a28119296740c0f13e0abe2e6cafd7c2c9ed30af816b6bf363c6f7396f94d995c66865200e1dae50631400afe4232838ccee86f69e9df811534c48fc0f3d3d32
TLSH
T158E04894749DA66FA05414BB11FD7B8AC7A03C45BA881FD51F40CD451842948B57E691
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Last Version
Size 14B
SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
MD5 96fb5f155aee0f8cd88274656c58ca83
SHA1 1fe86d9df188b0f86ae2d8da8f7c1ef663258baf
SHA512 fee0061ef23ef3fc35d050501b47db921f490c2aec2a016304c9f27228d3ecf7df9641fd681d9babd275ffd3dbd20e33e38fa5bf583c2852ffcd4b04bedf015c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 5KB
SHA256 6a18778ea4a566fe36112ab96f237f08fd691e9ca79771147e5f4ac0b27cf492
MD5 a1f629a061f6d2ad1c7b3ed7583e67c0
SHA1 f9c835d7e1830b5372bb112ee7f8de80e348f118
SHA512 715099404c25748d8fda184c88ddac085d0ea9506524bcfbde963c90348aa5763bf160a99a3feec1ccb2bde16047234e6eda8fd79c73d289a5cfce1489fdd9ae
SSDEEP 96:zu0oNkEIbTfenpKXGJz8Frh/cInURLl8Doto+5TiDLBLV5V6+JPNoUaiGBRjZRp0:zZoNgOIGCoiDUhw1LV5tNolZhn8
TLSH
T170C18236E464E6274CF29681B647BB56A6E0522392C82FD4CDEC1F0C05CB39D2347C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 5KB
SHA256 6fd1137eb97b9c29072279e6305f74377a316d58ab0df3f7fb3e9d074e4a60cc
MD5 763dc1ca26542143925249afe044d22e
SHA1 13a29c0ae750348014513f1fc18df1a00f2d2e87
SHA512 685563015c97273454ef6875fe1f78d548b6bf7892f8b3e2ce5e8d4647a4967a2e2ebe5a570a3c0ed38c0fa083a109669af45bc39c99fdf596b863424b5e0568
SSDEEP 96:zu0oNkCbTfenpKXGJz8Frh/cInURLl8Doto+5TiDLBLV5V6+JPNolaiGBRjZRpZW:zZoNbOIGCoiDUhw1LV5tNowZhn8
TLSH
T1F9B18336E464E6274CF39681B643BB56A6E1526392C82FD4C9EC1F0C05DB7DD2346C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 5KB
SHA256 66e3e52424d8e2764d1f08e2e25c0ff3b51e3be6ca15873b2b43c14b9c14925e
MD5 49cdda18fc9a9fb07e869bf6b5573c0b
SHA1 334fb6c49d2b30a988b96acbbe56ebd6f966250e
SHA512 cbd674c9e33effe5536fa8b34e945cf17cf6c0d4b1673797afdf6c1be4b9c5d2abf8cb0b37955277fb7443a547f4288690e57857b0fe9a62925ef6bb8a2ef2bd
SSDEEP 96:zu0oNkEIbTfenpKXGJz8Frh/cInURLl8Doto+5TiDLBLV5V6+JPNyzUaiGBRjZRK:zZoNgOIGCoiDUhw1LV5tNqlZhn8
TLSH
T142C19436E864E6275CF29685B647BB56A6E0522392C82FD8CDEC1F0C05CB29D2747C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 1KB
SHA256 8379dc5e62403758b4e383e593a1cb91691e7e30a084ba1fccef5870f3e1fd34
MD5 055409cedf7e9c9fe092f20c097bb1d9
SHA1 3d06042b2f541975aa3908ac9aee139681ae013a
SHA512 aee4f8903e1a586922739376d8f90c9a211bc3179eea8e82fda3bce7a27e75e99d2d0c06b6e20b97b3d015a370793d5e06ee848e9058b24baa5767db3577a08f
TLSH
T1D5314233E4D06B736D862696B243AB572F709072C2444E0861DD4B0805EF78CA63BC32
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 2KB
SHA256 bd236b99e994d0f26dda81f566e96fc0198c08b632f98f5648dd4b86a1fdebca
MD5 e55e0a0c4b276e5f540e42d023c57ddc
SHA1 0c92d9a6a03904251888c6a9c40dbc9dba666cec
SHA512 4bd3fc2026571475b7d4ba6f631e0579218b0efc4c989fb62cd75eef76b3ee053340c183e37588941f5df1083338773e659ba0757909cef3c50bacc9655e8700
TLSH
T13A51A533F854A77749E35654B90A6F236B7591A296912F6055ED0F0C01DF69C7312C33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 3KB
SHA256 c9865e2972037403aec740c951d59f1b2cfcd9c9261de0687cf435de9937c7d3
MD5 6ba0883ced6f7723acdf60744097621c
SHA1 8aaa20f95c519c72de2120e6d73b7afe4b62f8c2
SHA512 bc0ace201b943c0bee803a7228a799fef194f478f3d41f86a0d9a1b50904f93868363975b949e430c8f460e59f8b29683cc441d2e078f92a4b7e026f9fb4334b
