ab67f9d5738dfee0bcfd78bcaf7da53ac0d466f754bae9bca35fa7becc777856

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
05/05/2026, 00:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Xeno-v1.3.35/Xeno.exe
Size 160KB
Sample260505-bb2llaet8v
SHA256 ab67f9d5738dfee0bcfd78bcaf7da53ac0d466f754bae9bca35fa7becc777856
MD5 d9209ad36cabe85ca296b6bb31e0fba6
SHA1 9750d61e84dc4e85f6ce8fa916a7b31a4f3e8f73
SHA512 6a1ac2208ff19a84a95c8761865a0d26f36e8c0de7f89750b0a5c9f2153edf620f16340cbf413b3c77e20e3070f047a2c057ecde1143207912f8646258630540
SSDEEP 3072:XqvmgiYSoIk8uIHzlqRwa/YB26mDIgHaCVK:X64k83TlEvG4IgBVK
TLSH
T140F35C07A6A851BDE1B6C679C9924C41FB727C198B71A6CF07507EB60E737D0AE39302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Xeno.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Xeno.exe

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
7	raw.githubusercontent.com
8	raw.githubusercontent.com
9	raw.githubusercontent.com

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134224163683771332"	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\Local Settings	Xeno.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2488	Xeno.exe
2488	Xeno.exe
4692	Xeno.exe
4692	Xeno.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
1720	msedgewebview2.exe
2876	msedgewebview2.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 2488 wrote to memory of 1720	2488	Xeno.exe	80
PID 1720 wrote to memory of 3192	1720	msedgewebview2.exe	81
PID 1720 wrote to memory of 3588	1720	msedgewebview2.exe	82
PID 1720 wrote to memory of 3588	1720	msedgewebview2.exe	82
PID 1720 wrote to memory of 3588	1720	msedgewebview2.exe	82
PID 1720 wrote to memory of 3968	1720	msedgewebview2.exe	83
PID 1720 wrote to memory of 3556	1720	msedgewebview2.exe	84
PID 1720 wrote to memory of 3556	1720	msedgewebview2.exe	84
PID 1720 wrote to memory of 4352	1720	msedgewebview2.exe	85
PID 1720 wrote to memory of 4352	1720	msedgewebview2.exe	85
PID 1720 wrote to memory of 4352	1720	msedgewebview2.exe	85
PID 4692 wrote to memory of 2876	4692	Xeno.exe	88
PID 2876 wrote to memory of 900	2876	msedgewebview2.exe	89
PID 2876 wrote to memory of 1604	2876	msedgewebview2.exe	90
PID 2876 wrote to memory of 1604	2876	msedgewebview2.exe	90
PID 2876 wrote to memory of 1604	2876	msedgewebview2.exe	90
PID 2876 wrote to memory of 6004	2876	msedgewebview2.exe	91
PID 2876 wrote to memory of 3480	2876	msedgewebview2.exe	92
PID 2876 wrote to memory of 3480	2876	msedgewebview2.exe	92
PID 2876 wrote to memory of 4732	2876	msedgewebview2.exe	93
PID 2876 wrote to memory of 4732	2876	msedgewebview2.exe	93
PID 2876 wrote to memory of 4732	2876	msedgewebview2.exe	93

C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe
"C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe"
1⤵
- Checks whether UAC is enabled
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2488
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Xeno.exe --webview-exe-version=1.3.35+87ae4f96f8a0927052c1120167982fb069afd1b4 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=2488.4468.1046415756071456584
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:1720
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ffb4860b078,0x7ffb4860b084,0x7ffb4860b090
    3⤵
    PID:3192
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.35+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1704,i,5960866282415682759,8578608758949218872,262144 --variations-seed-version --mojo-platform-channel-handle=1684 /prefetch:2
    3⤵
    PID:3588
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.35+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2020,i,5960866282415682759,8578608758949218872,262144 --variations-seed-version --mojo-platform-channel-handle=1904 /prefetch:11
    3⤵
    PID:3968
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.35+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=1716,i,5960866282415682759,8578608758949218872,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:13
    3⤵
    PID:3556
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.35+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3544,i,5960866282415682759,8578608758949218872,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
    3⤵
    PID:4352

