fb219180683b6bf1aaa2e7e7775201b87579c57c5819bfa735443b7a9a6ce947

Analysis

user interaction
yes
max time kernel
164s
max time network
172s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/07/2026, 15:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Xeno-v1.3.55.exe
Size 156.0MB
Sample260717-sshcqaas6w
SHA256 fb219180683b6bf1aaa2e7e7775201b87579c57c5819bfa735443b7a9a6ce947
MD5 5ba7c95b00f4b328358e4429f932b1df
SHA1 4bb157bd590256f3a084d011f7042db8d234b20f
SHA512 d5f6e7fc05efb49e534304c6c27274cdafa329769529bd78e5c3ed45e3508cf4c9da53604711b0fca5d9ef2f1e8249207b39b527a03bebca255d918a07219025
SSDEEP 1572864:LVU4t/Ct6JMgabao+nh+bw4FlWMZBZHuoM2t52kOUeEbaVO7GJbdHDexdypGT+LY:lYUJkH0sEQ
TLSH
T1A5788B03E29A00E9E05DD1B587578237EE72B8864738A6DF2754175A2F77FE02B39B10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 8 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
241	discord.com
242	discord.com
244	discord.com
250	raw.githubusercontent.com
251	raw.githubusercontent.com
252	raw.githubusercontent.com
257	discord.com
259	discord.com

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 3 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2512	chrome.exe
5844	msedge.exe
6404	msedge.exe

Enumerates system info in registry 2 TTPs 12 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134287755458828150"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1768642833-2142038154-4041560723-1000\{315FC285-977A-45A4-B2F0-F110FAF817F3}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1768642833-2142038154-4041560723-1000\{18180D02-9A17-4C99-AA08-35C07B03D140}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1768642833-2142038154-4041560723-1000\{C9358F0D-FE0F-4CE1-844A-A8901D4F1162}	msedge.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Xeno-v1.3.55.zip:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
424	Xeno.exe
424	Xeno.exe
5820	chrome.exe
5820	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2052	msedge.exe
2052	msedge.exe
4452	msedgewebview2.exe
2052	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe
Token: SeShutdownPrivilege	2628	chrome.exe
Token: SeCreatePagefilePrivilege	2628	chrome.exe

Suspicious use of FindShellTrayWindow 48 IoCs

pid	Process
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2052	msedge.exe
2052	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe
2628	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2628 wrote to memory of 2804	2628	chrome.exe	80
PID 2628 wrote to memory of 3040	2628	chrome.exe	81
PID 2628 wrote to memory of 3040	2628	chrome.exe	81
PID 2628 wrote to memory of 2512	2628	chrome.exe	82
PID 2628 wrote to memory of 4208	2628	chrome.exe	83
PID 2628 wrote to memory of 4208	2628	chrome.exe	83
PID 2628 wrote to memory of 712	2628	chrome.exe	85
PID 2628 wrote to memory of 1872	2628	chrome.exe	86
PID 2628 wrote to memory of 712	2628	chrome.exe	85
PID 2628 wrote to memory of 1872	2628	chrome.exe	86
PID 2628 wrote to memory of 4408	2628	chrome.exe	87
PID 2628 wrote to memory of 4408	2628	chrome.exe	87
PID 2628 wrote to memory of 5812	2628	chrome.exe	89
PID 2628 wrote to memory of 5812	2628	chrome.exe	89
PID 2628 wrote to memory of 5736	2628	chrome.exe	90
PID 2628 wrote to memory of 4756	2628	chrome.exe	92
PID 2628 wrote to memory of 4756	2628	chrome.exe	92
PID 2628 wrote to memory of 3328	2628	chrome.exe	93
PID 2628 wrote to memory of 3328	2628	chrome.exe	93
PID 2628 wrote to memory of 4612	2628	chrome.exe	94
PID 2628 wrote to memory of 3812	2628	chrome.exe	95
PID 2628 wrote to memory of 592	2628	chrome.exe	96
PID 2628 wrote to memory of 5236	2628	chrome.exe	97
PID 2628 wrote to memory of 5236	2628	chrome.exe	97
PID 2628 wrote to memory of 2228	2628	chrome.exe	98
PID 2628 wrote to memory of 2228	2628	chrome.exe	98
PID 2628 wrote to memory of 856	2628	chrome.exe	99
PID 2628 wrote to memory of 856	2628	chrome.exe	99
PID 2628 wrote to memory of 4880	2628	chrome.exe	100
PID 2628 wrote to memory of 4880	2628	chrome.exe	100
PID 2628 wrote to memory of 2108	2628	chrome.exe	101
PID 2628 wrote to memory of 2108	2628	chrome.exe	101
PID 2628 wrote to memory of 5792	2628	chrome.exe	102
PID 2628 wrote to memory of 5792	2628	chrome.exe	102
PID 2628 wrote to memory of 3468	2628	chrome.exe	103
PID 2628 wrote to memory of 3468	2628	chrome.exe	103
PID 2628 wrote to memory of 1872	2628	chrome.exe	104
PID 2628 wrote to memory of 1872	2628	chrome.exe	104
PID 2628 wrote to memory of 1696	2628	chrome.exe	105
PID 2628 wrote to memory of 1696	2628	chrome.exe	105
PID 2628 wrote to memory of 5976	2628	chrome.exe	106
PID 424 wrote to memory of 2052	424	Xeno.exe	111
PID 2052 wrote to memory of 5852	2052	msedge.exe	112
PID 424 wrote to memory of 4452	424	Xeno.exe	113
PID 4452 wrote to memory of 5948	4452	msedgewebview2.exe	114
PID 2052 wrote to memory of 5844	2052	msedge.exe	115
PID 2052 wrote to memory of 1488	2052	msedge.exe	116
PID 2052 wrote to memory of 1488	2052	msedge.exe	116
PID 2052 wrote to memory of 1488	2052	msedge.exe	116
PID 2052 wrote to memory of 3052	2052	msedge.exe	117
PID 2052 wrote to memory of 3052	2052	msedge.exe	117
PID 2052 wrote to memory of 5316	2052	msedge.exe	119
PID 2052 wrote to memory of 5316	2052	msedge.exe	119
PID 2052 wrote to memory of 5316	2052	msedge.exe	119
PID 2052 wrote to memory of 5288	2052	msedge.exe	120
PID 2052 wrote to memory of 5288	2052	msedge.exe	120
PID 2052 wrote to memory of 5288	2052	msedge.exe	120
PID 4452 wrote to memory of 3176	4452	msedgewebview2.exe	122
PID 4452 wrote to memory of 3176	4452	msedgewebview2.exe	122
PID 4452 wrote to memory of 3176	4452	msedgewebview2.exe	122
PID 4452 wrote to memory of 4836	4452	msedgewebview2.exe	123
PID 4452 wrote to memory of 1356	4452	msedgewebview2.exe	124
PID 4452 wrote to memory of 1356	4452	msedgewebview2.exe	124
PID 4452 wrote to memory of 6288	4452	msedgewebview2.exe	125

C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.55.exe
"C:\Users\Admin\AppData\Local\Temp\Xeno-v1.3.55.exe"
1⤵
PID:2448