TLSH
T11C719537A9A4E6274EE39A45B9866F1677A59133D6D43FA8D5EC0F0C01DB3C82352C23
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 4KB
SHA256 e5ba1672073e159a8b138abb38e21fe24d7ae16b75bf76d36cfee5f78e23dc91
MD5 5f1d6c398fbcda9de0594608990839a4
SHA1 1130ca80c95c1e72ce8333c7d06ec75b2ede8959
SHA512 fd6a247555d352550bad28c443928e53e949b330bf42f7bb72ddbb9cd8ecbfcfcdccfc945fdf9b435e985ab5cd369f25e6de8d4f4c041b50d816a8811c3fc3d0
SSDEEP 96:zu0V3NkCufenpKXGJA8Frh/cInURoDotoN5TBDZBLVZV6+JUZRyoTNrdla:zZV3NbFIGdooDUal/LVZpQn8
TLSH
T11B819423A9A4AA374DF29A45B9462F1777A59173D1943FA9D9EC0F0C01DB3CC2342C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 4KB
SHA256 6ce5f07cd88eadf0169987a43baf9ae0cc9fb70edf1baf8031a537a4e13458df
MD5 e2bfff77203e4ca9c28980a14e75a8ba
SHA1 cd9e0a3dc5dc9c55fd2d62b29c1e4ca74a0d398f
SHA512 8a3cc14e7aacee6fd46af9afe06d312a9196cd3cd642ebcb12f7eb21466398f84d332b89aaa1f2847c980dd812b8cecd411847908f8c60723554496ec014dc60
SSDEEP 96:zu0V3NkCufenpKXGJA8Frh/cInURoDotoN5TBDZBLVZV6+JUZRyoTNrdla:zZV3NbFIGdooDUal/LVZpQn8
TLSH
T12F819423A9A4AA374DF29A05B9462F1777A59173D1943FA9D9EC0F0C01DB3CC2342C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 4KB
SHA256 b577b721e1d83428e066f698f53a8888d1d8563f0659c073ca902f4ec472b68b
MD5 23d006654f8b2050a59e62bbe9d0e9c6
SHA1 4443f190b5c29dd150ff9c807ec27c5b8138577c
SHA512 9b29301f0abb930574cdc34585e76cd4bede0f012d503f1d0f48b3429df60036c50d9da01290f8e10a69c6d9080f01494439d8402b969a8543ce7082c1da4302
SSDEEP 96:zu0V3NkCufenpKXGJA8Frh/cInURLl8DotoN5TXDZBLVZV6+JUZRyoiNrdla:zZV3NbFIGdoiDUav/LVZphn8
TLSH
T1C2919226A8A4AA274CF39A45B9866F1777A59173D1943FA9D9EC0F0C01DB3DC2342C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 4KB
SHA256 53021085ec277829f9c96f100389cc497afffb4785ac45cbb0e8789e5518bfd3
MD5 b2760492ed06131d9769ef33c2427be0
SHA1 d5584b394ff492a92e92ecf592c6d01bb147cf80
SHA512 60f0b396d273f2db83b162db27f01a38b092d05fee12f78859bd8ffcf909053443d363692eb655923a1efb89f994e5fe8b67f6aa2df306b84a2fbcab317a3463
SSDEEP 96:zu07NkCufenpKXGJ78Frh/cInURLl8Doto+5TAD2BLVPV6+JUZRyoiNrdla:zZ7NbFIG6oiDUhamLVPphn8
TLSH
T1FE918226A8A4AA2B4DE29A45B9466F1766A59173D2943F98D9EC0F0C01DB3D82342C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 4KB
SHA256 1543b6964c7ae48ea5fe91a36721fc7a29a6bb7b524e8eec864665e5a09fc822
MD5 7f464cd5cc7ef555955da553341ada33
SHA1 347e8da85bde816c59c9c39304ab2f4be4d5c992
SHA512 e63a8ba7054f62cf822c0d2008ec8788785ed28068e5855106d31516abbbc8375c0f369618a4b4e80b4f489f88e31d39b140aac0b9b0034147986bb8d5adbdc6
SSDEEP 96:zu0oNkCbTfenpKXGJz8Frh/cInURLl8Doto+5TiDLBLV5V6+JUZRpZoiNrdla:zZoNbOIGCoiDUhw1LV50hn8
TLSH
T12D919426A4A4AA274DF39945B9463F1776A59173D1943F94DAEC0F0C01DB39C2342C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 4KB
SHA256 aeacab9351964d40d8ce93191d05a441a7703a8ebec06737586c5141abaa099e
MD5 d75175cd5f7ca009bbf7a98426c24c31
SHA1 84760e9dfa6cb3f2511a7a3e15e6e83112ac3482
SHA512 b55870edeb91c113b9a9ae07ce942033129098ce42b04143a56ad1fde8bc5116abd1634da0b3ab396efdbe849103340542ffc9fe68630374ca63fd8636dc68da
SSDEEP 96:zu0xNkCufenpKXGJOs8Frh/cInURLl8Doto+5TiDLBLV5V6+JUZRpZoiNrdla:zZxNbFIG0oiDUhw1LV50hn8
TLSH
T19891A526A8A4A9274DF29945B9467F1777A59173D1943FA8DAEC0F0C01DB3D82342C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe583eba.TMP