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4396

C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe
"C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4692
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Xeno.exe --webview-exe-version=1.3.35+87ae4f96f8a0927052c1120167982fb069afd1b4 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=4692.3980.9168534551920640106
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:2876
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x1a0,0x7ffb4860b078,0x7ffb4860b084,0x7ffb4860b090
    3⤵
    PID:900
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.35+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1744,i,7072766643342211734,14048895556957696756,262144 --variations-seed-version --mojo-platform-channel-handle=1740 /prefetch:2
    3⤵
    PID:1604
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.35+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=1380,i,7072766643342211734,14048895556957696756,262144 --variations-seed-version --mojo-platform-channel-handle=1896 /prefetch:11
    3⤵
    PID:6004
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.35+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2272,i,7072766643342211734,14048895556957696756,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:13
    3⤵
    PID:3480
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.35+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3424,i,7072766643342211734,14048895556957696756,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
    3⤵
    PID:4732

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 4b3647fcce9bf70547033d44d4932cb514caf0eda723297210de009ae4b2b2da
MD5 07aaf0f93d853ca779111b1e90871266
SHA1 7b9cec0426691bc1a7cac8a28d96e26a616646b9
SHA512 ce821d6ddf6556828246d9ad0efac967e2f3996dd3cc9a182da3158a9aa1ba576b563942c819e15e92d358cdaa76f5ff775fdb0650a979c30698160d6cfe5f12
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 67ef7985b205ef986aefe17972a36de2a7bed44dfc010a2d9f8f5741bdd84acf
MD5 7a9e44f10198cb136aed27b824eeb78b
SHA1 374208633a86639e53c106df57ac09f99789b9d9
SHA512 bad4f8ffb16a9f2f76a0cc645ff0b69fa360d7a7eda9badeda21d9abfc21a1d8736f1564765ccc774cff658ca158619140e96083fb841bdd839f13ebd16c4fd0
TLSH
T171D02B327E411734C47123330811545C1C44C60AC1060104141751AF6B240700D0AC93
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 50e28644ba79cf2f5d1dbc23e48bbc01747551bc9a2244f247b16acea7633d9a
MD5 dad92c536041912943b85aa7e4510a4c
SHA1 1a73967c42517cc4e20133e2906df8fdcd9a9621
SHA512 d63377998fa0284b69cb0ab47b80489e0c6e850053dab8908a016b0667d9913536f1986187697bc9126b1eea61d2472da97baef3a5d39fbae23c9c2fc2e779cf
TLSH
T1C8D0C031FE502B34C0B02F33089284691D9C810AC0410302148252AF2F302610E56983
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 bbdcea24c1ecf8363041cee7a572becf72639094aa5fc87f41af71c6c48ecdd2
MD5 b777d66a6a124d5fe26312d42cdfd88f
SHA1 92ce2bf63ad5742c3355531aaab9e6f66d393856
SHA512 864ce8fe8da646392c7cd0a3279ea4471390426fc25107c68664135955d81e5d572f7fa437c58bfd423eb0b571cfd644ca7b5d806274fbb81ff6dde38a0b612b
TLSH
T134D0C031FE503734C0B02F33085184691E9C8009C1410302148242BF2F302610E96983
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 f5500c18d8995734de5fbb9c7ea66ec6248c4b73bf2f7cbd70624580cd373a79
MD5 03131d600bd43906ec6edd2668087b37
SHA1 40448eaa16bc15321e592d6e8f2c8516d7038a42
SHA512 2a52bfb187171f65fc1890394025ac34f8867998d71e3b79c4bfc5ca46a9989722cc850725ebed43554447b3e745995d04a5853da996bc6d12f9e2bec8a8d2ae
TLSH
T154D0121633020338C43025330402610C0844C91BC1054004582A861D1F540701906482
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 6fc8c7df7cdbefc21c767f28f4fcb1fb2696fba6a5658d41cc1fe91fd4932e3a
MD5 ed3b4567441ebb540563bc733d96aa2b
SHA1 36631bf751163582ec58bf8f1adf9f1cdc6de6e5
SHA512 1ea0a272b5d95cb77b2d026a3d5dc841e660dfa929de1712e4f89b20a4490c1da11d693975f98f7bbdcb22feed9262b1f3595b97ce02847dcbc79ed23f3b4365
SSDEEP 3:MsFlYhXllLlX8l0qlJrRl/lN+flU98:/Fiz10BJrDtUNU98
TLSH
T1FF13025DD7CA1405D1744034944A87A053EBE4027D56035F10D22C355C4C71C1C2C263
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 4ca57b7f4b83d3cae3b764cf11cc0e72b5d688b29f10f581999d72e46e1cfd3b
MD5 cd999d4da87c45028099044403bc5aca
SHA1 6f7643b40a8e49406272517d036de68d5d105d2e
SHA512 68c4a8732fbb1a2727485128b3297fc55ab439859f2b942abbf407431f9f077e6620f50e73bf6a58fd64fbd8d2178d60ddede4fbcc67063647a0908c40ab167d
SSDEEP 6:/M/PXGuEVt00EELxllfrm5hfdMGYCCcgJU0OhI:U/PXK00EELjY5JdMGYCGU0Oa
TLSH
T18044A7B427720544D104113C82264368977ED9219C27F38BF121705D3C993232940285
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 6383c87d386106645fbf3329428a422811dbe91ffe50da68d87587f6ef74ea5b
MD5 20c5823c5726c74457ec91e14b1ab55c
SHA1 3e996887a4b9752bc19b33268169555377fcc759