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x10c,0x110,0x114,0xe8,0x118,0x7ff97906c728,0x7ff97906c734,0x7ff97906c740
  2⤵
  PID:2804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1604,i,5264779570238202145,71970140661096018,262144 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1992 /prefetch:2
  2⤵
  PID:3040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1472,i,12019089080381586408,3744616855861326570,524288 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2264 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2396,i,320804169158757955,18399864411423674083,524288 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2404 /prefetch:13
  2⤵
  PID:4208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,17116686519870337193,3025777602696682480,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3216,i,10119055641218903917,1681157381432974001,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4336,i,1768508262242157193,15858803201028018973,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4344 /prefetch:9
  2⤵
  PID:4408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4728,i,11119094020848927395,6953154189680327839,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:5812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5552,i,936369331457451031,9639259174731387967,524288 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5148 /prefetch:14
  2⤵
  PID:5736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5856,i,11230727619614626514,6926222305552303188,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5588 /prefetch:1
  2⤵
  PID:4756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3444,i,1939004338990867425,16467981487399714988,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5468,i,839841381724612563,2032222055728593536,524288 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5860 /prefetch:14
  2⤵
  PID:4612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5776,i,9142442363512393599,2969881837300964707,524288 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5852 /prefetch:14
  2⤵
  PID:3812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5580,i,4250819751862231946,4895111658418480736,524288 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5836 /prefetch:14
  2⤵
  PID:592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3536,i,17181644703442138219,8169291629898545698,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:5236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4436,i,9075828712775082736,7085782487795712075,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4452 /prefetch:1
  2⤵
  PID:2228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=3936,i,17415962170626598056,14461458134991657240,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3188,i,10108562849694939833,5572025922233004279,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6268,i,13732912692031505534,13002537299067988588,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6416 /prefetch:1
  2⤵
  PID:2108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6356,i,418542502432711897,3875124328874181224,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6368 /prefetch:1
  2⤵
  PID:5792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3588,i,4223264892100360722,7294443381521882938,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6468,i,14655070535640800617,11736148391008760537,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6488 /prefetch:1
  2⤵
  PID:1872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=3532,i,16734183311098390300,8471963369743368063,2097152 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6672 /prefetch:1
  2⤵
  PID:1696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6904,i,14439090621210857231,13420635888005823758,524288 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6808 /prefetch:14
  2⤵
  - NTFS ADS
  PID:5976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5616,i,8762745151554544345,4918299809289228437,262144 --field-trial-handle=2044,i,17478746051190322453,4397883478582254087,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6784 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5820

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5200

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4988

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4696

C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe
"C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/xe-no
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x368,0x7ff9472ec188,0x7ff9472ec194,0x7ff9472ec1a0
    3⤵
    PID:5852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,14693730862060548092,6460445780231862368,524288 --field-trial-handle=1924,i,10578733181534965143,11580243375302137901,262144 --variations-seed-version --mojo-platform-channel-handle=2000 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,560665503137690298,10055292985316246274,262144 --field-trial-handle=1924,i,10578733181534965143,11580243375302137901,262144 --variations-seed-version --mojo-platform-channel-handle=1920 /prefetch:2
    3⤵
    PID:1488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2284,i,7710732957391416603,10887811647767768688,524288 --field-trial-handle=1924,i,10578733181534965143,11580243375302137901,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:13
    3⤵
    PID:3052
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,4774695335589199133,16143555026185553943,2097152 --field-trial-handle=1924,i,10578733181534965143,11580243375302137901,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
    3⤵
    PID:5316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,8409722449837809031,16962577132980382070,2097152 --field-trial-handle=1924,i,10578733181534965143,11580243375302137901,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
    3⤵
    PID:5288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4876,i,16758589785772546532,9349414094961452222,2097152 --field-trial-handle=1924,i,10578733181534965143,11580243375302137901,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:1
    3⤵
    PID:6784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,281512730750302932,4227669679930554415,524288 --field-trial-handle=1924,i,10578733181534965143,11580243375302137901,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:14
    3⤵
    - Modifies registry class
    PID:6304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3920,i,13780285514898279486,12562242264910857706,524288 --field-trial-handle=1924,i,10578733181534965143,11580243375302137901,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:12
    3⤵
    PID:4804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,5658901820797107029,2072107923528414284,524288 --field-trial-handle=1924,i,10578733181534965143,11580243375302137901,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
    3⤵
    PID:6996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,16244387695770593391,15092037271323017925,524288 --field-trial-handle=1924,i,10578733181534965143,11580243375302137901,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
    3⤵
    PID:7128
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,3928803029295110653,9939959184720048321,524288 --field-trial-handle=1924,i,10578733181534965143,11580243375302137901,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14
    3⤵
    PID:7096
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,3928803029295110653,9939959184720048321,524288 --field-trial-handle=1924,i,10578733181534965143,11580243375302137901,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14
    3⤵
    PID:7132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,14125016342725578062,1324012820223317577,524288 --field-trial-handle=1924,i,10578733181534965143,11580243375302137901,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:14
    3⤵
    PID:2276
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
      cookie_exporter.exe --cookie-json=1136
      4⤵
      PID:5288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    3⤵
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    PID:6708
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f0,0x7ff9472ec188,0x7ff9472ec194,0x7ff9472ec1a0
      4⤵
      PID:1200
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,9613458236973690500,684100262377374971,524288 --field-trial-handle=2120,i,13649124899968524657,790120657002147839,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:11
      4⤵
      System Time Discovery
      PID:6404
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1512,i,13986434904568149587,8477853213422399381,262144 --field-trial-handle=2120,i,13649124899968524657,790120657002147839,262144 --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:2
      4⤵
      PID:4648
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,2661457767874409844,8621809695579128258,524288 --field-trial-handle=2120,i,13649124899968524657,790120657002147839,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:13
      4⤵
      PID:6544
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,16744604189681933310,1739076078701595382,524288 --field-trial-handle=2120,i,13649124899968524657,790120657002147839,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:14
      4⤵
      PID:7040
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,16744604189681933310,1739076078701595382,524288 --field-trial-handle=2120,i,13649124899968524657,790120657002147839,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:14
      4⤵
      PID:6920
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Xeno.exe --webview-exe-version=1.3.55+87ae4f96f8a0927052c1120167982fb069afd1b4 --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=424.3988.6144098840606927597
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4452
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x178,0x7ff946f2b078,0x7ff946f2b084,0x7ff946f2b090
    3⤵
    PID:5948
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.55+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1684,i,6739788382115738358,17370006998183900897,262144 --variations-seed-version --mojo-platform-channel-handle=1660 /prefetch:2
    3⤵
    PID:3176
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.55+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=1608,i,6739788382115738358,17370006998183900897,262144 --variations-seed-version --mojo-platform-channel-handle=1976 /prefetch:11
    3⤵
    PID:4836
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.55+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2228,i,6739788382115738358,17370006998183900897,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:13
    3⤵
    PID:1356
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.55+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3492,i,6739788382115738358,17370006998183900897,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
    3⤵
    PID:6288

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:776

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4520

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6424

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

45a25baa-5d05-4ad1-9470-12d1745a5cc5.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\45a25baa-5d05-4ad1-9470-12d1745a5cc5.tmp
Size 14KB
SHA256 1e4baebc9856aeb51856413e4bc3b42a9be6b56c37a557b7f7e2453fcbcc2191
MD5 dd91aa4524fca84f4417ef1bfc6f63c9
SHA1 9e2637e9ba42a0dee415d7cb349387cff49b6959
SHA512 56cf4a25af61ad9514c097e7b98122afaa16e2931c348c26a7269db7227cf1790d063dc2a89a0c8d07e086bae5cb9c9e3097c838cbd84fa60ebeb055dc637553
SSDEEP 192:PRVGcBzZT4baj07Tv7+puPRpP/Ozk9wHsb+WNUbP8Kt6+Ni2Tfckw4a5s+dVyIsB:PRkmzp+r6qXxOwpp12AYaLe
TLSH
T17A52D62BA958793B5CC6C319F911B797D7F4102221D52E88E7FC8A1C14D75CD222B02B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 12d73b28db1c365dd8b04c28d39d7a3acd5bde62d09ac913a11e3ee28ae304ca
MD5 9fecaf65f0ba0d467268c536bd6658c3
SHA1 256467648abe3b995b166f13a9a091c7efcb4485
SHA512 55a58307d88bfb7afd315009a9c7962c5b4f1392da6c793040dceb48e3587b13e756d541a04f860d17ac0d01875f04095d4efb55b330a2ff36ede9208477dc58
TLSH
T1D6E02BEECD74DC7715FC475864444A47E78413572A80495F3B3C850C4FB477A4A9AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00002c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c
Size 21KB
SHA256 d67282a8a5546dba41ce7fee7d8f11dae08c254627447439693ff5377c6e08ea
MD5 2987a58a86ff727b6748b199769c9fdc
SHA1 b0c83c9f6b0471ad6c4fac15c0b4f11ebd037059
SHA512 e6fa127008d74ab8eef6c4d3dbae249c182fa58baa423fa002a3141b9680ffacf0c21b0e98c52dcb43612133e8bc7fb889e647578e8eeff25c2785647496dd64
SSDEEP 384:mg2Dk3V+uIfGNBIjZqoPvmVk8QUZOqeahCA/s9YToT3yOTl3QEgIfiUyO4C5eZyM:pz3WfGnDoWVJQiOqeeCX9EoryOxhfiUc
TLSH
T1C2A2E1A0CBBE85DB640171917532884B86AC530FF58A9CD6E601677E07339BA3C87576
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000031