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State~RFe583eba.TMP
Size 1KB
SHA256 0f90af7913f90bfbf510619ad05b8fee23d6db9efc7ef3095b232a3e29996af4
MD5 b8447cf3ccba5deb1a54b0ce625025ac
SHA1 998b324da9f79ca52207ea9ebbc3018907de217a
SHA512 564de072a061253b825d82727803ed37487ba9eb389a203912e5d1cab33e449d0056e27559f041b3a0358dac66d41ef74eb7fb02284dfb81d7737143907e9aae
TLSH
T1DB216237D4D47B736D8616A5B213EB872FA0D172C2088E08A1DD5B0805EF69DE63BC32
MD5 SHA1 SHA512 TLSH

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\PKIMetadata\45.0.0.0\crs.pb
Size 233KB
SHA256 314199e7ac5f396e6596a1b249daab7a3d4e4fc5534654284a18df65aee1cdd6
MD5 8265ec43991e2a046a7c7de702678282
SHA1 84b3ab55cfe6ee24909c74000a875c3d4118b450
SHA512 21c4cd80df8abc08db43ce9c2663cebf2ecf9a9e3c6276cc5280b8a3cea5ef5ffbd25bcabb9fd53b8ca2dd8bc6eea760c4692c47ebc8a1df21097a130bcff422
SSDEEP 6144:KKiD4b7BVpsrYRVW+J2i/P66k88yST+uUM:KBo9VpsrK2GeQY
TLSH
T11634AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\PKIMetadata\45.0.0.0\ct_config.pb
Size 16KB
SHA256 3606e07b5ee09b43a622cd87cee80474679ea4f4c1aa59e5ff33d49da851f1aa
MD5 442440bc4c725cf395df7410e58d9653
SHA1 3d387b0a60fa20c9c4a22d5e8f6ed5f6ec8d1520
SHA512 28879ff61c3933068bc4212bfd9da3956971fe6e45f5a8379910328899acfb489353afa41b67e1c961d95534aee7f2c004ae04ea92286b43491595a7aad63252
SSDEEP 384:btomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:bl5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T15672D9BFA1169F000383E558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A967B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\PKIMetadata\45.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 205bed72b527a07310d132616393bac84db775a9bc372559d5182672e376c0e2
MD5 d05686bdc79220049deee3d07b28c41b
SHA1 d59bd95593290a239f6d4538ed1674d1541c4017
SHA512 78163f8efa0bf534325087b08f31ce488bfdcf154b79ef6c53ea41c648b9f11bfef13de21a2233b89a4a6d89e45fdc9e261f780a568be9599b8e50571f1458bc
SSDEEP 96:rxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:21IDCrBnYQ5jlMacFwn2c9w
TLSH
T1302204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\ShaderCache\index
Size 256KB
SHA256 00ce66bf09e24efc2298b9dea6ca5a17da21d1276ef4393bbf44a2bc58ff9338
MD5 8bfd657a3c9773c987b263627895961a
SHA1 aed90c83eb746ba623d53b221a72c0dbae1934a6
SHA512 d53032bce41e3698ced3f2010a3369247ddf37538e1b76c4750628608379e099b30b6cb9552cbc5dcc47e4b46e2202528bd548a455c44ae5043d175792e86846
SSDEEP 3:LsOllllklkXlw7:LsUlPw7
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Variations
Size 86B
SHA256 59bdae85374b19ef28c78cee822ad961c78c83e3616500017a076115c17d0096
MD5 31390225a4b62c039eb8371070b30416
SHA1 f2ab8dd8eeb493ada6b798ac556f64f9e8d2acc4
SHA512 03edaccc9a3e76fffe157ab5ebc48bedda57cf51202c72a8d1f4417d2466d0d91c16c443a8dd82eb1852bf8c82519221b59fa3bb47b1c65e47908edcfdea01fe
TLSH
T1C1A0120384738407E4144051C45C1341287C84570129C0012068931704240CB039643A
MD5 SHA1 SHA512 TLSH