SHA512 91cb9e923551e22600a3649d26475ca501f4b1b5e39d116c5aa4cd051d7db3296f6c0cd823de9a998de56907d0b51eb1fdd6fa91ed35bc5af882352a851ae5f3
SSDEEP 96:R10KXLOwUFcIj+f9o/Q5K1UuzJWY1Tleu+pqnzcx8WBCUoMmSuML:RuTcl9oI5AU20rpqw6Ixoba
TLSH
T146165BD56F686402EF07E935F6CAE0A42EB8E740F252A5DFE006816CEA943D12EC561D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Cache\Cache_Data\f_000001
Size 225KB
SHA256 dc413b22275707d51e310fc07dade5eb89b6455ea459447f1612e0582fe70fb0
MD5 3d83bda5c763ca679fcad1b8bb446f85
SHA1 1ce33ae9ab02567bbad64d4b07f76eef27c18a1b
SHA512 ced8754b615fbfd68f2f95ff751800fa79fa86e9e4cbe8a2f03a5119b169c0f0786a4e03f3649aac7c622b6634698c2b1244be0ad0ef2a15c8e9ba3e01f0d38d
SSDEEP 6144:8hVTsHBiBQ/+FPz/msVUCjkzgWpcKqVB16y1E8kvb68X4:VHBgok/nRjk0wcb7rkvBo
TLSH
T1F234238ACF495DB91273D5498518B325CD505A8EDA216B8C3E7CCF423BED323AC9A583
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Cache\Cache_Data\index
Size 256KB
SHA256 2175ee15a9f2e8d5c02df55d7b3eb1e40fda9efaea6e485c60f736a0dee5d802
MD5 c17f6eb0fbaff2ea7efacb25f4dc8ca6
SHA1 8f6c2af1754b74ed6832fbcb3a736b324fee0719
SHA512 7f261a646e80d48ca8631008d94e492dfbdcfe4ef4f3c6cd10d262e3ed70a1797ff8154e67cf3a511a05ec9000cd027d3068160b21937f364b2c8c9f953950c3
SSDEEP 3:LstltltlNllkll/lIUPlNnsNtl:LsXt13lEtIIGN
TLSH
T14A44026913414C05C964427C480187251369C100460F5747064599114CC67400E05080
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 3e9cd761d1ca5827255d1526e2dad5ed23bb83f47d9f3d9da034878125154fba
MD5 3039b9fddd83afb009fc065be16ebee1
SHA1 a91375e9f0490bd35adf5695ee9d7124f3af37d9
SHA512 8dbba1471f29f99d2d7347515f669851303de93bffc0d73d237b2c260f9ca4bdb3531e683ea75bfa19492c6beebae3800151fe5c22258eedc29c9282b0e8fab9
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Favicons
Size 20KB
SHA256 46b5ecada4edb2585f87953f7847aefc938be2404b9d9455c772b97295b7b1cb
MD5 babd43551f1b29eb82e221460676126a
SHA1 e9bff307613a14b35830893bdb6d1ecc931b425d
SHA512 5ab681c170dbd1d374bd66edd02cbe21272819ef7389ad1e886bcba112deb91eb68fa930747986da5ca794881939570013e38edd9f8e6f718f7d202e74a82f41
SSDEEP 24:LLipxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBmI:UBmw6fU1zBmI
TLSH
T1C292EE075E383407DBA10E7D366B18768E3FE26C5FA29C94347410618CF9482D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\History
Size 184KB
SHA256 af1dc3dd7d657aa5dc6d216a136292cefe67380d5c7ff8c904fbb6ce2b3404c1
MD5 a794759e47deab277bcd71be84aa5df4
SHA1 c53bd2ef521df1f307c5039a6b6824459e376b0a
SHA512 8693241a27c88dcaa3408db521bc24ee545c3becd0121bb25807dc53743c6b6a114eb4bff243496f75e93d71ca2b1c535065ce272b27e3e8ee0b123fab6ab8fa
SSDEEP 96:HBVs8r7xejzH+bF+UIYysX0fxQp97GEHt/DfLjLqL/GibgI4VgNr2jWRk/E0eG:HBeH+bF+UI3iWGVGWN3qL/QVgZQW34
TLSH
T117040B1E5F643312CDBD513768E745A3587DF02F8B236AC66C6204B4CEE2646B02C5BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Network\Network Persistent State
Size 229B
SHA256 153938ecc186cd98a2f1ebd1f53ae88cfe9d9884bd470e9166a53348a071fb2b
MD5 5c9f79435fd36dd2a8914a542651f839
SHA1 81f4f5faf2f14d448626b3f49618d11fd4295cad
SHA512 0e7cf3372f919b11b0c6341bc4df2bb8ba5106463b06c74f0736b14755fa23a78db7e9b3111938570225435169bd01f7198b6124007defa77e90bbe21fd14588
TLSH
T17AD0A7B655601AFE075583E01A24685BCE7D4003422C9DBAC6347B2D43A11B9901095B
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Network\Reporting and NEL
Size 36KB
SHA256 951ea521116baf347ce89b628eabc22479fb8e3edfb7597659db2174fbb59804
MD5 fa739570350b78ef09e5d8ca61d0d71f
SHA1 d4e932ca96e76aeb84d3a151d847658df6a5555e
SHA512 8dc44c2f20c0a051568e7479e4553dbbf8ad4ee6b4d5474d8493c4b957f563f858918d862621ff7ccb190be693877dfb0a1245998925f47f9976d431a007ac86
SSDEEP 48:TqIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSB:+IEumQv8m1ccnvS6
TLSH
T1BDF2149E0B1D3A10C4F89674EAC10DC37D7D141D8B96EFC45AEC06F2FF866A2A538429
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Network\TransportSecurity
Size 356B
SHA256 55cbcabc2d527fbf996351a27fcf33ee582a7a6aae43ad6e9fdbfbc50c4f2eba
MD5 415d0f0d6d536a92bb0fdc27f8fff32c
SHA1 1ada60c4661d30106dc7113cb7f076521effce7d
SHA512 e4d2900af8d78196492fb246b1a963f8185d79c2dbfc96db006884470e665f000e7a8c357abe16c04d2035c9c327e6600a89fa69d2c336bdad3ec7e3a0674bed
TLSH
T147E02073917FBC6A10AC8A779D887C446A77A4304081B4ECC567C73F90CC4E712174A2
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Network\TransportSecurity
Size 356B
SHA256 f900cf967120571dfbc94bda761237dbc11a870def434a8af5b801cd28fe294a
MD5 3643a21fc611194d0421879d07abb0f7
SHA1 ee42ed597e5429ff5071dda652735a4a39d0bfdf
SHA512 65503c4a1f79229a1ef2046661735bd896ba318d12be2221c98b872d903bbcebbc667225a47f03bd7b26510c47936f403351bbbbd923eed539d711b040ced1fb
TLSH
T1D3E02072D17EB86F10AC4E62DD887D486E7AA4345082B4E8C5A3C63ED08D4F712074A2
MD5 SHA1 SHA512 TLSH

