76c2b213e0d15a86aa00004a5b5351ed60aad9465024ee15f2a003fde8060b21

Analysis

max time kernel
149s
max time network
156s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/05/2026, 18:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
slu-service.exe
Size 3.2MB
Sample260503-wze3qaft21
SHA256 76c2b213e0d15a86aa00004a5b5351ed60aad9465024ee15f2a003fde8060b21
MD5 5555a4e400c0e82bfff16265dc795902
SHA1 2e74a9c6d13e71ae68b8e37a538997dbd7f8fb35
SHA512 e4eccc5b53243a2fd062da31e1b7734ffceec845dd1eda116b3b2ebafdc3867a87b2a48ccbea8dcdbf9dc5861784757f81422c74c9c2607cdd5ddf7026d09eb6
SSDEEP 49152:h3CtKMEtdU46nI+fvhgv/JQ6gwYyki048R/u:9Ct0MMgwYycs
TLSH
T125F55C027E7A99D5C08CC870C34A4A730A39B8DB1DA5F6AF21C955253FBD6B83F1C259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution persistence

Malware Config

Signatures

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Run Powershell and hide display window.

execution

PowerShell

T1059.001

pid	Process
5348	powershell.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in System32 directory 60 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\symbols\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\seelen_ui.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\symbols\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\exe\seelen_ui.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\seelen_ui.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\exe\seelen_ui.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\exe\seelen_ui.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\symbols\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\symbols\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SYSTEM32\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\System32\symbols\exe\seelen_ui.pdb	seelen-ui.exe
File opened for modification	C:\Windows\system32\symbols\DLL\kernel32.pdb	seelen-ui.exe

Drops file in Program Files directory 18 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\user32.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\symbols\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\dll\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\symbols\dll\user32.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\win32u.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\EBWebView\x64\symbols\DLL\kernel32.pdb	seelen-ui.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-te.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_529175701\male_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_529175701\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_529175701\model.markov	msedgewebview2.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\symbols\dll\user32.pdb	seelen-ui.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-es.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-nb.hyb	msedgewebview2.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\dll\win32u.pdb	seelen-ui.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_529175701\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-af.hyb	msedgewebview2.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-de-ch-1901.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-hu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-nl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-gl.hyb	msedgewebview2.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\symbols\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\symbols\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\user32.pdb	seelen-ui.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_529175701\surnames.txt	msedgewebview2.exe
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\DLL\kernel32.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\dll\ntdll.pdb	seelen-ui.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_529175701\english_wikipedia.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1380587197\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_529175701\us_tv_and_film.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-be.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-et.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-hy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-it.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-lt.hyb	msedgewebview2.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\ntdll.pdb	seelen-ui.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_529175701\passwords.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-el.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-sv.hyb	msedgewebview2.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\dll\ntdll.pdb	seelen-ui.exe
File opened for modification	C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_9d947278b86cc467\dll\user32.pdb	seelen-ui.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_529175701\female_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-hr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-as.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-la.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-mr.hyb	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134223061877731618"	msedgewebview2.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3847269522-1618051987-1942096715-1000\{9AA8BE85-C290-42B3-9612-7B0A84D48F35}	seelen-ui.exe

Suspicious behavior: EnumeratesProcesses 7 IoCs

pid	Process
2288	slu-service.exe
2288	slu-service.exe
5348	powershell.exe
5348	powershell.exe
5348	powershell.exe
5872	msedgewebview2.exe
5872	msedgewebview2.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2632	seelen-ui.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
484	msedgewebview2.exe
1324	msedgewebview2.exe
1324	msedgewebview2.exe
1324	msedgewebview2.exe
1324	msedgewebview2.exe
1324	msedgewebview2.exe
1324	msedgewebview2.exe
1324	msedgewebview2.exe
1324	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeTcbPrivilege	2288	slu-service.exe
Token: SeDebugPrivilege	5348	powershell.exe

Suspicious use of FindShellTrayWindow 23 IoCs

pid	Process
2288	slu-service.exe
2608	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe

Suspicious use of SendNotifyMessage 13 IoCs

pid	Process
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe
2632	seelen-ui.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2288	slu-service.exe

Suspicious use of WriteProcessMemory 55 IoCs

description	pid	Process	procid_target
PID 2288 wrote to memory of 4664	2288	slu-service.exe	80
PID 3836 wrote to memory of 2608	3836	explorer.exe	82
PID 2608 wrote to memory of 484	2608	seelen-ui.exe	83
PID 484 wrote to memory of 3980	484	msedgewebview2.exe	84
PID 484 wrote to memory of 4148	484	msedgewebview2.exe	87
PID 484 wrote to memory of 4148	484	msedgewebview2.exe	87
PID 484 wrote to memory of 4148	484	msedgewebview2.exe	87
PID 484 wrote to memory of 4512	484	msedgewebview2.exe	88
PID 484 wrote to memory of 3916	484	msedgewebview2.exe	89
PID 484 wrote to memory of 3916	484	msedgewebview2.exe	89
PID 484 wrote to memory of 3860	484	msedgewebview2.exe	90
PID 484 wrote to memory of 3860	484	msedgewebview2.exe	90
PID 484 wrote to memory of 3860	484	msedgewebview2.exe	90
PID 2288 wrote to memory of 4788	2288	slu-service.exe	91
PID 5112 wrote to memory of 2632	5112	explorer.exe	93
PID 2632 wrote to memory of 1324	2632	seelen-ui.exe	94
PID 1324 wrote to memory of 4768	1324	msedgewebview2.exe	95
PID 1324 wrote to memory of 5080	1324	msedgewebview2.exe	96
PID 1324 wrote to memory of 5080	1324	msedgewebview2.exe	96
PID 1324 wrote to memory of 5080	1324	msedgewebview2.exe	96
PID 1324 wrote to memory of 3296	1324	msedgewebview2.exe	97
PID 1324 wrote to memory of 1912	1324	msedgewebview2.exe	98
PID 1324 wrote to memory of 1912	1324	msedgewebview2.exe	98
PID 1324 wrote to memory of 3604	1324	msedgewebview2.exe	99
PID 1324 wrote to memory of 3604	1324	msedgewebview2.exe	99
PID 1324 wrote to memory of 3604	1324	msedgewebview2.exe	99
PID 1324 wrote to memory of 1740	1324	msedgewebview2.exe	100
PID 1324 wrote to memory of 1740	1324	msedgewebview2.exe	100
PID 1324 wrote to memory of 1740	1324	msedgewebview2.exe	100
PID 1324 wrote to memory of 2008	1324	msedgewebview2.exe	101
PID 1324 wrote to memory of 2008	1324	msedgewebview2.exe	101
PID 1324 wrote to memory of 2008	1324	msedgewebview2.exe	101
PID 1324 wrote to memory of 1612	1324	msedgewebview2.exe	103
PID 1324 wrote to memory of 1612	1324	msedgewebview2.exe	103
PID 1324 wrote to memory of 1612	1324	msedgewebview2.exe	103
PID 1324 wrote to memory of 1676	1324	msedgewebview2.exe	105
PID 1324 wrote to memory of 1676	1324	msedgewebview2.exe	105
PID 1324 wrote to memory of 1676	1324	msedgewebview2.exe	105
PID 1324 wrote to memory of 3536	1324	msedgewebview2.exe	106
PID 1324 wrote to memory of 3536	1324	msedgewebview2.exe	106
PID 1324 wrote to memory of 3536	1324	msedgewebview2.exe	106
PID 1324 wrote to memory of 5024	1324	msedgewebview2.exe	107
PID 1324 wrote to memory of 5024	1324	msedgewebview2.exe	107
PID 1324 wrote to memory of 5024	1324	msedgewebview2.exe	107
PID 1324 wrote to memory of 3312	1324	msedgewebview2.exe	108
PID 1324 wrote to memory of 3312	1324	msedgewebview2.exe	108
PID 1324 wrote to memory of 3312	1324	msedgewebview2.exe	108
PID 2632 wrote to memory of 5348	2632	seelen-ui.exe	113
PID 1324 wrote to memory of 5992	1324	msedgewebview2.exe	116
PID 1324 wrote to memory of 5992	1324	msedgewebview2.exe	116
PID 1324 wrote to memory of 5416	1324	msedgewebview2.exe	117
PID 1324 wrote to memory of 5416	1324	msedgewebview2.exe	117
PID 1324 wrote to memory of 5872	1324	msedgewebview2.exe	118
PID 1324 wrote to memory of 400	1324	msedgewebview2.exe	119
PID 1324 wrote to memory of 400	1324	msedgewebview2.exe	119