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000031
Size 62KB
SHA256 6a1028ffd9dfd651329bd3b5fa667cb77d5f71ad3ddb58c35b43676e2a73b787
MD5 5e726b3b40f03657bbe07aa8a432c899
SHA1 094caab6b08319fc16bd135148a98197c4cbe006
SHA512 fb7951f35504799d6187eb206adfa8fd19952e9d061e03f7fc5788c665d9d82bf87de05297c68e817107adf61b7886dc6e5e6928da86c5fc0469785934f723f7
SSDEEP 1536:jNVM5udSDaNT6SGKpqn+Ish8iFdKYRT2henV7pTNXgZQ:xVM5lYT5FhzvKYRT2wnB9
TLSH
T17253020B3A95D45453B59F2AA8FD4CEA4AEDE02DB1DA7300516FC1E5FA3841E0C6AD07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000034

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000034
Size 158KB
SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
MD5 83266658f29f5cb762001d5d9f6985a7
SHA1 9ff52157193e1e798944e6a3172d938183f5e550
SHA512 60b2a8749bb597b71c6cb7113c4ea6c430ab90c6f6a5f78a36ab5fbd2676fbc173ade236be939e862569c786fbdc8e0aa984f1ae4263e91de2ba681cc8ce5d66
SSDEEP 3072:pqj6fcYjfI87fn/NWUEu+Y4rwgnWSPrrGh9SC2VRvkQdv45cf+Fg:pTvjg87fnVTEu+W3rSC2VRpBf+y
TLSH
T196F3232CABB1EF2298ADD32D789EF491C870553AC097303BB84FDF8575154348A7684E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000047

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000047
Size 23KB
SHA256 122d20ebada14be2a236be7bd7be2657cf22132ed2fd00ce0ab5e544598ecb59
MD5 d797c34d5f25ee9dc9e4d1c13ec8750e
SHA1 f1ec44623c236c3efafe89381488a8fac6a15ba3
SHA512 d3dd7bcd0282bc1430ac2c12e674ae05f1d2db8e9013c95f664d2431a7a0c89d2a23f70d31de9b1e45ce131a82e42e11289e57b70432491f969c13448fa856ef
SSDEEP 384:YoQp6yLtdqf0eW01yMf5woimmljlBfivfdA4YStX1V6iXG6VH:tM6stDecawobmNlZirtCiJVH
TLSH
T152B2E193A1D912C2D1B3F9A9340322E889E63FC691628980DE9D1FABA54FC3755127D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004b

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004b
Size 16KB
SHA256 31b8af5d23addf7e2458d83082c0a19c0a4cad8536722ad119d66091debc7423
MD5 6d6500d74bdb62d26f489953a29a4806
SHA1 78ad9cb6440f40f2f423010ba750300cada596ae
SHA512 1408a622d07e454e07218b65119011f0909992c8f25bc39c9030324ebf395aa9525e54024d9406597243b63deeab0d7f4f67f88c1603ced1d6238036cbbc2181
SSDEEP 384:MOoJ0OpqyxAT0/k8NaYiTSSkvu75hjBSk1yWosD7FYozHKjb:ZORpNibpTSSkQQOF7FYoob
TLSH
T16472D07E24761178DF9BDEE71B6B721374A50E2B073EB07292BD245A055C709320A768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004c
Size 18KB
SHA256 1fe53f98c65e156f3ba3280eca6e304d7d76491c97346ce56f90911b14df288c
MD5 f7bd86c44ff66107b15007d3a0eda7e3
SHA1 4c413a12a093555615b9fc2953c3a2b88f566da8
SHA512 f6e952761c1beef291325083808fd927c0a997e242da6fce1be22fc328d29c99ff5ab3b4a540543c7ba4a4cc2bf8db9c02c59278844b9f735f00baabedabeb6a
SSDEEP 384:JPc1UhRKJ0zwcocVByINNu09rQoFLQEFDCT2o8xyqN0e4Mw/zZ8+:xKqRjFocDNu09jFLQWDsJ89MLzZp
TLSH
T1F482D02395D1CB98CED3A52482D28275BE321C33571E7F757A678A1DB1E437E3623201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

155c568f393d1ab5_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\155c568f393d1ab5_0
Size 303B
SHA256 1050ce35523d4db0e1a06d201ca9b4ba008e56a16a84ff0ca29f4da0a11245f4
MD5 7e8dead4bc5e2bd6de677b4bfda88f22
SHA1 75340a63deae573af24c2b819e4a686ab1e6097d
SHA512 c83d043d55560c9e0ccc6fc80fdcd037bfb2bbafb384b0f45f3f93df7ff38982f9feeff6c2f1798d6acb7ce62a0d90f10be5a461ce8814f1948f672740d4a047
TLSH
T1F4E0E7DB1CC13C04F024C6B454B4134FDE211075597CF143838149920B30CB090E991B
MD5 SHA1 SHA512 TLSH