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 d760495b93061dd7c792a0c0a49b3017473391a8380eecb7de062a9eeb97273a
MD5 5c0d9f95f8ad8cbed970d459008654ef
SHA1 0c312b0f839718f2359e13b9537fb4a119ffebfe
SHA512 5380eb792122de0e6afe1c025f92b231a9d4a29ad9231efa982460be6ef33b7ebfcdb6ba29f23c303496ca0afb6ec3bcbae48ad13effaca486d7c476461af1e7
SSDEEP 96:stUC5sA7mbbDeLffqzEZ8i0vhEdkm1m/7qx+WVHMSm+uecadQjv+guHp4cr2KEB:stUCbBLfhZ8pa14/S+Wi8dewpZr2K8
TLSH
T195E1A7079E28A97B4CC7E618BA35BB53D2FA102276D15E58EBF8461C09D76CC220790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 fad2003fa6eb24ad2e09e55fa6ea454831758fa38cbf10e2db77fdb933a3e219
MD5 71e4abd090204e7e3a72da825a7676e1
SHA1 5eab15c4ab8be532cb8068d23a536261cabbd9f1
SHA512 9158b2974ad8ae95e866fbfad274d3ccd704e514d26a1edbfeee3ec6ff656a4e8296561dce216ed8b9a1aaa4ef5fa9b9e8e087050dea4e3859bc1e209b29ef3d
SSDEEP 96:stU85sA7mu7b9eLffq7EZ8i0vhEokmdLm/7qx+WVHMSm+uecadQjv+guHp4cWKEB:stU8bmLfJZ8paAda/S+Wi8dewpZWK8
TLSH
T11CD1A8039F78A97B4CC7E6197A35BB13D2F5202266D41E58EBFC861C09D76CC620790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 7beb066f83e7383e91307c545bc6d863a90421119b1dbaa9c6f2e4c29dabf959
MD5 95d1cf17cd3965d29e91dfd30c75e4ed
SHA1 6e96a2379a170c78b1832231146b9ba18844ddec
SHA512 16c67b34b8584757f4c4ad2e3d774fd23ce8e04aa5a2cd87d5064c6eaa481713034d6147fe982e6ec7b1cafa3fdd3b93dfaf728c888d67416218c1fb64780b62
SSDEEP 96:HlmiuPlf/ROoKOpkF5d1oiV7sMaTEv9V5h5pg5+ee1ISANauoZKMyY:HNSWGMV9lLIS2l2V
TLSH
T11CD1D6A74129C478AF858AEAE8393ECF9DB6018F98D54D1683E2C44807C2FFC21CE4D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 ad59eb097837f464caca88843cf90e17dee30820440d293a61d242e015f3116b
MD5 63f453bc0deb21a582e0a2448e158f75
SHA1 a78c279d8f6ded119b1c25000b77e2e0676d6a87
SHA512 71710828f58c6b1cb8708ab279724f958e9a74f5f1fe4820cb8df9810616d133c23b11d0534e8a1bb3284d757dadeaf716871b0122b298eeaca1bac18451ec87
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SharedStorage

