hxxps://wearedevs[.]net

Analysis

user interaction
yes
max time kernel
900s
max time network
801s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/08/2026, 04:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://wearedevs.net
Sample260816-ffhrhadl21

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 6 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
564	discord.com
566	discord.com
571	raw.githubusercontent.com
572	raw.githubusercontent.com
408	raw.githubusercontent.com
563	discord.com

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1149874438\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1662190063\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1338894210\keys.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1852075040\test.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-lt.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-mr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1149874438\crs.pb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1149874438\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1662190063\Mu\Advertising	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1662190063\Mu\Staging	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1852075040\english_wikipedia.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1852075040\surnames.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1662190063\Sigma\LICENSE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-as.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1431547468\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-da.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-hr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1662190063\Mu\Content	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1852075040\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1662190063\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6240_726191770\crl-set	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1149874438\ct_config.pb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1149874438\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1662190063\Mu\Analytics	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1338894210\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1852075040\female_names.txt	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_797157198\Part-ES	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1431547468\_platform_specific\win_x64\widevinecdm.dll	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_683490601\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1662190063\Sigma\Analytics	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1352265208\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-et.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-de-1901.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-es.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1662190063\Mu\CompatExceptions	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1662190063\Mu\LICENSE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1662190063\Sigma\Staging	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1338894210\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping6240_295511671\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_797157198\LICENSE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-ml.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-or.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1662190063\Sigma\Cryptomining	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_797157198\Filtering Rules	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_797157198\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-te.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1352265208\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1431547468\_platform_specific\win_x64\widevinecdm.dll.sig	msedgewebview2.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4836	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313293448335928"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616257"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Mode = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e8005398e082303024b98265d99428e115f0000	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 = 3a001f44471a0359723fa74489c55595fe6b30ee260001002600efbe10000000e141ec2537e3dc01b247cb633fe3dc0185aa75c83a2ddd0114000000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Downloads"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{AFB20827-B6DB-4E75-BE3C-58D4FA8EB412}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\NodeSlot = "2"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{8DD0762A-6036-45E8-8977-2530D05CD88D}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = ffffffff	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
6248	msedge.exe
6248	msedge.exe
6720	Xeno.exe
6720	Xeno.exe
3816	Xeno.exe
3816	Xeno.exe
3816	Xeno.exe
3816	Xeno.exe
3816	Xeno.exe
3816	Xeno.exe
2268	msedgewebview2.exe
2268	msedgewebview2.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5248	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 24 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
6240	msedgewebview2.exe
2196	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	6720	Xeno.exe