Submit Download

desktop.svg

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\gen-icon-pack\desktop.svg
Size 8KB
SHA256 440ff37da985021de8c1fb161b01504b27ed7133ddae1614a2eaab1aa86ccdac
MD5 cd7e663cddfb4ed6f0f87fe410724bb7
SHA1 cba85410310ed406d33edda3d7752848cb937c57
SHA512 0d902d31e19bf12aed5f0725b1e09325435736e486db6d5d81f0cb110d42ce35655fdd245d300363392a324115d0e471305110fc9192200750571dc6f42729e0
SSDEEP 192:6o0Fjqyr+inwiI7PdP5a3fMDAXCIfExT3HTay7cOBR1cP953TeuLnYPnKr:6rFn+KI7LdfruLnYPnKr
TLSH
T18C124280A2B788E1E72F801F67C1365E4C37315F6F8A195AB4ADE90D5F1E40189DAFC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

explorer_19def14bc3b.png

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\gen-icon-pack\explorer_19def14bc3b.png
Size 10KB
SHA256 b7c3f1e7d7ee1a957f87ffc6f5bf2aae6d19774bb3b5fc285f5cf4d0c872c901
MD5 bf494aad01594729525ae2788c290ff8
SHA1 f56f700c93ad09e463505b6112e9de1a3d37807d
SHA512 469930ee1466128afe523e9cfb4e86b6d31d122eb7690366ca562b070f3a6801956059279042d03a3515dc871fbf7201e853b427014ebfd93536ba1dfe7e8208
SSDEEP 192:Eh5gGxfUOoHLQJN0oDdiTOwnbsAMddHrlo57NU3tC/WEvek4ku:YFf6EJNDDdoOwnbguxciJvYn
TLSH
T14222A0D9F211D640BECFF412A39AAF5F9849214B1519842C4B538EE3056DD198FF5CF2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