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\slu-service.exe
"C:\Users\Admin\AppData\Local\Temp\slu-service.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2288
- C:\Windows\explorer.exe
  "explorer.exe" C:\Users\Admin\AppData\Local\Temp\seelen-ui.exe
  2⤵
  PID:4664
- C:\Windows\explorer.exe
  "explorer.exe" C:\Users\Admin\AppData\Local\Temp\seelen-ui.exe
  2⤵
  PID:4788

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
1⤵
- Suspicious use of WriteProcessMemory
PID:3836
- C:\Users\Admin\AppData\Local\Temp\seelen-ui.exe
  "C:\Users\Admin\AppData\Local\Temp\seelen-ui.exe"
  2⤵
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2608
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --aggressive-cache-discard --disable-background-networking --disable-breakpad --disable-component-extensions-with-background-pages --disable-features=translate,msWebOOUI,msPdfOOUI,msSmartScreenProtection,RendererAppContainer,BackForwardCache,InterestCohort,SharedArrayBuffer,CalculateNativeWinOcclusion,OptimizationHints,AutofillServerCommunication --disable-site-isolation-trials --disable-sync --disk-cache-size=0 --media-cache-size=0 --no-first-run --no-pings --lang=en-US --mojo-named-platform-channel-pipe=2608.2420.14691136070902435842
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:484
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x168,0x16c,0x170,0x144,0x48,0x7ffa7ab4b078,0x7ffa7ab4b084,0x7ffa7ab4b090
      4⤵
      PID:3980
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-breakpad --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1700,i,823948287664085829,6549107188004603580,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=1720 /prefetch:2
      4⤵
      PID:4148
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2012,i,823948287664085829,6549107188004603580,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=2024 /prefetch:11
      4⤵
      PID:4512
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2296,i,823948287664085829,6549107188004603580,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:13
      4⤵
      PID:3916
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3472,i,823948287664085829,6549107188004603580,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
      4⤵
      PID:3860

C:\Users\Admin\AppData\Local\Temp\slu-service.exe
C:\Users\Admin\AppData\Local\Temp\slu-service.exe
1⤵
PID:4108

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
1⤵
- Suspicious use of WriteProcessMemory
PID:5112
- C:\Users\Admin\AppData\Local\Temp\seelen-ui.exe
  "C:\Users\Admin\AppData\Local\Temp\seelen-ui.exe"
  2⤵
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - Modifies registry class
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:2632
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --aggressive-cache-discard --disable-background-networking --disable-breakpad --disable-component-extensions-with-background-pages --disable-features=translate,msWebOOUI,msPdfOOUI,msSmartScreenProtection,RendererAppContainer,BackForwardCache,InterestCohort,SharedArrayBuffer,CalculateNativeWinOcclusion,OptimizationHints,AutofillServerCommunication --disable-site-isolation-trials --disable-sync --disk-cache-size=0 --media-cache-size=0 --no-first-run --no-pings --lang=en-US --mojo-named-platform-channel-pipe=2632.1044.4059047377021883480
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:1324
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x178,0x7ffa7ab4b078,0x7ffa7ab4b084,0x7ffa7ab4b090
      4⤵
      PID:4768
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-breakpad --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1784,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=1780 /prefetch:2
      4⤵
      PID:5080
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1896,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=2012 /prefetch:11
      4⤵
      PID:3296
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2004,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:13
      4⤵
      PID:1912
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3580,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:1
      4⤵
      PID:3604
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4028,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=4036 /prefetch:1
      4⤵
      PID:1740
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4592,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:1
      4⤵
      PID:2008
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4756,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:1
      4⤵
      PID:1612
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4992,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:1
      4⤵
      PID:1676
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=5228,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:1
      4⤵
      PID:3536
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=5360,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:1
      4⤵
      PID:5024
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=5532,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:1
      4⤵
      PID:3312
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4160,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:14
      4⤵
      PID:5992
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5724,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:14
      4⤵
      PID:5416
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --disable-breakpad --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2280,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:10
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:5872
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView" --webview-exe-name=seelen-ui.exe --webview-exe-version=2.6.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=5972,i,1875092937898676742,2964015564652531616,262144 --disable-features=AutofillServerCommunication,BackForwardCache,CalculateNativeWinOcclusion,InterestCohort,OptimizationHints,RendererAppContainer,SharedArrayBuffer,msPdfOOUI,msSmartScreenProtection,msWebOOUI,translate --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:14
      4⤵
      PID:400
- - C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -WindowStyle Hidden -Command "Export-StartLayout -Path 'C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\start-layout.json'"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:5348