Submit Download

91ebd667e2066568_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\91ebd667e2066568_0
Size 58KB
SHA256 3ce26a2dc78b51ca13943f31ba9c06ca2522df4440ace6f8b1acb8f4a80557a6
MD5 56ca0d9fc30b40557bf70f4f9ba267cf
SHA1 5e7f218c889d084d8b2e2c4900f24d217949d85c
SHA512 72213ad108e6ddda0a655070c86854fb363f61097e9c19e2aabd81bb134b5d709015f2cd13f6f8c3ac8d28f627a3cfd208bebb217b3159e63f0284c69e927bba
SSDEEP 1536:01D/17jWCL7RIb6L+H4gSeGCJgQfY5f4CwP:2xBLlIeqYr2go
TLSH
T1594317CF75C1B77598F261E2008B4209B3BE65195D84182EB905F6F46EB5D8B802BF3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 20KB
SHA256 a62f9cecb6a4904eabb9e6ea41d46fdb42bc04df39018bf61a864c951b011fc0
MD5 ee7de319ae6c535362d4ed5a2a1b266c
SHA1 de664728e680c22a5f3cc49f89241c757933e9a9
SHA512 d8fa3f9a4abed62060a0616e9cdb3c5343202dce3f7bf8bd6d514c453e4286f8489bebb4a1994cb52dc113f8b63e4fa0826c5ff37b701b501f8f1273371f97a4
SSDEEP 384:DquK0TpMJAJ6uyEwDEeDejJlphBemrIJhkz1aIkVnD7o84q96HaETflNlNhOd/l+:2697AD7of+MoD9p2
TLSH
T1B6929BF3C3E4C97D991165F897246E2ACE5E2919021C3D66CDE8EE4E93E1832E34164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 9becc9748a8a1f19ce2a571568edad3858656c1f5b03bec8be361b2c32121230
MD5 e43b3c0aacf9f6927237f96eede01f0e
SHA1 70d69d3e485b82d1b0f09918be0a7942bd3c3fd5
SHA512 d36aa3094c6b504887b0d21fc6a70cfa5f1ce69f57a3798545a50b765d32f761812a07b347ad98d5751437edb23d56991f65303a5f5ab744746f0f262ccb5e3d
SSDEEP 192:PRVGcBzJT4baj07Tv7+puPRpP/Ozk9wHsb+WNUkNP8Kt6+Ni2NBlfckw4a5sadVK:PRkmzZ+r6qXxOwap122YaRe
TLSH
T13862D62BA958793B5CD6C329FD15B7A7D3F5102221C42E88E7FC8A1C14E75CD222B12B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 60fd802bac7b7228c4a38421db4a232984878d03a9c1039d79534b06f96d4461
MD5 587a2d9620c11de2ee577bd5a3c9b122
SHA1 1f2e3ad579f43b59fcbac0ea343ae2d5768834d0
SHA512 641e8517b36dc7ccb3c7b71d5c5bb48c488583e5f242f5e2e6e3c3ff491edb8bebdb6c3a32b0946b17741bccfe495120bf5de5d2246d27cd3034f88fc49cc05f
SSDEEP 192:PRVeZT4baj051yv7+pAPRp2O9wHsb+WNnP80Hfckw4a5s8dVyIsnAUgtaJ:PRUp01e6UXpOwU00Yat8
TLSH
T17342D62EAA54753B9CCAC319FE157793D7F5113121C52E84EAFC8A2C19D75CD222B02B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 c237c8e4c5a80f62e449826e8d214ead096a291c56a296c91503eff7d9e3a78a
MD5 eee74bf8cc95b792d641117e90657ad3
SHA1 3805cdeecedda38dedf9449b8c9284a3a9500a75
SHA512 e8208914863da5f1eaa1aed8039bcc42d73cc13174c1dad80ef0050e0d76f7ecdc5f1e9ced7cbdf2057180cbe4ce5066dd417a0d30fd63a541a1eaeac023c674
SSDEEP 192:PRVGcBzZT4baj071yv7+pAPRp2/Os9wHsb+WNnP84Ni2Vfckw4a5s8dVyIsnAUg8:PRkmzp+1e6UXmOwU/2+Yat8
TLSH
T1CA52C52FA958B93B5CCAC319FA15B793D7F5112221C52E84EBFC8A1C14D75CD222B02B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 31a5ce04ae67b5403f3453ceb77ece590798531384f472283d145995727d92f5
MD5 b28f8d2c357e9f30dbd5f6faec9be3a8
SHA1 7045d97913533ca8a4d3fd4bcccacb31200659fb
SHA512 0c3fd52647169605cd7ffcc7ff7895b9d1008ecd2a828bc0aac93f78a5c3515c5bf2ae9dd7335970687bfc199d7d6444d158da461151c200b0fb87c211b0d77f
SSDEEP 384:sejIb7KxkXqKf/pUZNCgVLH2HfgslHH7pLuLcSj2XXODIX+ErU38xHG6QDzXU:suIb7KxkXqKf/pUZNCgVLH2HfgshH7pZ
TLSH
T17072F8676C489A370F94CA8CDC267B4FADB5024B65EDC86483FA581903D5BCF114A2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 2a90b61cf72e1b2814830c932c57929a6e5dda0aaf6e1c6a8759ac4d7eb11607
MD5 3dff1b65ce935f6c232b8d1fd60c4821
SHA1 5ec0a12201d6375abedb0c0cd3c02e9f9f601379
SHA512 ae4c42cabbeae6eb216b74165892b04c876f6453567f1fabd6cafbb5a6638ae98f20e9be9a25e3a52907c94b1a27d70c4ecdfb2fa8feccc50da929b20c65a16c
TLSH
T143B0120080015191C45706F41542548C72146F10AA1E1B0543E06923C825161C414050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 46e0cdafccce1285f2b99aa57c6362118875180ce7f3c6fa4165acceec67ee0d
MD5 0e77e151f9f1e404f9c12168bd33fed6
SHA1 f0cb3c8801b6da0944779733fe0358287f189c5a
SHA512 531e537ace41af57dd273032b3500a12f8f9e3c12915644f08fb47e07c4800d918355819d2f388f71ce387dbb111ec4bfaafb9dff5e31ab889688d0941e5e7f1
TLSH
T11EC01253CC02F135C00703B91942AC9D7154AF30DE1E27CC72F42917EC34531816625D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5917b4.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5917b4.TMP
Size 96B
SHA256 4b47ec42bb45eb0c5c63e06d27e2ee61394041700b413000e5070dd352a25c64
MD5 262ac077bca8146ea0bda9370a43b303
SHA1 cdd15cc8ef37b8878892ce5159a3e80976b2ee31
SHA512 0a450e8cb05ed907116611471d9d40ef5fa1ce0cc7e84aed54c9bae1042adf50fca3730b2ef9d38aae440ae7a15763a551b2fea2f895cb132ffe271684100eb4
TLSH
T1C4B002E5C202722BC04203F465A5B9DD7D64DF39CA03131392F25B7ADC366715566560
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 a1f7df6bb0b25d92362c7475f85a34fc090bd6a10d2fb7628b030023d5110d9a
MD5 aa557afdf795a2ce196c7fd6b14f56ce
SHA1 d7bfe3b107d173ee346a82210960257cbe755da7
SHA512 5a01dce60bfa3c5ceb87f1de9d427c9c235ebb44b130870254e940144dabf6d89bb9516b5abc61e1d0ef50fa2c19ffcce9b9606ba8ae80cfeaed363ca2d3fa1a
TLSH
T127B002F801C84466E56893B517CEAAC73B695DA113C3875255FA00A484356437B66F10
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 f4194f9e02a5746ba12999fd7b3033792746eea1b7829577928bea5a5712f612
MD5 c6a4669622664e6d5ea8e314f26bcc5a
SHA1 938c9dbbebb2fc3f0d18a242031a7b97dc2c5230
SHA512 62f5c8567eb26d8ec53d421f6d693796ceaa2fdda90b36138b4ba24a49b86dd9e5de148b696186d3c3b649dbcc51f354be46e9677a7a55796313cbb9af062153
SSDEEP 6144:G9Z4YNceHqYhV4QQspKICmFRn+ToZ/WDfxA3OnjrYQ9EU0/hEm:MZ4Y649hV3K4RnQoZODfxjjs+CV
TLSH
T16734127A6D39BDA34D7AF74C6C5A7F143FE46C9B5282CDC921E41F0E10BE9C8102A821
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 db3b98e99ce7335f0a4cc9750e75a97603fe4c689bc23635644d3d7a79be817f
MD5 94f20755e27b45f6e8b7f46027f54960
SHA1 ef7afbd48dd3406fdb393903ad4ab65015aba7d2
SHA512 8ea8171860a73f1d19132064f60d423c653daf50372f15b2ee86f0a72c9b2d7f458f06b2700018f2f213123ff43fb5f4d23890eba1e8acd6c263115aa15c4572
SSDEEP 6144:2aZ4YNceHqYhV4QQspKICmFRn+ToZ/WDfxA3OnjrYQ9EU0/hEm:2aZ4Y649hV3K4RnQoZODfxjjs+CV
TLSH
T13434127AAD39BEA3497EF35C7C6A7F147FF46C965182CDC522E91B0E10BE9C81029421
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 fd82d9c0704724eb712f4e38184422ea3c6d502465f39682c1f2718af2deb51b
MD5 bfac2ca5635cff2dac1f9a7cfd10a6c4
SHA1 18c926f93d07507de9d714956f0df295b0e52713
SHA512 724885d8d9dd0d70ddc58b3adcbb4f208d6e962e760bada715eca327bd2444bb52704fa6c0a13f5d483e39c219cc502ab86f647acd0c161f4b2a954110e65cd9
SSDEEP 3072:4zWs4B7zxAQ0xVOnXTZpY3g9DzcU0/DlblAITog:GWDfxA3OnjrYQ9EU0/hEg
TLSH
T19BC302A15C39BD660CB8EE95744C3F60FFF4AD9A91879DC362E91B0C24FA5C81139970
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 a0aaaad8c4757c227209d5b1c7e610ec2059805bc03ce9df62fadbb3dec0c6b9
MD5 e1bbd7220c41d5597e3e8dc9b9f4b707
SHA1 ac4343deb006043358d71b7e00526189ed2174a0
SHA512 38331a3c1d46165616dc7d4f0922348d543998c8ace3969fa2f3ee72388f3b45798e9ba300f21687b98d04244f89bad5d8787925460a9a921f349d900e4f29a4
SSDEEP 6144:1aZ4YNceHqYhV4QQspKICmFRn+ToZ/WDfxA3OnjrYQ9EU0/hEm:1aZ4Y649hV3K4RnQoZODfxjjs+CV
TLSH
T14734127AAD39BEA3497EF35C7C6A7F147FF46C965182CDC522E91B0E10BE9C81029421
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 211809f54bb9397ed64812fc5656ca659b60d726160fdd208df1acd219a30915
MD5 2aff4796c8435d5a1607929a80d656a0
SHA1 897e8b015c942ac02cffa07e2cf4a064f8b27791
SHA512 5329b79d4965bec81f77b86bf49197bb7e2e5ded6f3ca325b819ea0196dbfa512b0575d74ed5c12ad1294ad720de8fd3e87355744c7cafcfdc49903e87801d4a
SSDEEP 6144:2oZ4YNceHqYhV4QQspKICmFRn+ToZ/WDfxA3OnjrYQ9EU0/hEm:2oZ4Y649hV3K4RnQoZODfxjjs+CV
TLSH
T19F34126AAD39BEA3497EF35C7C6A7F147FF46C965182CDC522E91B0E10BE9C81029421
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 233KB
SHA256 670728b793e273dd2bcdf36eee45de5c4d2a51af3e4679456d084ee29fc4cab0
MD5 7e34eebe0b635fecf2589e4d91450acd
SHA1 0aa02f5a6b61407fcc751e182508c2b8b11494fc
SHA512 ee6de9e721ac1483b17cdcc83f735532ec9439eef532edc7e5efcd63bbf6305c37426def314442051b993d69302433cf93cf6fb0f7769736c71278b281367f17
SSDEEP 6144:5+Z4YNceHqYhV4QQspKICmFRn+ToZ/WDfxA3OnjrYQ9EU0/hEm:0Z4Y649hV3K4RnQoZODfxjjs+CV
TLSH
T1F734127A6D39BDA34D7AF74C785A7F143FE46C9B5682CDC921E51F0E10BE9C8102A821
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0cf7657c366bc70d652805ab8ef03a2a7d29d0c55c7db2b5e25293cb8985847d
MD5 41c1853f98161c9dc4ddb7df27ed9634
SHA1 fe2422fdc5f0b01533ed237918a3bcc5dfc4fbaf
SHA512 c56662a0b580586ae406195ee5690dc3e703be613b110635789d06023bf8c90989635968f12bc23d2065d5cd34deada7b7f3e3c4c69c30ee3ceead936c181fac
TLSH
T1ABD02354776AF9D3D73C1035E4E04310757954E2355942417154C80DCCB50C9E7D36D6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6627dc3feefcb903028914d6a5c0b9a4f31395daeaee46db5f10117417b2647
MD5 eaecf4122e780db1885e3f40d0404be8
SHA1 4b5d48dee93025b4931b034308294dd5d7ef11df
SHA512 29dd60ec1fdef0316ef4241e89e2051bc93fcb275f1ca03c7090244bcd3a2cef8ffd966c65b6894e681332bbfbb280a98da87b8513da244696a062bbc00c4ede
TLSH
T166D023A47769BC43C73F3030B4D0C32177A5A5D0354DC5516160C40D9DB51D9D7CB086
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 90371bf7f2d9f3b60c0aa66ed89740cd725604cc541112971bd392e8746018f0
MD5 a9d241f865f7d582346ece871b98ee14
SHA1 c59a959f2a8673df7c09862b8f91a9e9492ec3cf
SHA512 4822e1484423dfa2530e9a541260d4dcddb675339b2e5fb22cf50c15d65cd0b147c7d94ff11a6d6523e90406c9ad88e5919ccc3fc5ec3b74cbfa28567977506e
TLSH
T1F3D01266374AB001E76D8230E4C2C311266654E038864A01B214C81D99A41D86293186
MD5 SHA1 SHA512 TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 5f678659e7001413e041f7aa42d83522088ff9cc86c5cc235c0079f9511e69b4
MD5 5a27a7130648aeea30d33d1a19d536a4
SHA1 9016ac0a73d3e70678775794cb21acfd84592ebb
SHA512 66bf4c7ad6612b37e4dc9482fa28fcefba2a64f7d9e9053298829edf241e0d6d4b92d6354abc8e9a812c975cae3740e81dbe1016767fe29ff860ebe2ba19da8b
TLSH
T17CE02BA6CC22DC2B08FD071C78544B46D701136B2E80495F373C820C8FB463A199E91C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 156KB
SHA256 313818d6b177a70fbe715a5142d6221ac1a1851eff5a9f6df505670ddcd73074
MD5 3b0d96ed8113994f3d139088726cfecd
SHA1 1311abcea5f1922c31ea021c4b681b94aee18b23
SHA512 3d78c250029069e1850b1e302a6d8a5154f6e7bc5cd58f449b8824ccf418e80dba2d5569a9cff72f51ccc9de140dc91148f93ec4717f4a880e2ba94898fbdb24
SSDEEP 3072:B+pcBZNL29qTsnrCIO1lC6d6z9sZPbUGz3fOHN:BfWqg+IBU6oPbUGDfOt
TLSH
T19BF302B2751DD6D2E502DABAF20F840CBF9F5125879143A7DF68B21CCFD502A50A742A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 3b00547ce8da9724c432d47c963f0f1dea879a5ea1552114c90da57d00902cf1
MD5 ebc5b8fdaaf6dd257c1f5203711c5518
SHA1 fbf58004ee33c4cb76e2ba3005e59fb460dd20a8
SHA512 551c08638f4bd5c15a04383d46a77c02b2174cd62154ac0dfb11df59b8a1c93a316055b469f56ef40ede70bfcbc3ad448749c1d2f696f941d294e1853d6ab7a8
SSDEEP 192:WzOEec/2zPKKhZLGe2en9n9+gdd2Q51Ec5J:u5uzPDjn2eq1q5J
TLSH
T149F16EDDCE56076CEFA24DB166C1D69378397CB108CF1E0B0578B8B4D89A7A6101318F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