missing.png

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\gen-icon-pack\missing.png
Size 4KB
SHA256 aee42f2a43ae0b17f5f90e540bfdecd189ba624394fe0d2a4c1e1041bb76ffff
MD5 7f1bed1d8371fb91d9be785e64f39f13
SHA1 e230193a4fb8b41bc35e0d61168c5f708e827e4a
SHA512 12767ccff80f2ec233f88ada34ddf90bf85e4f86a1bf69497b718eefb1e5fd81bc86c5b0d06bf2e1a535dbb011889b132d31108f1c4664547d705b33e46397e2
SSDEEP 48:V+OUlb7sl2uJ1/Rc5jGdAlqPyjN0nAU0MEq044IeKD5dcOBGTnY4:oOUlXIb/q6f1ANqP4EdcOBGbY4
TLSH
T1F091B535B1528AE7FE0892B358DD7B5C56B474035B28925844251CDBB8DFD6AC34C0B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

seelen-ui_19def154850.png

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\gen-icon-pack\seelen-ui_19def154850.png
Size 59KB
SHA256 8016aebb0484736d8c217cf5f4145738b65554fefd681cef1c8507f7d67be04a
MD5 ad286b856bfcf42300efb030ce4c78ea
SHA1 acd3aa6e7033671a63559fdeb94b2bda9bba1a75
SHA512 f7dfbf2cc172e07b02f8d3fd090cdefa48a3befe2ed2a5af636e074587fbc007d7075338f06563b49612417a1ef078627f31bc8f67825125eedd42add0a7d779
SSDEEP 1536:zVykB0SI8LipCFvX2Wz5OJgvS+Wud2WU3Y9CR/qyi5rzwEsUp1GNhWhQJ9A:0RSIPpsvX2W1OJgvS+Wud2WU3Y9CR/q/
TLSH
T14953F866E5AD8EA7536FB2741062063F1ECBA1F12AEB1F12CB56131F0477A34D0798B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

start-menu.svg

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\gen-icon-pack\start-menu.svg
Size 3KB
SHA256 cf070470668bfaa62b332edee9375960d8fe57cc7a070b752eee4af1c581f412
MD5 72676eb0f1cdd8401a2f2b4515bfc97e
SHA1 0c520d104f51e69a6241c57320cd58826b445d47
SHA512 fdd0c99dc073be34142b9ac34994f11dcbdbf36c34a92a0411b75641ce1d39703c5a51dd49bc5de3718ebce5cf8b1c6a2d0ca2911c78442ac8adf7999df6d0df
TLSH
T1B9514314A6EDAAEC8A0F05241B61A9422B3D2473375060E7FD4C0CB3BB035B8DBA7DD5
MD5 SHA1 SHA512 TLSH

Submit Download

trash_bin_empty.png

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\gen-icon-pack\trash_bin_empty.png
Size 41KB
SHA256 1b4af9188ba11ad7961f9191c905a2b374911a6a911faaf082ffdbf0a13ef257
MD5 1b49dbf9a5a442c793ea6386cbd9a614
SHA1 9c9c09e046f0af486c7e364eecc14f8e923afd65
SHA512 959b04de14e1afea6cf65076bdf05a209dd3e55c8e6696662fe6d7cfe206a5789dd1b0cead5cfe588083df1542a2ac804523cb9e4c5ddb5963ae019845220184
SSDEEP 768:jg6cYN0WF/osmjG2oLH9ajIGjTZ43TcCIWByO:uYNKa2oLHaFZ43TqWB
TLSH
T15513F18ED70C4BB7CDD3A423062E2985444E95A2C2856F17F3B897BC9DA10C8E797792
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

trash_bin_mask.png

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\gen-icon-pack\trash_bin_mask.png
Size 4KB
SHA256 c72c53573e5fe6897979ae654047c5a040e543774eae56a57547e154972e8e84
MD5 51947ca5947f4144fe8f3f068f1c302a
SHA1 abe1509eb248256d4b953a95dfd850f62d311f8e
SHA512 387430f0ae6fbee4a7baba62337c5142a98f56e23d908f0eba9c6f96c627d722bc6f2022a037bfce65e9e2a3cf9980dde11d81bb4d314940e172e3f2d65bdaa3
SSDEEP 96:giSSSSSSSSSSSSSSSSSSSSSSSSSSSSqlqzBiCpnDbzI0tjwcI9GaSHWfjOv2N0bl:giSSSSSSSSSSSSSSSSSSSSSSSSSSSSqK
TLSH
T16EA1F73A2C7A8845F2C6FE6511449F89FE491004981BCBDA31590B3DD4EBFD943986E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SLU Service.log