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:2076

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004D4
1⤵
PID:5056

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:5208

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

__PSScriptPolicyTest_wuvykzuw.xnf.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_wuvykzuw.xnf.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 9ca77fad0203aa7704b3a90febe45eb81e844ecd705c2b2d01be9dd2ceed5c15
MD5 fc3faa515b7738889c00fb1615b41808
SHA1 0071e86aafd8c3f6d3c457a9e3701e1388db0080
SHA512 9ca43733895e5cf3c40353f37cf067b3b9df7e6ff30d167d356b984d9c08c7e5c98d43bc1377f05088affa4404cbefefb90794f1e824ad61794a4bbb049d6e07
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 1bfa5fcf234dca02afcfa459469ba5fb8d6ca033cd69b0e176c15ff5c98c7829
MD5 31cbca33cec720924ff5849d83aeaef7
SHA1 68d93481faaa3bc0cc1668824791c11391273fa0
SHA512 5797235ba52c72db040f9e437af883f685d02fa65e7a3e1b073ae367df92de02e35e79c995b9007797a160d2db7dfa768344752955b2f951b6d52edec44cdce1
TLSH
T1A3D012173B015134C01036331401F5092500D00B410E4500AC288B2D1F0C0642D92442
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 e06d973a03aa3fe2dea77ae57a8d1ecdb2545fd3471abb5f4e9eca2f02b136f2
MD5 623696ac48ff8bbfe7601dd496931386
SHA1 170c4ff4460ba2be2af4152b3fcdec69ae87b248
SHA512 1843c14e990acf21b3f95f8bfe47aa20ebb4ed96ace6c98825da5cf4cfc48447d7df3fad46527762a2f0637205793363af0ed764d7589fc25d11ec6984b06b3a
TLSH
T195D0121737014534C01035331402F5092400D10B400E4400AC288B1D1B0C0642D52442
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 468456974fd86b33647942820dce7284879acfab9e9e6eca008e1fdcf9006fb5
MD5 d1f604157b0745a40453afb93a6caa42
SHA1 3d5d77429b03674ebb0ba34d925ba1b09310df5e
SHA512 0644ce93724a57dedd8aec208e5a038e323a1b9871d5046d58a87c60479626693e6c8f25b7c7f7b60fd35aac133d2e660ecbd8f8d579ad1fc6703ae117a485a0
SSDEEP 3:MsFl/ll+l:/FE
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 0ff81bfe8be0518d8f0d6ac60e1782d0c04745701c9ec549404fddf3e0604f8f
MD5 42f45fe60d4fc7b74fca481a35dfb6dc
SHA1 cc94dbd2fc84990d3ca849deedbe78d37331c735
SHA512 c8855091db9b73ca924a8d3c8c84edba9bc5cc4766816872561d7f2b0d09874636247db6f82815f3d8dfd7a2202e8d664f7b8668925af166cb3e4b01163a2bf9
SSDEEP 3:MsEllllkEthXllkl2zEklslMlZll:/M/xT02znEk
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Cache\Cache_Data\index
Size 256KB
SHA256 19ff7197df0eb13d5218ff513198e7530fd34f646ff53defd5edf1f20e617f74
MD5 c270ef6ff02a4c5eb74313e6e1c345a6
SHA1 b9bebe494f5981442cdb890010fc69e536f8e9e7
SHA512 262aebc0179d23ee03df24e342f0cf02d3d58b8be7f3a336f7e02b2279f8a17fa9d4513c51994e5dece57c0e4cad5e106804b261b47521f82441b654e31c7279
SSDEEP 3:LstlNllkll/lh:LsX3lEt
MD5 SHA1 SHA512 SSDEEP

Submit Download

5024420bc0cfc7a7_0

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Code Cache\js\5024420bc0cfc7a7_0
Size 237B
SHA256 48fa6b755e5f6941dfa23a58cc36ebb6f988d8aa761008b03974044f106e3884
MD5 52201c6e1b7fc5ad13283390178eecf0
SHA1 505a41cb2edf05f70fd691f1e7929090fd646cf8
SHA512 72b03a35f57c74b2e904332b8b9335335fb5bbd4c0423bd96c202fc27a91922d0b2d0db82ddd266a4cbb69aadaeb6ed270b5e23d75f85cac73886211e55e9d93
TLSH
T15AD0A79F8C356291C09987B2CD776E09CEF7D490356C015421559CD765C85701ABAB68
MD5 SHA1 SHA512 TLSH