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\SharedStorage
Size 4KB
SHA256 1fe8f6113488865c546d2faa55b21482662ce4be19d4f505eeefa09bc3131489
MD5 b9263bbf24428aaca95d04d04f3aeb6f
SHA1 5346015345f6df766df4bc9b42da076f6fdd440f
SHA512 5bc2978bc96e1347500db552e2a2dfd9e5df25c8e16d3ab57e5519de43cb9c08f5aeefd1a6f6947d7fa253505918763b932f622636fc2a7a429fa72a5b49c7cc
TLSH
T1EE810440534000F1D05407F755D1130C0F07D3D4D5410F0355010041CC51D445C70FC4
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Site Characteristics Database\000003.log
Size 40B
SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
MD5 148079685e25097536785f4536af014b
SHA1 c5ff5b1b69487a9dd4d244d11bbafa91708c1a41
SHA512 c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Site Characteristics Database\LOG
Size 351B
SHA256 3142c913e5db0ff89c77e4ff545e5475fa3d53893408b01eb0cfe67c6f06ac01
MD5 afcdf8ebca1ff2c9c0fe167b596e8e8f
SHA1 d5842c34cc92d08b7d4376a6aae89aa985ba8745
SHA512 c0bb25bf6e23243c96add0435717ed50a467b12c4e5ea8777c98fe4bbc11d87fb746d65be71a963807ae3c9ea2e4e66fee7c9f840e6f4bdf59706abe2746db3a
TLSH
T104E0D87125CB876B4B8735DF8776E34EC6A7740BFECD27251D28D644150B108714AA01
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Sync Data\LevelDB\000003.log
Size 46B
SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
MD5 90881c9c26f29fca29815a08ba858544
SHA1 06fee974987b91d82c2839a4bb12991fa99e1bdd
SHA512 15f7f8197b4fc46c4c5c2570fb1f6dd73cb125f9ee53dfa67f5a0d944543c5347bdab5cce95e91dd6c948c9023e23c7f9d76cff990e623178c92f8d49150a625
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Sync Data\LevelDB\LOG
Size 327B
SHA256 efd5543363557235bbeee11958e2d5e59f761ae177b91ad5e729aa98b6d30a6a
MD5 27f143e67fac8ee626f6a5ec2c5e2705
SHA1 0d378d82e8f89a50732e5971f2966dc5b4c0e01a
SHA512 cc9b9f71ce2d4206ec7ba4f78a0490ee81276190fd2d96ad95d4257725de9aa1e830eb32c428c5635004d90be6acdb0f07e3ab410901cf21180bcdcac8793378
TLSH
T1FCE026B265CA86764B82B9DB8BB9974FC7F6780BFBCE37054E18C4042807108B168A42
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Visited Links
Size 128KB
SHA256 eaf3744ef9deb90a706af7ab3dca998dea2e3e01adc6985472aa930fee32ec3e
MD5 d7b3f5b4bfb400d5f85c19142586aa35
SHA1 ee1f27ef7c8553044ae950c4e8c8f1e7ad7ce5fe
SHA512 45ef6da63d04950940e177deb8954801d2e74cf926de6fb32ab87788917f5f207e1969a18abbdb33f4fcdea7eee6fb5707c5f720ea4a5553403969c2ff6959b0
SSDEEP 3:ImtVuJrFWu11l:IiVu1c6
TLSH
T1D0D3040743134504CC47D3744C001D05C171D414D01305C7033757054DD454D15D3541
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\Web Data
Size 216KB
SHA256 2a7b3bb5ac287c4d5fd81c76626b1e8e15f32f34d2b37738fdc98fa6ad43baaf
MD5 4ebc7325aec489f53e4635ea414d14a5
SHA1 c85641375cd9bd4a26922883598a02e8861a6bec
SHA512 a2ad8a907e9d3405fefc533ef4ae65fcb32615914163af646c6af02a412df1d3a2250d0ec8e04ab5d04b6d8453122d43d97aa3340358fe5e7c748e9e2117fb74
SSDEEP 192:njQLsS6Xuv9PhDnLUMjA03VpQYouZtuQKIqJZWTVTdhsrV0dwe:nEL3CuvrDnwMjA0FpQY5Z0QKIqJE6K
TLSH
T14924440A7B746001EDA6E9721CB080771D3C61AD8F22E6826DB254694DF6853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Default\shared_proto_db\metadata\LOG
Size 339B
SHA256 e8651af10ff18d06824e5f070a702283b06170ac08896eb970980c3f84f80e52
MD5 910ea05075fc3da0a1fa5c9ce851d816
SHA1 c2d49de0e6c77b5a1b82d2cbb46a4baf4f0df7d4
SHA512 b38d9a085910d363201a11018baa76063a13ff5b5a8eaaf84a96914701171b13f687f6702663a8d99d8c5b401acb5aa9459154aec64f3f7b8906902424f5ca17
TLSH
T1EBE0206174DA81FF454339EF4B76538ED79B380BFDC92F154D14C908540710AB14D603
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Last Version
Size 14B
SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
MD5 96fb5f155aee0f8cd88274656c58ca83
SHA1 1fe86d9df188b0f86ae2d8da8f7c1ef663258baf
SHA512 fee0061ef23ef3fc35d050501b47db921f490c2aec2a016304c9f27228d3ecf7df9641fd681d9babd275ffd3dbd20e33e38fa5bf583c2852ffcd4b04bedf015c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Local State
Size 1KB
SHA256 37b5b1e5fc909beeb2690c0188d86795c6abb141223614581479d5cb66a410b3
MD5 70caeabf91cb356e930bed8a58fd5823
SHA1 97f9c3ff4fe67bd616a4ab8dcee5b2b10bf1b68d
SHA512 352ab4b189bf5763a4c994aab3a3be4734c6c66e57aec293a721e142db164204fee2d7fc75aff3dc94a265d66824da15a86e0c381912431e6ffeccd64c11311c
TLSH
T1C53165B3F4A02F36BCD1A6467642BB5B2E31116996105F4891EE0B0D03DB98CB726C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Local State
Size 2KB
SHA256 fe0b86c542a875773e0c16cfec0eabd878dabd52b9053af43ea247d79ab2f031
MD5 d92686094df71d4725c7ef1c33fbe7de
SHA1 861231a0659857a8a98db7528af4d9d7791955ff
SHA512 b0cdc82982593b4d21de14cccc8d2c4a0f3152185681d2f4a7e4253cff1a49c8c6c62d698f1f8e40c5465370f5fbe2cacf6fb58e774397781c951756ff4f1183
TLSH
T1AC51B873F8646E3799E29645BE4A3F239E3651659B612F5095EE0F0C02DB94C3302C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Local State
Size 3KB
SHA256 f47dbd7a65edbb1ec07ed95d98894a2ebf105f521fe59647bbeee51c26257495
MD5 d3862384f2579c84398f0670327b8dd7
SHA1 cf5f34750eb303639c07e2fb99147b98fa06a2de
SHA512 66b426c72bd6d049701fb1ff30f8e16265c62071969e4a714bbf7b69008f84532eb697fa694fee0e0ad1f2c558d98ea734ece05fca93f49ed786750f99e22934
TLSH
T14271A633A8B4A9374DE29A05B9863B17B7661126E6903F94C9ED0F0C02DB68C2341C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Local State
Size 16KB
SHA256 04c21b07665c7ba7eecee2404738f78577ae26d8284b26946987fb4bb4ecf6f1
MD5 1c9fbfb5b02bba3142caa87110c13f6b
SHA1 f9254e3c329a697875749284b71310ada48e87df
SHA512 cbe144659d0a3b0f25c999b38897fa0ecb61efc07b6f24ed0eff6a806d3ba04042bed8f46d0122ee3feee17b51ff883f48ce4a99a7af67e1d4dc0c32d4662ded
SSDEEP 384:z/fTPLdSWCUkEaV8DNYi0qnSXaqZvK3NbYTqGYR8:DTRMUVai1SKqvKSX68
TLSH
T14972BFB3AC78AA1719AE9A06FB5B320B9DB5D054C5D02F9DDCEE1F0D06DA68C1321C13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5810f3.TMP