49064082-eea9-4a22-a906-d07d0632742c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\49064082-eea9-4a22-a906-d07d0632742c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 15ec6070f74f06cf614849a50a9d19ab4f1418a52e748f9e6df7b72a3481e3be
MD5 18ec71a92db9b96b960edc2071e8b10e
SHA1 ce33ef6f0fbaaecf0a152298bd0215ef79add2d0
SHA512 e7b2aa14be42aa50fff3ba76247fa73f1d38fc313848c551e2231e9e93dce78621d5efd27ff1fc25295dc3c1970ef2e9eac9ae22f525bf857406050d4ae54e59
TLSH
T1E9E0268414CAC12D915CA8E3C3A9630CC3D03403A38B3B4667889C807203786A38B7C4
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 ff0908b1bceaaa647d66f34706edca90d69d5fa9d7f965eed383f94c290c4ef6
MD5 4e12d12cbc9f77d91e3f18b1ef3d0765
SHA1 6733a7f2ad111ea70c8e1c6939cd2fedaa8273c8
SHA512 d7225c1a803b68ae85eb0c77ba74c7c51afca587f3bb6141104fbf3a32d921b49b67d4d65535cd0271e25926cea1858df429424e72e91c7c5b9b1ab510e3b23f
SSDEEP 48:uzBmw6QU1Pz3gQwJOrZjrte3FJu4yeRvXQIGg12AxyUl:6BCx3gQwAr5M3FJu4yYvXQIz1XxZ
TLSH
T17892A5470D797853E7092A7A2A2B4839C93BE19CEFE5CC89312550681DF8656A0358FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 42a93ef7c605f797313c1624d6b0ca3b7ab951818093bb233ceace577b05826d
MD5 a4b3e224869d8ddb1a0e5abdd40030a0
SHA1 930c2e81a4196889559977a4b81fc740b0708d6f
SHA512 e7dc819d66e1900be13598e82429d13c25145609543e2d9e28a21fd4c056809a3afda37636e25dee5b680ae0bf40763ceed54d1b9a7582972330605c96b0e810
SSDEEP 96:fHU+bGz83uxDLjGQLBK31NfR4J+MCXkFr+MFcjtk4Q9/2jC1VDEbjBHMsDETbiIN:f0+G83uxXBBK31GkSJTEJH7DNspUy
TLSH
T1A714110F5F742722CDBD813669E744A35D6DF03F8B1366DA686114B4CEE3652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e933917ad7ac484af8e2975e0f5636926a6d3b791a7756f065c28e454bd587dc
MD5 c9323160cbe3d32d80e572cf0624a9f8
SHA1 e55ff037b528d0f769ce27cf8090ca9880cddb9f
SHA512 8b25b4ef6864ca255b48556b6e19a6ba2e2e575c4a0562e5a8ca6aac6152eba0c75b2b47158ac889b6456c48ef3c52db04c3430974db87ef5492bc0888de0d8f
TLSH
T1115167F383E4862DDA1156F4AB187E1FCE2C0914431C3DAA85E4AF5B93E3561F141A4B
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 355B
SHA256 a93bd26278a092bc4e958ea009b7abba980204e027b52a25660462a652842f49
MD5 a4f66573688b54358390232f138ec813
SHA1 6ca17fff212e1a860f1de3679dd070a815efd725
SHA512 c6b40d7f5ab7eddac28ddabae119123f36b7d30383aa0b0d150ae3aa189cc0492694c831e139d54b5dd6add1c4c82e7665d9d5d0cfb53995a0568c4cd56d9128
TLSH
T119E0C063C0BAF0378035053F1D847880B6B5E435018480F5C9AAC36DB1844F34B0102B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 31e0db748e674e532f05909e68fb57b3d1e43bc747bc65c486c8edb82936d3ec
MD5 2966ed21f79f9a8ed375dc246ff1e467
SHA1 01727853a085243369bc4c62972722ff69222aaf
SHA512 dc2f510bb95418d6a23e3d9763d056efa62f57a01b98c26c563c448e2c14047f0bff0f38dd8dfbc77fcd83514923dbe748f93284c2cf41489e041814457072ba
SSDEEP 384:sxZEQOd/fcsPWv0IV7orh07T/bYn/5INZJu:scVd/ffY0IZ3/bQ5t
TLSH
T19F72F7166A3869779CDBD319FA457B93D2F9153392804E44AAFC8F0C00E66ED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 81dbd5204f1bb0ade58526027a867a330b44cb3ebacd8f137e3e848686f569c4
MD5 8455c5941cdea4d432c643085812a60e
SHA1 b511f36fee47783d442400df98af60e4331ab04e
SHA512 39d30759791f317ec07ed7d5ccddd94128a4458908b182da6fa86c99cdd40d8fb3e2dd0ee298ba9fe407ea93ee0569552ff0493ae1c2ed59f632f6e686cd34e5
SSDEEP 192:sxZERXyMqZjK1Ml8MNd/fcs8IKQ7PgYsh0Izodpxd/W6+WNzloQ/Y0ZirtVUIgjI:sxZEQ1d/fcs8IV7orh07T/bZn/5wAjJu
TLSH
T12462F8166A3869779CDBD319FA457B93D6F9153392804E449AFC8F0C00E66ED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 37KB
SHA256 68172ca5f37906b07d20fecf935fb2e4b1bd6af0d59eb0b09e36d5b28589ba95
MD5 a59976e85b02c3f645ec27f0d6b11937
SHA1 089161127be534c71b52c5734636f5f3feccde6e
SHA512 7755f564d4b1c4586506f1aba08ffd00b8eab611915c040f557f5fd206b8aced669df43609aec54c1576d861897344ff2518412971997fcd57d995caf5cca17d
SSDEEP 768:XwZh38Dv2S47pLuLnZFWRm6GQXm8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3BGq9Ll3:XwZh38Dv2SkEnZFWRm6GQXmu1jaKBGqX
TLSH
T1D4030A3B280CCB7E4F844E9CED267F8A6EE8028B56988D5447FA494C03C67EB15175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\aee40459-db7a-4740-8856-73be895829c1\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 7b32916b8e3dfaa1c8cbd220c5b1cd4b294d44a2892ececef6b28ea7eb06cf21
MD5 f15b081acaf9684c6611475ee32ede98
SHA1 a331d2807aa75384142805d9dd3eafed6f68ccb3
SHA512 8793fa115e4896e0b0a5582d4f1b21e2eb00fbf1f4d1da4aa6b033ac26ebc9d9b7530ea6d5f2b897e34b7b00b4c69ff4195b671c70073bc5bf25774eedd9705c
TLSH
T11DD0972BA04258D2D7AA47E11F21007A83102C8C6481548CE063297DA435A4BA218FA7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 8cdfe761ec9c732155e4c439f953c9e413906bf31bb27c9b77cb50b608c2c485
MD5 26c812cab165aaed1e241c7ef34651af
SHA1 6b95e0468bb6b78bab252d30678fe4cb7a0ef9c3
SHA512 ff3c253dc5f610098e698d2a90428347c4269dd8c9c4da02bc952cdd14a454a0e237ff46fa6b86046a5519337ac09d2535f03c9cac67a26f5cc11220007b8d1a
TLSH
T132D0972BA04558D2D6EE8BE01F11003A83002C8C6082548CA06209799825A5BA205FA7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a736c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5a736c.TMP
Size 138B
SHA256 281817879ce787628d903672c5d62c6472b42c0892b13a4a3759a866ee7c0f1d
MD5 63b4e9a75dce31fd1b2c1957374dc124
SHA1 0b9207e76767489d4d39d17251ad19e9627801c9
SHA512 9d1986e15955b4663fc86eb6fa9b8f8abb2d37849a537072d7ce48844ee0e09ed78c2dc2f2253b5b4239ef6ea8525a2530554afbd18ff52bfff1369b972611e8
TLSH
T1FCC02B67B0041947876143D00732903E83062CCC0CC3848CF06334B93031E1B2101FF6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 be5e0f6490301c44f19ae12b9ea58eb137f72f39e9f45195f108102032c154a8
MD5 c8c95afab7211a3cb40f608bbba3657a
SHA1 8325d166a201cc62943fa4e7005b50323e44a72f
SHA512 5c5e82a5fdc85fe35a66c0e2002f9621c51045c4010bb2a7aa51773164a2fb36e720f86880f3f62899764ee5a536b5c3c752b1f9773e933e12f6d9f7c2351ea9
TLSH
T132E0269829CAD37E729922C34328930C82E8740BD2CC3F427FC1CC806247605B2E2682
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 c3459994d57ad2c23daaa67348cc6cc4b3f77b1f9bb95819efa58c1ef5b05508
MD5 1022e9a6892b67663329e568ead8ed8d
SHA1 c65172037fe4fe8a67e151345bfa19fdf895107e
SHA512 df9ec94f0e15f6666fba1f6a4afd1ff72bb12b415a7769be786aa350759bb724776bd42419b844ad3f6881fbb44933307bc5f987927c3c8a9506d8c2fa59e90e
TLSH