Submit Download

be67a3ba943d7f13_0

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Code Cache\js\be67a3ba943d7f13_0
Size 32KB
SHA256 c399862a9054523a0c5f907002271cfd53035861324132609d5c4e7aff12de3f
MD5 adf24c77a565574dad35a000fbdd1a26
SHA1 650f3f3ef92a42478b36bb931f566ee6e90e96e3
SHA512 9d616717e150aac8448a4d6cae3b9813ccbf95ca2d84b75f04f71c3c5d0f64070579261d8952c0976ff8b238d82a3403234d3406ec7d1d32854ddcaca4738081
SSDEEP 384:+3+3Wpq+rOdsxtMeh1HON252PHwzFwrRocyUaN3JIoXxLo1wqpvB6S:Yx+6nQPH6GaN3qoBIe
TLSH
T1E1E2D9015B41DBD6CA7F16F26250891B7B3D4A9D7F83D3231774A33A6C623DD8948E0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 d83ae2ad2ce66183382d47ff97ee77e988441ddf85d8eed77a68581be5558e4e
MD5 e9c8ca8c60c090cb0ca4517291810f6a
SHA1 be087c2ec670012b9a56ee1cee39cdd5cdfcae34
SHA512 4c2f1b0bc7f6833cb75fad892810afb83a6ef5d013790f16150143c0391a0585eac0e1030b72121aed37359cf41cd61b14a20a5c6e94a3dc6c0211edc088a18c
TLSH
T19CB022E030088003C30B03B022C20C20B2380C300B0B0B0338EA22F8C030F008FA8002
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index
Size 48B
SHA256 547e2ce120a9717052b40ee224ceb73fc1b65f68c51d1711f6a99272608e9af6
MD5 d8814d4a4266a26ef6b76f3bd04398db
SHA1 f02be36347ac82bd2cce195b45b79909b054e417
SHA512 13eda63afbc3c0be41ac3a1d76421641d5a947b0a2481138b1827651e371be669772141ab1ce35417492692b9a572c8b0def384b5e1a8e368c1fa05c06fc442b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Extension State\000003.log
Size 114B
SHA256 e2610960c3757d1757f206c7b84378efa22d86dcf161a98096a5f0e56e1a367e
MD5 891a884b9fa2bff4519f5f56d2a25d62
SHA1 b54a3c12ee78510cb269fb1d863047dd8f571dea
SHA512 cd50c3ee4dfb9c4ec051b20dd1e148a5015457ee0c1a29fff482e62291b32097b07a069db62951b32f209fd118fd77a46b8e8cc92da3eaae6110735d126a90ee
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Extension State\LOG
Size 293B
SHA256 6b709dd9104964382bf87531b30b66f62f30d400b5dc72f70aa4431526723a9c
MD5 7b0912e489ca26099672a8bccd3e9b67
SHA1 4f170eca843b4f1d515722088868c88335cf9eb9
SHA512 4bc86199bf001d895f648f2a6b53946d337e75fd9d50a2e2de0939e86587a98fb3cfcb4f6512477f52d036bd6445978e82dac2e9d9617fcbfb0e68d98cb8710c
TLSH
T170E0C240A8ACA97F444C8CFFAABB234ACB903405BACC37894BDAE9043847849A545741
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Favicons
Size 20KB
SHA256 46b5ecada4edb2585f87953f7847aefc938be2404b9d9455c772b97295b7b1cb
MD5 babd43551f1b29eb82e221460676126a
SHA1 e9bff307613a14b35830893bdb6d1ecc931b425d
SHA512 5ab681c170dbd1d374bd66edd02cbe21272819ef7389ad1e886bcba112deb91eb68fa930747986da5ca794881939570013e38edd9f8e6f718f7d202e74a82f41
SSDEEP 24:LLipxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBmI:UBmw6fU1zBmI
TLSH
T1C292EE075E383407DBA10E7D366B18768E3FE26C5FA29C94347410618CF9482D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\History
Size 184KB
SHA256 7ac0739f534f89ae63c46cd41f0cffaf0335fe348933e3e3d660044351f2a746
MD5 c77e3d0b59e286bc3b50eff7cb8f464c
SHA1 b260bf6f86fb9aff5b2396bfb49dea658a6f05e5
SHA512 e9d95b19019dda281d5cdc16315ae5368b3bab7786955354de93dabe5885c958c556a09e4b57a707244e0052cbabb00029619deba1810677bf9ea06e7287e8fb
SSDEEP 96:xhBttejzH+bF+UIYysX0fxQp97fEHt/DfLjLqL/hbgI4VgNr2jWRk/E0:xhBqH+bF+UI3iWGVfWN3qL/8VgZQW3
TLSH
T1AA04EC1E5F743612CDBD513668E745B3597CF03F8B636AC62CA114B1CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Preferences
Size 5KB
SHA256 a6e08662e8c3441e17e6358989423b93e687ee8434195fc4350a3e6ecb03cd72
MD5 e116f0ab2cdd455af7fb4fe508c6ae47
SHA1 09b1d576f1819923047df075f601e3d86c129fb5
SHA512 33814ac8f634fff016348d6b4d682170738df0507ae4c082bcf04a7303d118c2b48da8de212dedbc9a16d7d1dc27ca40e1cb67b89e9ec442afad4f2a331c1de5
SSDEEP 96:rw05+jC5b93Qfffi0oEgklm/7qx+WVHMSm+uecadQjv+g3vKEB:rw0AWQfXpFS/S+Wi8dqlvK8
TLSH
T1EBC197039F2CA97B4CCBE61DBA36B612D2FA501266C51D58EBF8861C0DD95CC631BD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Preferences
Size 6KB
SHA256 5ec973dc4977095e7c8d5fca6b0817d05fc7ff6a5697c0ffa1c191f8c89b8e19
MD5 325614b6eacd1c4451fa8792e6c1f7ae
SHA1 2d34840f84b46585a18741fef26e23df848089cc
SHA512 7a9dafb4b68e689f41601f901868c661eaea5e57792a18066f71841a88c835c0444a259b9230592bfa079b8780944b3676b5b60883aee0f0786713ec55a83693
SSDEEP 96:stw05DjCFbDbQfffi0vhE1ktDm/7qx+WVHMSm+uecJVzXKdQjv+gQSMOB:stw0xQQfXpaUy/S+WiTVz6dq+SMC
TLSH
T195E1A8069E28697B4CCBE61DBA35F612E3F6105266C50E48EBF8861C08D65CD7317D1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Preferences
Size 6KB
SHA256 1c7eb69d2d260b9f369d541339a8b75a3caea8dfb30f5f71ed12cbbb5bfb896f
MD5 f109bf00395c40114b13942d7688cd3a
SHA1 f9374a037bcde60ec075dc0e69f885d21ca52bca
SHA512 7e69c34836b4c8b87569019b482ee42e8f081fcea97b7ad2e30dffb3aa5c82890af6d63695f9582931844dc4f081cf78a867157603415dd25f460e1a1df2047c
SSDEEP 96:stw05DjCFbD3Qfffi0vhE1ktDm/7qx+WVHMSm+uecJVzXKdQjv+gVSMEB:stw0xEQfXpaUy/S+WiTVz6dq3SM8
TLSH
T1EED1A8079E28A97B4CCBE62DBA35F612D3FA105266C54E48EBF8461C08D66CC7317D1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 6b74016ad9feab0156733b9e5082f5b3eb21db1e328952886c45d85328907e7f
MD5 b7ff12fbf7fe3c6c8afc8dbf0b16ac24
SHA1 adf17ae722a558e70326b5492bd42b5e761cf9ab
SHA512 2def2c5f1a7ada8f88cd8ab41563b60b951431157cf373b5c129969846ed59f7f97856297bdf7544716b7b104ef218d923a0ca0dfea12be2c4b2f0ab903e97a2
SSDEEP 96:HlOiWPlf/ROoKOpkF5d1Oi77sMaTEv9V5h5pg5+eeppTEmE4m+Fjr4JiDY:H96WGqX9lXp24m+Z4/
TLSH
T13ED1C6A7492DC538AF449AEBEC387ECADDA600DF98D5481696D2C44807C2FFC21DE895
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 77200d6d0ede17ceec64a7fed27eeb42b6fbb3500b8aa8c530916a24b75f4d31
MD5 a2fada1041c7d97b743fbe5be050d7f7
SHA1 33980482bd67a63af9a53890f0b0916a776cd36f
SHA512 90e554dc2a67b95dc4665060207fa780fdab3b97024c48b16109e2ae03b2427dd2a646a63dbe75365e8b3931bb50628f55d05604e53bdc36152dc65c959ca5b7
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SharedStorage

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\SharedStorage
Size 4KB
SHA256 1fe8f6113488865c546d2faa55b21482662ce4be19d4f505eeefa09bc3131489
MD5 b9263bbf24428aaca95d04d04f3aeb6f
SHA1 5346015345f6df766df4bc9b42da076f6fdd440f
SHA512 5bc2978bc96e1347500db552e2a2dfd9e5df25c8e16d3ab57e5519de43cb9c08f5aeefd1a6f6947d7fa253505918763b932f622636fc2a7a429fa72a5b49c7cc
TLSH
T1EE810440534000F1D05407F755D1130C0F07D3D4D5410F0355010041CC51D445C70FC4
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Site Characteristics Database\000003.log
Size 40B
SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
MD5 148079685e25097536785f4536af014b
SHA1 c5ff5b1b69487a9dd4d244d11bbafa91708c1a41
SHA512 c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Site Characteristics Database\LOG
Size 319B
SHA256 f0492aa95f3d9dbdffa8bbe2ad44845eed6b67ddbd9493db9dcaccee60c35771
MD5 dfc5ef77935bbb7a9bca579c1ba5247e
SHA1 c8148ba9acc095089c79507fd2c595be84c984e7
SHA512 45d2cd2842f534b387f6bb55bc013b9dab997efdded633087b8d2bc525958f942317d3423a46b003e702deed0f4e23fb01800efc76b451aee61966b70fc3074a
TLSH
T14EE0266064D9AA3F014955EF627AA309C3A13400EACD16511FA4E600250BC48BD42781
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Sync Data\LevelDB\000003.log
Size 46B
SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
MD5 90881c9c26f29fca29815a08ba858544
SHA1 06fee974987b91d82c2839a4bb12991fa99e1bdd
SHA512 15f7f8197b4fc46c4c5c2570fb1f6dd73cb125f9ee53dfa67f5a0d944543c5347bdab5cce95e91dd6c948c9023e23c7f9d76cff990e623178c92f8d49150a625
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Sync Data\LevelDB\LOG
Size 297B
SHA256 6f2ed0f96437e6e8536dc784a19ffdd62e6289ea37d0125c9730015bb36b0451
MD5 145cf82c413bc917118d465b18f60aff
SHA1 71d47988d965c852d0222618bc12b5ce26c19471
SHA512 6d7b320e459c120c07c2a47fbb4de785e036ff2204f29962394fdb523f0f9fd7d25762622ee01f95800e69839c3fd74a7c036b538ba66a0d13f3344e4e65157c
TLSH
T137E0CDB0E4D8A63F045894EF56B9670BC3F0780467CD37894B45D9043847818B951681
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Visited Links
Size 128KB
SHA256 2207b425a944b4e4c6a429769b0aaaf8ad30f4d8639ae68637883615e57c8710
MD5 6027de349cd1671fc2a89654d792ae8e
SHA1 f3bc204c87fa8d26e84ca8e5d1a4dcf0ab8f306d
SHA512 f90bc11d58a31a59574e3b3b3f6631ceb48180c988274c66de6f86912fc1477f56ed1852099b935ce8f2a4797510cac5fc941c90b2f25100f029749cd654f104
SSDEEP 3:ImtV7gal/:IiV7g
MD5 SHA1 SHA512 SSDEEP