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Local State~RFe5810f3.TMP
Size 1KB
SHA256 0def3f13e31a1cbd204e91b62c10140915b2192eede200f4f89fdb8f5ac0e84f
MD5 0b84c606028013042f9b371afe0ac286
SHA1 b4f4c6f01d6920293f221a09f7b239570c46a11e
SHA512 2aea4d81b4d5ba4fe3c6e25d8a4900bd9258c5a293ee6e6eff5e2f0e1626df20e26c73627f7204f9a080704213b7fa09fd2f4135f95a060aab9de7dcaf0f10ed
TLSH
T1FF213273E8E42E76BC85A546B652BB8B2E20117996145F0891EE070903DB9CCA766C23
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\ShaderCache\index
Size 256KB
SHA256 553385aa9a9535fa493a352dbcdd0c0ad2a6723170fc6efba2d6cb7e05d663b6
MD5 27b336203258ae55644b92c343b148a8
SHA1 6b1fdbb4dd396ee08a3b4e92dc27745a1d2978d6
SHA512 d76de9b27fb5e0e8a2f0598e9dfe1d743151ca416fbe80e372a5a5ea898ce528677d7ea90fd6da8b887e4947400563c06a0f3de3a6f5d1c274dcad1ef9867ce5
SSDEEP 3:LsOllllklkXlp7ll:LsUlPl
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\Xeno.exe.WebView2\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