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\logs\SLU Service.log
Size 568B
SHA256 d17ca6965cb405aef3c35e65e520ef1098c6633f4eaa22bd8bc01f9f606c7d38
MD5 ff2fe6ca116a6196a3f1b0dd1c52d18f
SHA1 5fb0a115271d1139d41a311253002ac7707526cd
SHA512 e0b50be64b21b41ce0837ce7d149ce8dcabf064284c0e0dad604f862241e477d779fd15a3882d6fb914d91fc942351de40125230cf38bcabd6fd9ae5290316f0
TLSH
T17CF01C78829D057F3A1DDD3FAEA329211B8931087E787B886770B4A81BCDC1D4D59A39
MD5 SHA1 SHA512 TLSH

Submit Download

Seelen UI.log

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\logs\Seelen UI.log
Size 3KB
SHA256 49ac3246fa2d33ec82412611b3191a42b43d13148898a3d8669f3c0f5b3523c4
MD5 bb6ffd8cdab1c0f6b4bc7b8701035da1
SHA1 071242d61096085076c9506f5048df6500006f5a
SHA512 9d05a69315592970bc83018e0a8b869d5e9fe3a9cd507e19a02b706e4470b896d0ee970793fae104918a2e849efabfdfae7104c2c130c56d9ec069bd7f2740fe
TLSH
T1BA8145B0527D2C6B3B4DC97F72E564300ECB34157A603F99B32875C80FCCA599E596A2
MD5 SHA1 SHA512 TLSH

Submit Download

2a2e0412b8ad04a2.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2a2e0412b8ad04a2.customDestinations-ms
Size 4KB
SHA256 e629b7114247ae43aa7211036c83ea5df18b0bbac5009bd9edd4f7bebb066248
MD5 17adef93ec666234014a277baff671a9
SHA1 6961189b215adbbc88b5920600353db66c7e15d4
SHA512 ed998c2a91fd32dcdce2ce1ae13e34709c96d27bcf11b4abc85b5aedfdb4c82aea2be4e2d68bafc28589c5bffc1d1da70a83e5713a9140e89f9b6e6b7b53c4c6
SSDEEP 96:VLz5JMR1AzHumzd0gjLz5JYR1CzHumzdN+:vuR16hV6R1Ix+
TLSH
T194A1ED145AE60716F3F79B7295B37A218977B849DA054BCD04D282080DB3B84A8B8F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

state.yml

Path C:\Users\Admin\AppData\Roaming\com.seelen.seelen-ui\data\seelen-fancy-toolbar\state.yml
Size 728B
SHA256 c64d891ac5a9af7f996236420c4651b756c40af7498758cd8d7ed788435135c7
MD5 8edfaa9768c19e6409b85d8bcb3a70a2
SHA1 7ec9f055921394c17b76dca2187d6153e954daa4
SHA512 904b10243ab9ae08b4de9f03b4b5ee0add359097aec91fc15061ef7a98025e6adaf186c13f4716f1af69344c0ede4751008807fb644237fb556d61c050806459
TLSH
T132019C419277F92BDECA806F6C42A1E09120C41F5B41317D1B6C3A92070C658DBE8906
MD5 SHA1 SHA512 TLSH

Submit Download

state.yml

Path C:\Users\Admin\AppData\Roaming\com.seelen.seelen-ui\data\seelen-weg\state.yml
Size 478B
SHA256 77e78c889722221af8edc7c43c17a84b89c48df7e23a324b4ac1a0d4a87dfeed
MD5 69916ca11b3be5f06dbf754d0c822b04
SHA1 a88c7fe06175c7bbeed2c8b1c8a494ea3c250e0b
SHA512 c4d127a8179d34f48452b2289863fb7b556c8c1b9f1728721c601b98c0eb52b352d2b9a6e4d68d5ead65de0066bad43de818c6906076674f1f09891104e8b090
TLSH
T11BF09ED452B7B970D62640FD96206465DF22C112421B00B45FAC1A1A315392334A479F
MD5 SHA1 SHA512 TLSH