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\Web Data
Size 216KB
SHA256 2a7b3bb5ac287c4d5fd81c76626b1e8e15f32f34d2b37738fdc98fa6ad43baaf
MD5 4ebc7325aec489f53e4635ea414d14a5
SHA1 c85641375cd9bd4a26922883598a02e8861a6bec
SHA512 a2ad8a907e9d3405fefc533ef4ae65fcb32615914163af646c6af02a412df1d3a2250d0ec8e04ab5d04b6d8453122d43d97aa3340358fe5e7c748e9e2117fb74
SSDEEP 192:njQLsS6Xuv9PhDnLUMjA03VpQYouZtuQKIqJZWTVTdhsrV0dwe:nEL3CuvrDnwMjA0FpQY5Z0QKIqJE6K
TLSH
T14924440A7B746001EDA6E9721CB080771D3C61AD8F22E6826DB254694DF6853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\shared_proto_db\metadata\000003.log
Size 450B
SHA256 b96448ab5dacdb1576d03c7868aa60e6aea0b3c441fcf455dd622a7057e83381
MD5 d8740ab8a53383200db931993892cd19
SHA1 4c883121097a1e686128ffa9029da3128863f856
SHA512 16f1aa53cb788297576adaec06aea00c3d07bf509194e2ebd238512fb59d500149b7d05a83bb81582006e76f4a164e2c7a97231c002fa46d29c5cd3c8c954b7d
TLSH
T1C8F08C16F3A0C004C019967A747BAB221774C4528FF8ED0F087660222F776141D8B7D5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Default\shared_proto_db\metadata\LOG
Size 309B
SHA256 fee7aa7d160867ff0608abde5f2e09a72427dcd835ca3c8ea5bb04b7759df3f2
MD5 3775e3bf102254952081bc4af37c1405
SHA1 d6091727c98056cece622833ca16cd72bd55915e
SHA512 156d691fb9177a8d6f40835b4e351443801581d98c68ccbe5b8fc0600b0e41a5a7580a8bea3cfd8de3ab6bc5521ac0a98c555dc750eb993caa5b29bb69b1f970
TLSH
T1A1E0CD50F8A8A5FF404944EF15F75386C7543845BECC2FC50F93C9082947844F946753
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Last Version
Size 14B
SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
MD5 96fb5f155aee0f8cd88274656c58ca83
SHA1 1fe86d9df188b0f86ae2d8da8f7c1ef663258baf
SHA512 fee0061ef23ef3fc35d050501b47db921f490c2aec2a016304c9f27228d3ecf7df9641fd681d9babd275ffd3dbd20e33e38fa5bf583c2852ffcd4b04bedf015c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 1KB
SHA256 377bdfefe93018d43c85ef3e6a4f2404718f6f868c8a1d1087b2c62943439741
MD5 dab6aeb5eeb17c870c6d02c3c8d6ec5b
SHA1 7512f32d1db62d202ad03e46506667fbca24c91c
SHA512 6e75dbad32de391277060d209ac9a272527c6dad8b4c86fb62b239d65eb7f19293e1772044a1c6c83d4e3721c9e5d07a4618243e3a43f88e3a37102955a3bd99
TLSH
T198316573D0942F3199DA95E1B556EA5B1E302026C2508F8862DD071C01DB7CCA63BC36
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 2KB
SHA256 3118adfe6098e1cdca9355be0e9d00af47a9640630ea7532920f9e477494c233
MD5 80f278a52787c50c37a2ffcc0d29dc4c
SHA1 8465b0f947a1db87a4482644e6b6417a5c3205ab
SHA512 9709987d12f7edc203fa928493ff84a09a360703f7f4f6aedc32be52031a3bef68342bf2e72598df7873a8b6f671c3b594e82e25c98467ee2deae1fc7ea2bb2e
TLSH
T1ED51B833A854AA3789E79694B94ABF239B356061C6912F9495DD0B0C01DF39C3317C3B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 3KB
SHA256 cd04f00088507c1bc947835f32af57d10a7af8ca8445fee4865bc4cc20a74648
MD5 58bef6e755a991cd225f8a0f659df929
SHA1 36a1a93f294ea100867eb981f4b0d30966c61dee
SHA512 7d8a3a1a50cd85577887e611b7a277a1ec92c6463e105ae2d2f2c9a0d1345006fff463d13e28d1f45b5bc0766cf537bba5fc484b7b056a8e13dc16ff600d2535
TLSH
T131719437A864A9374DE7DA90B8866B16B7B55127D5D13F98D6EC0F0C01DB3882352C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 4KB
SHA256 6319376b6dec177548bdde2cf867321d4e50fa50846d73dcdbcaf9e4043ee743
MD5 5f646b9d3ae562ad7c9efc02827c0275
SHA1 6c84bf4e080d664604b3fa057d35fdf6c2f77716
SHA512 110814852f0170be466b04700639bfdd901569bc57f66905734bdb84e52454a7a99517e795e5d67ad8ec975375ced2d81ff2e046ecbfee80812c9002c3be8bb4
SSDEEP 96:zuQq/3NkCuf7esj/u8K18Frh/cInURoDotoN5v8D8BSZa86sFZxhUTjrba:zi/3Nb8eaumooDUayQSZaghMW
TLSH
T148818332A864A9378DF7DA55B8866B17B7A55022D5D03F98D9EC0F0C019B3D82352C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 4KB
SHA256 d3999d7d5bc9815c06a73d97a08226fd26829c44797d0bba57f6a6373e838530
MD5 bd5a9b036f4bc23aeaecf2126cdf8d95
SHA1 bc30ef3179a67732695697a5d493640e4b98e930
SHA512 a3e0b1a27a6e6489e268ae1bbea7631108476e5d2f9088ed3bc2ffc1d905574b6d3f4bb6c5af8fde206ca409860a0288534a4847f7c9be4948a77c18a580875b
SSDEEP 96:zuQq/3NkCuf7esj/u8K18Frh/cInURoDotoN5v8D8BSZa86sFZxhUTJrba:zi/3Nb8eaumooDUayQSZaghMs
TLSH
T137818332A864A9378DF7DA55B8866F17A7A55022D5D03F98D9EC0F0C019B3D82352C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 4KB
SHA256 a6aa7b384bcd2af07a6584f195cfb4040d1c2680f8e066216d3f96a47d2f53dc
MD5 cb5033dceace8eb7905e416539d1c29e
SHA1 57ad12ffd2631d905ced501132a6c53e00ad2ff4
SHA512 ca5ab602c298857121019a9347f25b056524615d2824de046c8ca4cac518ef934c16f70e3811c6e67e7664559e34ffe586cf8ae1bbb746d3b4fbd67133c5895d
SSDEEP 96:zuQq/3NkCuf7esj/u8K18Frh/cInURLl8DotoN5vSD8BSZa86sFZxhUiJrba:zi/3Nb8eaumoiDUasQSZaghNs
TLSH
T132918322A864A9378DF7D955B8866B17A7A55023D5D43F98DAEC0F0C01DB3D82352C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 4KB
SHA256 bb3e8db9c164714ed7691d8e85ef890218303dbe8fbcb3890a37fe7f91ba07b9
MD5 8f59a678bfee3f0eb5ed6efe7f48a5a0
SHA1 14f933cde255f993886393bb909c48f30c5d04ad
SHA512 9ceb09bb4b2e49401c857b693e2c742fe9e309a185ef82cb645d4b8a122d34453cd80c4e67fd0aa372f8bb5a4150573099160fa4e4d16dc9dcc853fae9a5cce0
SSDEEP 96:zuQq1lNkCuf7esj/u8Kn8Frh/cInURLl8Doto+5v4cDYBS5a86sFZxcZUiJrba:zi1lNb8eaugoiDUhgKsS5agcNs
TLSH
T14791A326A464A9378DF7D985B8867B17A7B56023D5D03F98DAEC0F0C01DB3D82352C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 4KB
SHA256 14b286a6f9a3752e9a1ffc0de88a8e3f47f5acd837afc72859330100d1ea23ff
MD5 40e168a0ea4f8ad0edf7b2a677b41035
SHA1 c12501c63d4ab5de6566601a560167664712a6d5
SHA512 9bbc83d0372590c07e57348e66ceaae25c817a69d65db84755dd3de7ce6e4c5352977550f1171f5820f42559b9c57778890b931e929c7c98b841a1346bbf9c84
SSDEEP 96:zuQq1lNkCbTf7esj/u8Kn8Frh/cInURLl8Doto+5v4cDYBS5a86sFZxcZUiJrba:zi1lNbreaugoiDUhgKsS5agcNs
TLSH
T11E91A322A464A9378CF7E981B8467B13B6B46027C5D42F98DAEC0F0C019B3D82352C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 5KB
SHA256 4aa2d43325ddd7d9a7f78ad9d8c650e35128d3c36bb290f4f1ad1c5def0995c0
MD5 7a4ca5d3251f265f209bd8fb7b831024
SHA1 e5c1f0e393ea7db108d5fdb9e82f9b1f6e0adfda
SHA512 fabd5b8817d336ee59a00075b09d362d1208f1e0b4bb75d295d861136443ad6d625735be08aa7d045c409d6b402b7d22f2a5de58032526a60f0089afe0bc80a2
SSDEEP 96:zuQq1lNkCbTf7esj/u8Kn8Frh/cInURLl8Doto+5v4cDYBS5a86sip9gPiGBRjZD:zi1lNbreaugoiDUhgKsS5ajp9A9cNs
TLSH
T136B17135E464EA379CF796C1B947BA57A6B0512296C96FD8C9EC0F0C01873DD2316C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State
Size 5KB
SHA256 833850b14ed081a7bb70ce129c08f02e466741f6ff0835c4adb47ae205c2e185
MD5 bdfddbca17731f91befa6cc4201c7f5c
SHA1 18af95db8de516b5f9c60890475db9fd9013def1
SHA512 e4a64e9014925c1bf55757797a5bd8488ee31a54e358f75a50180cafc73574e4344ab6597097ffcfabf00790901497139f895c922ff61af69dfd7c3f3ba91fe6
SSDEEP 96:zuQq1lNkEIbTf7esj/u8Kn8Frh/cInURLl8Doto+5v4cDYBS5a86siKS9gPiGBRZ:zi1lNgreaugoiDUhgKsS5ajKS9A9cNs
TLSH
T19BC17235E464EA378CF79681B946BA57A6B0512296C96FD8C9EC0F0C01873DD2316C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe585697.TMP