T197B012ED3711CA12D4C8247213E087805754F0121482E503CC58CFE35F057E83E518C0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 d8b245a8a08a3a70a9bd0a9dd05e3263245afb2e3164867acbecd0ed46bac5a3
MD5 98c14e649be1eb236d0c8fd51b0fc4bb
SHA1 66325d0ce2b6c16c54d78f8397f91df8b5bb0cfc
SHA512 75958745c528428140cda2d5460d0a23ddee26e3e598a80320c43062a47815332ad08d38e6867b7310cdcdf8d723642670aeadc835298d72062e2a6595e1db1b
TLSH
T112E0D8A439CACB2F72CD21C78329E30C81A27403D6D96F627B49D4C0630B2417393641
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 5551c2f429db3abe59e070d3de5dc37da1db27e9f1f89708297b15a9d5db6136
MD5 5d5aba76577f42aa6055b8dc1a028aea
SHA1 5dcf6e553d82ea2aa9eaccb8f93c93961a050e89
SHA512 900c5dc9dcf6f1fd48cea5dba2aff1bd20472af2dd902cad125d675b7de1c15f6eca419808752dd7111a75ae22377e5940eb4f7e0d75f18aa8a605e8f40c47ae
TLSH
T123E086B4B5CAD73F938860C34368AB1C83F0784797DA7B96A7484450A207349B7BAB84
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 3772fb55e471861c883986c60c15c6dd69233abf0cdeb42ca59b5c028ad5bead
MD5 03ad50d220ddf13f8c3ddba8c991fd88
SHA1 4a964a83ce219f2701e14709f3738c4786952ac8
SHA512 64922f19c099928703d0744e195b7bcef045c4b53508844ed6758d0d07f51991ddf2f2eb397456183cd0d33a19328fa1c3b704038d74eab4a487c051781e4fec
SSDEEP 192:cFkbIH791le1K77LTl56jbSp+bv+TVCNnCtTq/tVZ3KjlXxXP:ctGj+BCNC5qFVpKxXhP
TLSH
T165B2691632BA02023C7DB91D87A59B371A42B1733418E93B7BE954B60E67E214DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 4498955fce585abf21d1dccaa0910784d1660dcd659082fd1cbab93c0729363d
MD5 4b6aaf5749def35442c59b04c2061337
SHA1 bcee7fde506f910b2c2bf66700a3a8270b7a7b3e
SHA512 6c7cf23fc0444e5bc99631fe57288c99f3f495536db7fac08b38f5a3efd7126a170b05d3f17aa80211ba5f7b1e13c44081547a66a7f7f51853e94668684c332a
SSDEEP 192:HeOQjAsvlrqxrsj5RLhFCA1BMQcIIIjbDMIM1UYcYU:FQ8sNis/aQcIIIjbDMIMWBZ
TLSH
T1D752846926061B3BD05E5FB713A987A41FD9C9C2017732AD30621C8F8DF3A5786C92F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 ee1fdb45e0ba1d77be72339bed0f7349699e62be3b88bfd761a00e37a878f878
MD5 7c27000b0abeec22a8ce06ecaffe46b0
SHA1 a71260544da6e1b1b9b1bd84bf1ddfff201b1bf1
SHA512 77c17eee78cb5b180df6a306e338d8b173d384d9f35f6c94cd98e2ef02120848476c5add5add97fd7aaec543b83915d3e77173eca1185469ab9f42dfbd936e18
TLSH
T17CE020D074C5C19FE25971E7427D530C83D03403EAD52B456F44C48461472417B476C1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 f0133e103c624453a6732ca95b9e4ca2f7f15b16699444b7a52ac89a1f8d39a6
MD5 e5d24f0158b3a0d449a3fa8ebf05718c
SHA1 21d8bc6c2ed1347dbd571b7c844a38efc30448d8
SHA512 cbc932deef35ae9882f8f437098ac3547b115db9f046a19c7f5c0310bee4ae384b8123d1b4ded81cb4d73483133c0c7ea549f39f1a467681b860fc53a0e38625
TLSH
T1C1216056F321C149E14E8A7EA12AAB361328E8029FFCED0F447920256D76F015E8F6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 c35d35c5539fd6d3d49935f5283b8c04e615a1cb1e591810eac995b4ebe2bf58
MD5 99fdcd41c02de55bb3e2d9ace3994971
SHA1 90f723e74b96e48e4a26eb1758a5cbb7ee43c043
SHA512 1287b74df4c54dd162e3bc5c5ad2e13bcd0475c3b1a58e67446ccc5cc1db4c9fced6e48a593b60ffdf4f4150e7caf32ef4a8ada4a82204695a567d7d1f01d1d8
TLSH
T176E020D474C5C1DF525561F302BD934C83E13803EA952F416F40CC5452472827B5B6C1
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 77906f6bb91580f5dea88eb998b4545f54db0328ad870bd0a8e9f071e92fd958
MD5 7289400a10c7e59b5c857aafe7b132b9
SHA1 c7eeebc607f4e08be162330c455367fcd0b0475d
SHA512 b022ac1fb7fcfcc8f1045fbba946bab23beb488815e7d47facbc5dd12d268483299dd7a32fb71cac8bbc8b15acbb2821d557d2d1c046a0724dff9c945fe643a8
SSDEEP 768:UFij+9PXwgpfvojKlOtnVLFmTb4tGM29M++:Y9P3pCZ+M4M2+++
TLSH
T164F2293EEC599DBF98DE6F89675E29169EE4113BC2B84988E7C80F0C807759CF306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 811e30328feb059cb29eaa073548ecec581cd91b00661a0795a8ed5e93d99bf2
MD5 d5d21fd61a672aa875f1e120671cce8b
SHA1 4904bd93a22e3ba46dafb6905de8746bf073d224
SHA512 c0528c4711da0f20a6e8ea86705858779d56fc080197fba955ce98505eea3dc2960c4a42b36e3b70d6926cdc2a44da5953c9c71f0d37e7e36b3707a9141c10a3
SSDEEP 384:nPiF9CcmyWCs38NJ8TUNTUlIxBrk6o0zF1ifbMojKlW+uSBe4KV8p08Nty/7Igl:aFccps3Kwg44zTojKluSBI8p0J
TLSH
T1B6B26D76EC69CAB7EDD74F99AB4A7603DDE05267828C9AD4DAD81D0C008719C170BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 13d4902d5574f2432a475b1032526870a82c6fdfbf9492f87fdd25a5885f41be
MD5 aa14727c3d5fe0ff92ba50dd1b8e176f
SHA1 9ef54b39aeec3d3dc36af51c4b72271a9e1b6afe
SHA512 65c8efa31509dc686c5d20866a9f3943e1cdb4f194068659aaa8ff6bfe10d4b050cd540a9dbca895e82dc81112b29219df80ac2defc3bf9104b39bf120021bf5
SSDEEP 384:ndiF1tNn/s3n9Sk38NM8TUNTUlIRIrk6MR51ifbMojKlW+eXtRDOObjI9G6w7+CN:UF1j+9V3XwgpBvojKlOtRD29M++
TLSH
T170D26B36EC59CEA7ACDB4F99B74A3A43DEE011B385889EC8E6C85E4C008719C570BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 8ed4f7fcdde01fa53fa7da38dd311b818af2fbcedeeda241827a2b79f16a3dc3
MD5 9a292b2a9aab2b1ead6cd764e4156f3a
SHA1 3b3473f0c9d35c460e0ab07c0aee547fbc8ef38d
SHA512 bcaeeda9edef38dc9f71619b1d81065c9a1f74eb0e44c638eaadc77017a6490cfd4274c911fc96021df582839b6c4af7ce206c978752a1c058e79ac4ffaa3dc9
SSDEEP 384:nGiF9CcmyWCs38NA8TUNTUlIxBrk60GRq1ifbMojKlW+eXtRDe4KV8p08Nty/7Ia:tFccps3nwg4KRKojKlOtRDI8p0J
TLSH
T190C25A76EC99CEA7FCDB4B99A74A3643DDE062B385889ED4D6C85D4C008B19D1B0FC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 d0373894e5eb90f0286d513d0ea2d336cc9dd294f0f11319c64e560477320877
MD5 da244730401061438754ff10cd099f50
SHA1 4587cea5b63e11440588240b1eb091b851707564
SHA512 7ad77e810e8629fba24ab3784ea4c3662dffbd26d0de41fcd2fcfe26515518bb244b11d950c8d4292de3b9c1c874366e37ec0b0ed85877aab837d5ea5b88ccb7
SSDEEP 768:UFij+9PXwgpOvojKlOtnVLFmTb4tGM29M++:Y9P32CZ+M4M2+++
TLSH
T1B5F2293EEC599DBF98DE6F89675E29169EE4113BC2B84988E7C80F0C807759CF306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 46d759d2f09833c3afb1c6fd36e8361e5338f0aa3af7db7e21c6b077f4c9ae48
MD5 fcbbf7f5285360e2b08747e62e6afbc4
SHA1 c859ee1e211c401c35d676e216f9fb1b41d4bb1d
SHA512 e72908752c7d1042269c678f339daf1f1a0770d7c0a4d9c87da6f031ebdb6f6e6063076c08918b4b505212a17a27317fa12f7b8a2ae5c1f139ff06dbfc8bebe6
SSDEEP 3:MsEllllkEthXllkl2zEflm+X:/M/xT02zG
TLSH
T1B244040C7FC0041DC54010314051C3703370F5100D5157C334D154335CC75510C10004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