Submit Download

memory/456-757-0x000001B984630000-0x000001B984685000-memory.dmp

Download

memory/456-678-0x000001B984630000-0x000001B984685000-memory.dmp

Download

memory/456-607-0x000001B984630000-0x000001B984685000-memory.dmp

Download

memory/456-854-0x000001B984630000-0x000001B984685000-memory.dmp

Download

memory/456-885-0x000001B984630000-0x000001B984685000-memory.dmp

Download

memory/1012-553-0x00000212CD510000-0x00000212CD565000-memory.dmp

Download

memory/1644-216-0x0000029D1B200000-0x0000029D1B255000-memory.dmp

Download

memory/1816-13-0x00000276BABB0000-0x00000276BAC05000-memory.dmp

Download

memory/1816-2-0x00000276BACD0000-0x00000276BACE0000-memory.dmp

Download

memory/1816-14-0x00000276BACF0000-0x00000276BACFC000-memory.dmp

Download

memory/1816-10-0x00000276D3180000-0x00000276D31A2000-memory.dmp

Download

memory/1816-1-0x00000276BACD0000-0x00000276BACE0000-memory.dmp

Download

memory/2596-176-0x00007FFE62D40000-0x00007FFE62D41000-memory.dmp

Download

memory/2652-581-0x0000000002C00000-0x0000000002CA9000-memory.dmp

Download

memory/2652-850-0x0000000002C00000-0x0000000002CA9000-memory.dmp

Download

memory/2764-958-0x000001AC2B580000-0x000001AC2B5D5000-memory.dmp

Download

memory/2764-959-0x000001AC2B640000-0x000001AC2B64C000-memory.dmp

Download

memory/2764-955-0x000001AC2CF70000-0x000001AC2CF7A000-memory.dmp

Download

memory/2980-1285-0x00000206293F0000-0x00000206293F1000-memory.dmp

Download

memory/2980-1287-0x00000206293F0000-0x00000206293F1000-memory.dmp

Download

memory/2980-1289-0x00000206292B0000-0x0000020629305000-memory.dmp

Download

memory/2980-1283-0x00000206293F0000-0x00000206293F1000-memory.dmp

Download

memory/2980-1284-0x00000206293F0000-0x00000206293F1000-memory.dmp

Download

memory/2980-1288-0x00000206293F0000-0x00000206293F1000-memory.dmp

Download

memory/2980-1286-0x00000206293F0000-0x00000206293F1000-memory.dmp

Download

memory/2980-1282-0x00000206293F0000-0x00000206293F1000-memory.dmp

Download

memory/2980-1274-0x00000206293F0000-0x00000206293F1000-memory.dmp

Download

memory/2980-1276-0x00000206293F0000-0x00000206293F1000-memory.dmp

Download

memory/2980-1275-0x00000206293F0000-0x00000206293F1000-memory.dmp

Download

memory/3260-608-0x0000019955CA0000-0x0000019955CF5000-memory.dmp

Download

memory/3260-679-0x0000019955CA0000-0x0000019955CF5000-memory.dmp

Download

memory/3260-609-0x0000019957F00000-0x0000019957F2C000-memory.dmp

Download

memory/3260-610-0x0000019957F40000-0x0000019957F4C000-memory.dmp

Download

memory/3260-682-0x0000019958B50000-0x0000019958B77000-memory.dmp

Download

memory/3260-683-0x0000019958B80000-0x0000019958BBB000-memory.dmp

Download

memory/3648-77-0x00007FFE64750000-0x00007FFE64751000-memory.dmp

Download

memory/3648-76-0x00007FFE637A0000-0x00007FFE637A1000-memory.dmp

Download

memory/3872-29-0x00000245ED410000-0x00000245ED465000-memory.dmp

Download

memory/4416-334-0x0000000001FB0000-0x0000000002059000-memory.dmp

Download

memory/4596-331-0x0000023880D00000-0x0000023880D55000-memory.dmp

Download

memory/4596-332-0x0000023880D80000-0x0000023880DAC000-memory.dmp

Download

memory/4596-333-0x0000023880DC0000-0x0000023880DCC000-memory.dmp

Download

memory/4884-52-0x00007FFE62D40000-0x00007FFE62D41000-memory.dmp

Download