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Local State~RFe585697.TMP
Size 1KB
SHA256 492938b7fb01e4ad973d71833984bf77404527a7b29cc0a733a383caee80d8d8
MD5 27306dacec136d16ca57c7bcd8837da1
SHA1 b7e52b7abcd8f4bd4491e745ae98e2863c288b5e
SHA512 95e304cb8aa65b10ab2b6c219b51546690531b70a09f7fbc8a4bc7445f9cddd0db4cc85a5a8224959888c31ab60faf6fd60f27e253bd5836e3e13327e8a28c8e
TLSH
T1E5218773C0D46E3199DA94A1F552FA8B2E705025C2508F4CA2DD031C01DB6CDA73BC37
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\ShaderCache\index
Size 256KB
SHA256 c61469b60bd54a4b0ad03a95fe010b1c040f22d63190bfd9cd2c305cc51eb105
MD5 bbdba656186ae219028d6c706249d223
SHA1 80490de7b6e3336aad551ffc845d26bde2a6822d
SHA512 6db937f87e49b306fb990725a8ce8c4eca013a08e4dd6c19c501384a6208804d8165f49e5c4625d8a0893b3fe83683781aa61bd9872d3497f31345c3f200b634
SSDEEP 3:LsOllllklkXluK7ll:LsUlPuc
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\EBWebView\Variations
Size 85B
SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
MD5 bc6142469cd7dadf107be9ad87ea4753
SHA1 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c
SHA512 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182
TLSH
T1F2A0120384738407E4144051C45C1341287C84570119C0012068931304240CB039643A
MD5 SHA1 SHA512 TLSH

Submit Download

desktop.svg

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\gen-icon-pack\desktop.svg
Size 8KB
SHA256 440ff37da985021de8c1fb161b01504b27ed7133ddae1614a2eaab1aa86ccdac
MD5 cd7e663cddfb4ed6f0f87fe410724bb7
SHA1 cba85410310ed406d33edda3d7752848cb937c57
SHA512 0d902d31e19bf12aed5f0725b1e09325435736e486db6d5d81f0cb110d42ce35655fdd245d300363392a324115d0e471305110fc9192200750571dc6f42729e0
SSDEEP 192:6o0Fjqyr+inwiI7PdP5a3fMDAXCIfExT3HTay7cOBR1cP953TeuLnYPnKr:6rFn+KI7LdfruLnYPnKr
TLSH
T18C124280A2B788E1E72F801F67C1365E4C37315F6F8A195AB4ADE90D5F1E40189DAFC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

explorer_19def1465ae.png

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\gen-icon-pack\explorer_19def1465ae.png
Size 30KB
SHA256 c53a1b37a395ee2f030415a74e26b91d46a45870ad2f8d9d1785a96c0d595371
MD5 ca9bd80b8bb10b213a4e3cc070777089
SHA1 511502b538a079c88407852da9417f5db5714e35
SHA512 122faa023a5fa8e58e111ca5968bda4514d5251f02623f1067f9acc77fedec0776ff6ded1d182ab8875502f795e3f14b5d1685a5b37263d2571fde3973079bd7
SSDEEP 768:5hcbB95YhXmXMrT1CyITAnptgf87jMa90ynRizcWnvEM/L2KSdDtXpUy4:Il95eXmX85CPTYXqTa9JRizcesUJmDrW
TLSH
T11CD22A2CF6399D04774269C14C3CB4E2766C3FB5A5C608599377F9AA017637BEA28B30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