XENO_CACHE.bin

Path C:\Users\Admin\AppData\Local\Xeno\XENO_CACHE.bin
Size 36B
SHA256 3bab55816f9c1c63b26bee8027a74983736938cfa748d9c91230391d4bacfb88
MD5 03b4e88d732421deccbdd05cb90b0513
SHA1 1ba9d3bd3af60ecc041e93251633b5a0fbac4d9b
SHA512 40e01403608fc8d8c0bc7bc6e1367a472778dea5d4dde4d242b37b0860d098075ac71cf24abd85c6b9ee67bf6adf80adaaf279a969f4477555807003276a2c75
MD5 SHA1 SHA512

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Xeno\settings.json
Size 101B
SHA256 88e5c8567b1cad0fa2a42a21ac273a1ffb8a6992be41e5de548d11f281f4c373
MD5 7109faf92716c37ae9d65f89a2477be0
SHA1 de2903bb44600fd8a69649c395335d4fc226c5e0
SHA512 f41ca49622d3458c1365fd9f610e1c27fd3dd816ce5c910e785532dcc39d94ceb1a00991909cc247ab4b9e9da0ac583245168853d8bdcc235116f0a7a4538b2f
TLSH
T11CB09232984108FC01608299C841D80203118E0120662E02B4BE025928308346000FD8
MD5 SHA1 SHA512 TLSH