autoexec.lnk

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\autoexec.lnk
Size 1KB
SHA256 eedc57c5ae36b0582563b99611c7ac7126273537b3187d935dbef567cae6b52c
MD5 f036c05ebb02c00765dd216fed5fe817
SHA1 37623de11ee39c2e510f34b15bb6a2be4130b3c2
SHA512 f2aa384e2e43c1a7056bd3c2da6ba12fdfee752388f182373941b449ff9e6fac3f7df6b3b995c77de2e2c2c02ba24bb336dae3f8c469fa1f5107867494c7918d
TLSH
T16711DC180FCA0E34C368C0F986B70B289222B5549369AE4C0028434EEFA1A023849F1F
MD5 SHA1 SHA512 TLSH

Submit Download

scripts.lnk

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\scripts.lnk
Size 1KB
SHA256 69912018d8b1d7cd2ebd5d5e7bc5a6557d6aee150cbdbb157bf31fba47227745
MD5 23fe365d67d147d9f964127b86756d84
SHA1 dbcee0189a82e2dfa68c3250877b7c6f895f2f2a
SHA512 e47a3f48e8ff8846e17bcc7785f08d0a0b5972b7c01feb236463335ba4ab591c3cdb15b151f114e2a0a953c91ff909dc839400ccb504ba3e33d46631c721a265
TLSH
T1E71123184FC90E35C2F480B9C1F31B694224B944574ABE88006C9349EFA1F0378D4F1F
MD5 SHA1 SHA512 TLSH

Submit Download

workspace.lnk

Path C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.35\workspace.lnk
Size 1KB
SHA256 23507e37d0f96052ee63ee37ac9722bd582a0f64b0b58ade52415a3d9a3ea3c8
MD5 b3cafe30ce6562220255070a076ded89
SHA1 05edbcb47878824cb2d9273145fb632d60cdea02
SHA512 5f1962da4a3f28127de1f3b79502b2143261ceb09caf3618646a48a725ee77c8d5869c364edc88fa3037d9e0e3d1897e941f2c40045a11ec86f65bf98df53f55
TLSH
T11F1100181BCA0E35D3BAD0B886E75B259234B544D359AE8C0034534A9EA0F42B455B2F
MD5 SHA1 SHA512 TLSH