missing.png

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\gen-icon-pack\missing.png
Size 4KB
SHA256 aee42f2a43ae0b17f5f90e540bfdecd189ba624394fe0d2a4c1e1041bb76ffff
MD5 7f1bed1d8371fb91d9be785e64f39f13
SHA1 e230193a4fb8b41bc35e0d61168c5f708e827e4a
SHA512 12767ccff80f2ec233f88ada34ddf90bf85e4f86a1bf69497b718eefb1e5fd81bc86c5b0d06bf2e1a535dbb011889b132d31108f1c4664547d705b33e46397e2
SSDEEP 48:V+OUlb7sl2uJ1/Rc5jGdAlqPyjN0nAU0MEq044IeKD5dcOBGTnY4:oOUlXIb/q6f1ANqP4EdcOBGbY4
TLSH
T1F091B535B1528AE7FE0892B358DD7B5C56B474035B28925844251CDBB8DFD6AC34C0B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

seelen-ui_19def1471d6.png

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\gen-icon-pack\seelen-ui_19def1471d6.png
Size 59KB
SHA256 8016aebb0484736d8c217cf5f4145738b65554fefd681cef1c8507f7d67be04a
MD5 ad286b856bfcf42300efb030ce4c78ea
SHA1 acd3aa6e7033671a63559fdeb94b2bda9bba1a75
SHA512 f7dfbf2cc172e07b02f8d3fd090cdefa48a3befe2ed2a5af636e074587fbc007d7075338f06563b49612417a1ef078627f31bc8f67825125eedd42add0a7d779
SSDEEP 1536:zVykB0SI8LipCFvX2Wz5OJgvS+Wud2WU3Y9CR/qyi5rzwEsUp1GNhWhQJ9A:0RSIPpsvX2W1OJgvS+Wud2WU3Y9CR/q/
TLSH
T14953F866E5AD8EA7536FB2741062063F1ECBA1F12AEB1F12CB56131F0477A34D0798B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

start-menu.svg

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\gen-icon-pack\start-menu.svg
Size 3KB
SHA256 cf070470668bfaa62b332edee9375960d8fe57cc7a070b752eee4af1c581f412
MD5 72676eb0f1cdd8401a2f2b4515bfc97e
SHA1 0c520d104f51e69a6241c57320cd58826b445d47
SHA512 fdd0c99dc073be34142b9ac34994f11dcbdbf36c34a92a0411b75641ce1d39703c5a51dd49bc5de3718ebce5cf8b1c6a2d0ca2911c78442ac8adf7999df6d0df
TLSH
T1B9514314A6EDAAEC8A0F05241B61A9422B3D2473375060E7FD4C0CB3BB035B8DBA7DD5
MD5 SHA1 SHA512 TLSH

Submit Download

trash_bin_empty.png

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\gen-icon-pack\trash_bin_empty.png
Size 41KB
SHA256 1b4af9188ba11ad7961f9191c905a2b374911a6a911faaf082ffdbf0a13ef257
MD5 1b49dbf9a5a442c793ea6386cbd9a614
SHA1 9c9c09e046f0af486c7e364eecc14f8e923afd65
SHA512 959b04de14e1afea6cf65076bdf05a209dd3e55c8e6696662fe6d7cfe206a5789dd1b0cead5cfe588083df1542a2ac804523cb9e4c5ddb5963ae019845220184
SSDEEP 768:jg6cYN0WF/osmjG2oLH9ajIGjTZ43TcCIWByO:uYNKa2oLHaFZ43TqWB
TLSH
T15513F18ED70C4BB7CDD3A423062E2985444E95A2C2856F17F3B897BC9DA10C8E797792
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

trash_bin_mask.png

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\gen-icon-pack\trash_bin_mask.png
Size 4KB
SHA256 c72c53573e5fe6897979ae654047c5a040e543774eae56a57547e154972e8e84
MD5 51947ca5947f4144fe8f3f068f1c302a
SHA1 abe1509eb248256d4b953a95dfd850f62d311f8e
SHA512 387430f0ae6fbee4a7baba62337c5142a98f56e23d908f0eba9c6f96c627d722bc6f2022a037bfce65e9e2a3cf9980dde11d81bb4d314940e172e3f2d65bdaa3
SSDEEP 96:giSSSSSSSSSSSSSSSSSSSSSSSSSSSSqlqzBiCpnDbzI0tjwcI9GaSHWfjOv2N0bl:giSSSSSSSSSSSSSSSSSSSSSSSSSSSSqK
TLSH
T16EA1F73A2C7A8845F2C6FE6511449F89FE491004981BCBDA31590B3DD4EBFD943986E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SLU Service.log

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\logs\SLU Service.log
Size 747B
SHA256 c5bfca839e019b6c999247201965b69f62ef4fee4cec91ff22c994d55adc381b
MD5 cdce6d166bcbe5af542239a33277062d
SHA1 3ae59e463870e01b16957078e36e4d376c2da158
SHA512 8d26f8b309a9f6d31f0fb70f4004930095b2e9ce8108ae8438a36cea2f999b42061d913c2a56bc87e0acb9cb70ee688c923e16d2ea1a1d76614df30d0c8d1430
TLSH
T15D016278829D067B365DC93FA9A329210B8931147E307B843770B4D81BCEC1D8D55A39
MD5 SHA1 SHA512 TLSH

Submit Download

Seelen UI.log

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\logs\Seelen UI.log
Size 3KB
SHA256 d609131ec2630316d6905f9bf7bf44709f3e9fca8ab642ab25984352017c917f
MD5 ec999dfd4a4f12d72358e6c22691f9a5
SHA1 c4e064505e9111099f913edecb42b0c7d606b331
SHA512 a6c6f472d322df5bde56f347f40a883dae43fb131271fc5bfea1642b439bd39d4e6165313b62a6df7af9903a06c8f785c934e7ee57b82902519bb00fc6baf336
TLSH
T11161F2B1537D6C7B3A0DCE7F66E158310EC73424BAA03E89722876840FCC6549E5D6B2
MD5 SHA1 SHA512 TLSH

Submit Download

start-layout.json

Path C:\Users\Admin\AppData\Local\com.seelen.seelen-ui\start-layout.json
Size 461B
SHA256 331f435bbded7efebd2b679aa724e9bbde8bca0a26169686f9cd29f0508adb0d
MD5 28679ca3670cc92b7b551ce0cabe5992
SHA1 42d88067368ccea7cb17419376423859ddee27e7
SHA512 a0310616ab624855edad811e53a8ad38fadf75f9f38744a779e286da95d84c946258fbf301aca9e56ead3f6239aa3cf3fc2c78d9ce60fd05e40b65ec0067d6b5
TLSH
T1C7F0A71BED34437F487A39E0656BD7A0F60C2DD7C2A9BFA85085117934452E3A2B64A8
MD5 SHA1 SHA512 TLSH