Submit Download

Xeno-v1.3.55.zip.crdownload

Path C:\Users\Admin\Downloads\Xeno-v1.3.55.zip.crdownload
Size 6.8MB
SHA256 7d89aca3584916e86707d8c9c6af606491bc9a3cadff9aea85a95f97a7a02a0b
MD5 4cb6bc7c49c919065dab1c32d70df887
SHA1 31924dd424c5259988e1cda49a5bd730fbb2b284
SHA512 8d738a6b78f773d41332f401e31ccf6d5e8054a768120906e1d0501d11dc887d111f8c1a5f7f96119b67cb3bf5fc97dfe218e78007aa61819636708003c5099e
SSDEEP 196608:inFGt4gLGBvG7bM032XaCzn/sUH28DgajJ2qaJggT3OsR:inFi4gL/nMhhc8DgsaJgNsR
TLSH
T1D06633CCABE818D2FA3891796A3017F96653E3416716650BE50C04E772DAED04B87B3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Xeno-v1.3.55.zip:Zone.Identifier

Path C:\Users\Admin\Downloads\Xeno-v1.3.55.zip:Zone.Identifier
Size 89B
SHA256 a06edcc953695095fe20463671fabaae6474376ecd37fa8bfa5b5399e4046b29
MD5 237db11d6e2bd14f78fd4eb9d1f3e0e0
SHA1 e74d1573c22618fe17c21869c13d748a14661787
SHA512 550c91a649990f3825f5e79494c8aceef637a86051ca74ff3d63106cea877ee463bda956f336ffa923b720e55460e8e9efbb139a5c6af5ebf2a8d5bb9c1a771f
TLSH
T1A5B01247100055042B4072C872DC5618504E20988C051280EC8020A9F44625958F1006
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c9719e1d13bfde360bfbbefee203e4bc66874e24ca04aaa58c7bfd7e40d24ed8
MD5 18b212698cc2004044051e699580717d
SHA1 f8cf83a7cacf4ebd239ec2d06c7530fca63748a2
SHA512 7a9d8e6bc1eb1a9a8e595dd926a8ba7b230f34dec6885eb89164f487808519e7d1aeb64212ccd476db828c6525fb00de5eeab5aca17558d7d9b35b655f68426e
TLSH
T110D00431FD140011C550103DD070D71443544C05F1C147040CD41005D5500141313104
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 1c6e7f1b6ba43a0ffba10b1cbbcb4f9f6f89a0ad82efaad8b9e249ce603d3647
MD5 9fae6fcea5dfee5f446ebab49e45cccc
SHA1 72483e5e16cf74e5d4019b727ca1d34a83bfbfcd
SHA512 f373251778cdfd3ec186face68c69c8af192dd113bb330c67e87b6ebecdaafc566d1ccb317b567a0bb0017b6cd180b60a45589a857051b6134ab4ea7a31d8e54
TLSH
T1ACD012237A110134C42020375052B60C0540CD0FD18581045C6C951EAB140641B13441
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 eb4591523962ac6a8b603b9d88b60246181793a43eff4c0904901e5d112489d1
MD5 5604e03273311477b8b690130305044d
SHA1 2c42b3c6b739cd4a92c7010b14063863e09cd4e6
SHA512 4f126b07bea4eeb2cb27848f13d3403df6b5cdff1f4d751954b4f4ab1d3600b8945b5c3ee6276a64bb5ff331a85cd5dbab65cce2fe2ca926f3e6999197d81e26
SSDEEP 96:stT85sAY4jb9XeffqaZ8i0vhE2kmsm/7qx+WVHMSm+uecadQj1+gFDKEB:stT8bDef7Z8paW1/S+Wi8d4zDK8
TLSH
T1E2D197029E6869774CC7E319BE35BB43D2FA103266D55E5CEBFC461C08E66CD620B90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5a9387.TMP

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Default\Preferences~RFe5a9387.TMP
Size 6KB
SHA256 ee4482fa38566817972a60282102a99ab3f789971ea55a2c910faeeb80e8d712
MD5 8184b77bfc69b5e5661d540bd5707a3e
SHA1 c9728e9646c36e92b5fcfc7bb97483bd46b0e6fc
SHA512 e8daf77a94e04f87943ce4f0621ff9e54a22e4729fb9c74bb854b46608880d57d74c560a883f8472f964856b59a3ca3d2f74f0dcd59d7223f221fb0fd9f32246
SSDEEP 96:stT85sAY4jb9XeffEZ8i0vhE2kmsm/7qx+WVHMSm+uecadQj1+g1fMEB:stT8bDefMZ8paW1/S+Wi8d4bfM8
TLSH
T14FD186029F6869774CC7E3197A35BB43D2FA103565D51E98EBF8861C08EA5CC220B90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Local State
Size 15KB
SHA256 d77455f6c12b02edc2ffb0a074bed708fedff422c46bfacee5aff6314953b9a9
MD5 d12a75794548af4ab48cbc68fe23670a
SHA1 ef7b37e78c0a539404282607aa3976195220b7c9
SHA512 d3c1c1d408cde1da193a0fc27647fcd671119367e4b353faca8a38cc47f6e3f3e3a43aed3fccc6328645be7c4f4cc124cdd447056947d8f59d3e220b2387f9dc
SSDEEP 192:zY2BsrSABD6KZenoX+pshLTGbdna37W6h6DWYP9E4Y53yJGPa/a7vnNb6SqMooD6:zLsrv+89zHqlDNP9oid6Nbp2R9AHNS
TLSH
T13C729E33A83CA7375EF29949F4467A1B3B7850AA91C11BB8DAC90F4D42DE4D5231BE13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Local State
Size 2KB
SHA256 b1043b4843cf735fc2de4f196b67898212430c4e18926727b79bbee79a12dfbd
MD5 1604570a6fe2f7223f556a0ff5a016ed
SHA1 62cca88ba42d779c51c6b6dfe86a353efbc48f39
SHA512 6ca4638b3f323b5267e17a64f28a4683589a09b11f5e93f731b5fa1cbb2db9712b9d9614a9060ba84dd5fcb227b0b059824aa95cfedda7f75a8af5967bc79cfe
TLSH
T143517333AC5867376AE38A48BD063B639A75517E8AA12F6497DD0F0C01DB59C330AC37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Local State
Size 3KB
SHA256 1c661785e393b17476f01498248ef80ec22d25f3cfdf384ee06fa7123c7d8f3f
MD5 e703e9a261765eab8aa1133eaf56c439
SHA1 bda2c6085c5d74fa48aee9f5298a1d7502a1beed
SHA512 9b4f0dd5ef24354015600e4a7fc21b232265bab73dd888602dd2d1757912f8ae7428b1ddabc970c48c2b741253e14bee933829bda6d9c7c037e6425175c02b51
TLSH
T13E71A623A8A8A6275EE3DA44BD453B17A6A5513FD5D13FA9C6ED0F0C01CB2982306C23
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Local State
Size 1KB
SHA256 b9ae38c574d5adac0fbcac746bcf0d55109b8a1e70fe95b82dd67e2083a23dda
MD5 8853bb716312a4091347148b53aaee32
SHA1 a26fbcdbe160fa97f87c567a0ec4f6dfa7b305ff
SHA512 61a92a54d3b7a28c4b621a4694fae2591653c67d2ca139c3a3dbdd243657273e8df8bcf9aa28c424558ea0829dd98e580d66a1ac4b48825f75aea517800c5a30
TLSH
T119316573D89837367DC69649B60176975EA1103EC2515E0892DE0B0802DB59CA32ED33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5a66e9.TMP

Path C:\Users\Admin\Downloads\Xeno-v1.3.55\Xeno-v1.3.55\Xeno.exe.WebView2\EBWebView\Local State~RFe5a66e9.TMP
Size 1KB
SHA256 575d287175a19a8c1e45080af890688145442df93db7bf15c456bcc711e8ae48
MD5 b0f3fccb63654305b031ea39889cb330
SHA1 f15d83655d1768078bece6c38d7db448a8aeb72e
SHA512 1f17d1f4a24773873ea920f2d519d166263557ddc48231ac7dd605321c8d84e05d555fa9f2cefa75a0b07ab26277460f92591b006a36fe1032609ddd33bb3282
TLSH
T102214273D89827767AC68A48F602768B1EE0517E82506E18D2CE070802CB4ED932AC33
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3176-638-0x00007FF9837A0000-0x00007FF9837A1000-memory.dmp

Download

memory/6288-737-0x00007FF9837A0000-0x00007FF9837A1000-memory.dmp

Download