Submit Download

b27fe4f5-7906-433f-96de-6d535ea39eb7

Path C:\Users\Admin\AppData\Local\Xeno\Tabs\b27fe4f5-7906-433f-96de-6d535ea39eb7
Size 22B
SHA256 cf603e7740f7f7cbf211c7b240f8426c0bf602353290cdb3c9a52adbb0dfaec1
MD5 7f9e869133ec86dd8316e6610419e87e
SHA1 c7f7c502d3829603581008641cc1fddd0b020b47
SHA512 82eefffefe5175f27d629cb07ee36a954d585d4be65921a9ecdd7195331ae2440845686b870d6180ebd587ff5530e04a04af0c9515f9f2feab919b61ef91c1f4
MD5 SHA1 SHA512

Submit Download

config.json

Path C:\Users\Admin\AppData\Local\Xeno\Tabs\config.json
Size 78B
SHA256 33faf4ece94eb20a2b0a31ba74a2f8f78c90dc3e5667e9595ce086f08983af10
MD5 561d64d50658f15b910befd7a4a9e0d4
SHA1 b61632347cbcdadf5f12efaebf23f2057cdca470
SHA512 44a09b8093aed350851fdf715cd819609fa39951d63eb7739c504ae918581d3b92325b6258a27d855e2db47c0166346042d416a2c4781d16ec64124bff3e8272
TLSH
T19DA02433F351143500777375704D000DD000C0C30004C4107471417D0F73F111040C04
MD5 SHA1 SHA512 TLSH

Submit Download

XENO_CACHE.bin

Path C:\Users\Admin\AppData\Local\Xeno\XENO_CACHE.bin
Size 36B
SHA256 3bab55816f9c1c63b26bee8027a74983736938cfa748d9c91230391d4bacfb88
MD5 03b4e88d732421deccbdd05cb90b0513
SHA1 1ba9d3bd3af60ecc041e93251633b5a0fbac4d9b
SHA512 40e01403608fc8d8c0bc7bc6e1367a472778dea5d4dde4d242b37b0860d098075ac71cf24abd85c6b9ee67bf6adf80adaaf279a969f4477555807003276a2c75
MD5 SHA1 SHA512

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Xeno\settings.json
Size 101B
SHA256 88e5c8567b1cad0fa2a42a21ac273a1ffb8a6992be41e5de548d11f281f4c373
MD5 7109faf92716c37ae9d65f89a2477be0
SHA1 de2903bb44600fd8a69649c395335d4fc226c5e0
SHA512 f41ca49622d3458c1365fd9f610e1c27fd3dd816ce5c910e785532dcc39d94ceb1a00991909cc247ab4b9e9da0ac583245168853d8bdcc235116f0a7a4538b2f
TLSH
T11CB09232984108FC01608299C841D80203118E0120662E02B4BE025928308346000FD8
MD5 SHA1 SHA512 TLSH

Submit Download

memory/900-539-0x0000018F73700000-0x0000018F73731000-memory.dmp

Download

memory/1604-535-0x000001D0470D0000-0x000001D047101000-memory.dmp

Download

memory/1720-351-0x000002664B740000-0x000002664B771000-memory.dmp

Download

memory/2488-219-0x000002D4FEE20000-0x000002D4FEE51000-memory.dmp

Download

memory/2488-220-0x000002D4FF2A0000-0x000002D4FF2BE000-memory.dmp

Download

memory/2876-536-0x000001ACEED40000-0x000001ACEED71000-memory.dmp

Download

memory/3192-352-0x00000227E6D60000-0x00000227E6D91000-memory.dmp

Download

memory/3588-40-0x00007FFB6CBF0000-0x00007FFB6CBF1000-memory.dmp

Download

memory/3588-350-0x000002B133DC0000-0x000002B133DF1000-memory.dmp

Download

memory/3968-319-0x000001F95FAB0000-0x000001F95FAE1000-memory.dmp

Download

memory/4352-140-0x00007FFB6CBF0000-0x00007FFB6CBF1000-memory.dmp

Download

memory/4396-11-0x000001659BDB0000-0x000001659BDE1000-memory.dmp

Download

memory/4692-480-0x000001E2CA860000-0x000001E2CA891000-memory.dmp

Download

memory/6004-528-0x000001993F770000-0x000001993F7A1000-memory.dmp

Download