Submit Download

2a2e0412b8ad04a2.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2a2e0412b8ad04a2.customDestinations-ms
Size 4KB
SHA256 5b1584db22cfb00225975deca825686ee953771ab62277b0f6cd39ff941b1f4b
MD5 1a95709bcc04691c34e14e578e627f3a
SHA1 b4a7833cd3425180f3dfe5a8ddcd165e58d50126
SHA512 745d3dba09e0bbe0c1562920a3c978cadc85c70688765915653a15b5d990e21302963aa17874c8fb6707e900500f05958becf35fa3a76a9797a8c8041e9b7a56
SSDEEP 96:xKzwkJMR1AzHumz8hkB8zwkJYR1CzHumz8hkK:x9kuR16uKtk6R1IuKK
TLSH
T145A111444AD20712F3F79E7254F37B219A7BB446EB454BCE04C146241CA2F84B8B9FB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8J4KNL2GCPXNRROW11H4.temp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\8J4KNL2GCPXNRROW11H4.temp
Size 4KB
SHA256 87993f037a7e4617a78bcb9ead839bf952f6885f9ffb22551713440f26532824
MD5 d53e7ea61e1c5bf9d4e0e5de6fa2c426
SHA1 8afe2d983e7b51d2e6c6d9f50939c03fde00d788
SHA512 af0c8381652ffbb25bfc1b0f696ccac852067b6310ee7bc98f17473d6a1d7139d08e3b69dc74e14bac01f32e38ed75224d5a6816cf134c42613069241968fe3b
SSDEEP 96:DzwkJMR1AzHumz8hkBPzwkJYR1CzHumz8hkK:IkuR16uKCk6R1IuKK
TLSH
T19DA110444AD20712F3F79E7244F277219A77B446EA458BDE00C147641CA2B84B8B8FB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

state.yml

Path C:\Users\Admin\AppData\Roaming\com.seelen.seelen-ui\data\seelen-fancy-toolbar\state.yml
Size 728B
SHA256 f12081ca5b9f8c63702f16dd84c8f60b3ee042d60b43d7a80a9bd3565bab5a1c
MD5 fc39c4c1ad496a673c231f35d5e8593c
SHA1 3dbd609ba1c5939c7023c88974175f1d30c9fa08
SHA512 e93efb699bbbbe6c9d7f58da0e4af4bcfee5c4e9f956625ef74858e06a0fd39897e4f7ca2b7bb620637ff00268afe016952e71a6b25726d8c2d188456a6f50df
TLSH
T1F70170859277BD2B9FC9406FAC42A5E08110C44F9B46317C1BAD3BD2034C649E7DC546
MD5 SHA1 SHA512 TLSH

Submit Download

state.yml

Path C:\Users\Admin\AppData\Roaming\com.seelen.seelen-ui\data\seelen-weg\state.yml
Size 478B
SHA256 5f54ef63de14924f3cf0328f40c94bda826eff86c2f9337460dac4734314de14
MD5 43d90510d1029d888ec692370f4d9fc5
SHA1 2d0e342a5de6938e02767e4da394a8e5fbf44fe3
SHA512 0d027261108a00e2eafc2db6d843cc04d6a65b98073a6093b05b28664ea2825176c0a612763e5bb598f896d5af5c2fb6021e82643c72f7adf6bd5e033cf656c4
TLSH
T1E9F0D4C551B7F4BAE94500FA54186EFE8C34C46252082578DB7C0A12322181731D17FF
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1380587197\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

hyph-as.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_1428750789\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

english_wikipedia.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_529175701\english_wikipedia.txt
Size 269KB
SHA256 ff105c5b6e65386cd0af95272607eca296c5b8b786c2f0bb4a9ffef20b4cd4f1
MD5 c5b5e739e99f368b294af5d6341d79ab
SHA1 ac32ffdb158540338cee54b3e1c1bcd883b97e99
SHA512 93887a641de44647a191cacdd4b720b4091e4bb5463c0f1ff81bc53b361173b577dcc3717ee9281cf77d27d24576582f89a4008edfd6904e92df32dc8081cc0a
SSDEEP 6144:Uarig5YkFuhe6bke9u8avUdUhWn5dXbcsHqkFnghZwKTZ+oP8:nrd5YkKe+BNavUdUhWn3I+qYngnzx8
TLSH
T14F440A70EA54353BDB9B139F88942F824568D5321F2574A4F69D068A040BFCE877EF2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1324_529175701\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2076-626-0x0000017CDD9F0000-0x0000017CDDA8E000-memory.dmp

Download

memory/2288-493-0x0000023C2A440000-0x0000023C2A4DE000-memory.dmp

Download

memory/2608-312-0x00000172314C0000-0x000001723155E000-memory.dmp

Download

memory/2632-606-0x000001BA687F0000-0x000001BA6888E000-memory.dmp

Download

memory/3860-158-0x00007FFA97D80000-0x00007FFA97D81000-memory.dmp

Download

memory/4108-14-0x00000215C3CD0000-0x00000215C3D6E000-memory.dmp

Download

memory/4148-35-0x00007FFA97D80000-0x00007FFA97D81000-memory.dmp

Download

memory/5208-635-0x00000246EB860000-0x00000246EB8FE000-memory.dmp

Download

memory/5348-563-0x000002DECD460000-0x000002DECD472000-memory.dmp

Download

memory/5348-551-0x000002DECD760000-0x000002DECD76A000-memory.dmp

Download

memory/5348-539-0x000002DECD490000-0x000002DECD4B2000-memory.dmp

Download

memory/5348-547-0x000002DECD680000-0x000002DECD69C000-memory.dmp

Download

memory/5348-561-0x000002DEB5220000-0x000002DEB522C000-memory.dmp

Download

memory/5348-562-0x000002DECD3D0000-0x000002DECD3D8000-memory.dmp

Download

memory/5348-552-0x000002DECD790000-0x000002DECD7AC000-memory.dmp

Download

memory/5348-553-0x000002DECD770000-0x000002DECD77A000-memory.dmp

Download

memory/5348-550-0x000002DECD6A0000-0x000002DECD753000-memory.dmp

Download

memory/5872-972-0x000001BB0E3A0000-0x000001BB0E3A1000-memory.dmp

Download

memory/5872-981-0x000001BB0E3A0000-0x000001BB0E3A1000-memory.dmp

Download

memory/5872-980-0x000001BB0E3A0000-0x000001BB0E3A1000-memory.dmp

Download

memory/5872-979-0x000001BB0E3A0000-0x000001BB0E3A1000-memory.dmp

Download

memory/5872-978-0x000001BB0E3A0000-0x000001BB0E3A1000-memory.dmp

Download

memory/5872-977-0x000001BB0E3A0000-0x000001BB0E3A1000-memory.dmp

Download

memory/5872-982-0x000001BB0E3A0000-0x000001BB0E3A1000-memory.dmp

Download

memory/5872-983-0x000001BB0E3A0000-0x000001BB0E3A1000-memory.dmp

Download

memory/5872-973-0x000001BB0E3A0000-0x000001BB0E3A1000-memory.dmp

Download

memory/5872-971-0x000001BB0E3A0000-0x000001BB0E3A1000-memory.dmp

Download