Suspicious use of FindShellTrayWindow 48 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
6720	Xeno.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5248	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3224 wrote to memory of 2192	3224	msedge.exe	85
PID 3224 wrote to memory of 4836	3224	msedge.exe	86
PID 3224 wrote to memory of 2440	3224	msedge.exe	87
PID 3224 wrote to memory of 2440	3224	msedge.exe	87
PID 3224 wrote to memory of 2440	3224	msedge.exe	87
PID 3224 wrote to memory of 4852	3224	msedge.exe	89
PID 3224 wrote to memory of 4852	3224	msedge.exe	89
PID 3224 wrote to memory of 720	3224	msedge.exe	90
PID 3224 wrote to memory of 720	3224	msedge.exe	90
PID 3224 wrote to memory of 720	3224	msedge.exe	90
PID 3224 wrote to memory of 4444	3224	msedge.exe	91
PID 3224 wrote to memory of 4444	3224	msedge.exe	91
PID 3224 wrote to memory of 4444	3224	msedge.exe	91
PID 3224 wrote to memory of 964	3224	msedge.exe	92
PID 3224 wrote to memory of 964	3224	msedge.exe	92
PID 3224 wrote to memory of 964	3224	msedge.exe	92
PID 3224 wrote to memory of 3320	3224	msedge.exe	93
PID 3224 wrote to memory of 3320	3224	msedge.exe	93
PID 3224 wrote to memory of 3320	3224	msedge.exe	93
PID 3224 wrote to memory of 3620	3224	msedge.exe	99
PID 3224 wrote to memory of 3368	3224	msedge.exe	100
PID 3224 wrote to memory of 3620	3224	msedge.exe	99
PID 3224 wrote to memory of 3368	3224	msedge.exe	100
PID 3224 wrote to memory of 4848	3224	msedge.exe	102
PID 3224 wrote to memory of 4064	3224	msedge.exe	104
PID 3224 wrote to memory of 4064	3224	msedge.exe	104
PID 3224 wrote to memory of 4064	3224	msedge.exe	104
PID 3224 wrote to memory of 4872	3224	msedge.exe	105
PID 3224 wrote to memory of 4872	3224	msedge.exe	105
PID 3224 wrote to memory of 4872	3224	msedge.exe	105
PID 3224 wrote to memory of 4304	3224	msedge.exe	106
PID 3224 wrote to memory of 4304	3224	msedge.exe	106
PID 3224 wrote to memory of 4304	3224	msedge.exe	106
PID 3224 wrote to memory of 4572	3224	msedge.exe	112
PID 3224 wrote to memory of 3796	3224	msedge.exe	113
PID 3224 wrote to memory of 4608	3224	msedge.exe	114
PID 3224 wrote to memory of 5356	3224	msedge.exe	119
PID 3224 wrote to memory of 5356	3224	msedge.exe	119
PID 3224 wrote to memory of 5356	3224	msedge.exe	119
PID 3224 wrote to memory of 5572	3224	msedge.exe	120
PID 3224 wrote to memory of 5572	3224	msedge.exe	120
PID 3224 wrote to memory of 5572	3224	msedge.exe	120
PID 3224 wrote to memory of 5700	3224	msedge.exe	121
PID 3224 wrote to memory of 5700	3224	msedge.exe	121
PID 3224 wrote to memory of 5700	3224	msedge.exe	121
PID 3224 wrote to memory of 5800	3224	msedge.exe	122
PID 3224 wrote to memory of 5808	3224	msedge.exe	123
PID 3224 wrote to memory of 5800	3224	msedge.exe	122
PID 3224 wrote to memory of 5808	3224	msedge.exe	123
PID 3224 wrote to memory of 5808	3224	msedge.exe	123
PID 3224 wrote to memory of 5876	3224	msedge.exe	124
PID 3224 wrote to memory of 5876	3224	msedge.exe	124
PID 3224 wrote to memory of 5876	3224	msedge.exe	124
PID 3224 wrote to memory of 6100	3224	msedge.exe	125
PID 3224 wrote to memory of 4348	3224	msedge.exe	127
PID 3224 wrote to memory of 5344	3224	msedge.exe	128
PID 3224 wrote to memory of 5344	3224	msedge.exe	128
PID 3224 wrote to memory of 5968	3224	msedge.exe	129
PID 3224 wrote to memory of 5968	3224	msedge.exe	129
PID 3224 wrote to memory of 5968	3224	msedge.exe	129
PID 3224 wrote to memory of 4400	3224	msedge.exe	130
PID 3224 wrote to memory of 4400	3224	msedge.exe	130
PID 3224 wrote to memory of 5740	3224	msedge.exe	131
PID 3224 wrote to memory of 5740	3224	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://wearedevs.net
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x260,0x7ff8c83bc188,0x7ff8c83bc194,0x7ff8c83bc1a0
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,17552571395984727684,11243764563384312037,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,8288418961300835386,10197794631873392207,262144 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=1936 /prefetch:2
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,1808772387025987167,1180231755761106223,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:8
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,2569729892025168247,7916564757205999490,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,9924413185791700416,6515288452712843477,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,6273054961413887429,12380709813213016046,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,9226027167719562120,2898574202046128134,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,16950045341985794407,2857318335828124920,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,4591783649294695078,3913639390051792713,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,5712918469420543416,12488235557190276470,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,5712918469420543416,12488235557190276470,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6276,i,8144079791135918782,5084482831048935337,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:1
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5824,i,5318616722562814883,5122775856509880170,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6476,i,1858730218728263122,3136005260228995216,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3560,i,8223998182675581977,3172155996672036772,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6652,i,15850027219693723603,16086273541700818822,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=6672 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6468,i,13908244390372542840,680499568267065521,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=6912 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4204,i,1484624611185390120,9463919695717517543,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=6916 /prefetch:1
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5416,i,8994453867433900109,6767149355341140926,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6892,i,7231338445327888730,11397467991753972872,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=6924 /prefetch:1
  2⤵
  PID:5700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7084,i,8713855554262656980,5906084538073965384,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7072,i,10926379114910775811,9723534838492033829,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=7004 /prefetch:1
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7392,i,4611318659208752255,8106536361169784282,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=7412 /prefetch:1
  2⤵
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7656,i,529855357541729507,5713148426819464062,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:8
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7736,i,7426875721623562745,4412173532139438191,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=7768 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7736,i,7426875721623562745,4412173532139438191,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=7768 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7716,i,8977488984998627290,6570413675453799555,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=8008,i,17110711682939995047,5583317688089459913,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=8004 /prefetch:1
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6776,i,13803887932812596423,9713396436907539932,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=7160 /prefetch:8
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8160,i,8633952282072548487,10692274218413073453,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=7024 /prefetch:1
  2⤵
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7992,i,4991836910589752051,8349296280874821333,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=7732 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8060,i,6140973002227294128,10313825597325752004,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=8256 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8432,i,1881905230660461069,1935599276978375386,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=8460 /prefetch:1
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8592,i,3062557175815164378,4107417624285206857,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=8616 /prefetch:1
  2⤵
  PID:5908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8756,i,236626718870259212,13512350537275567083,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=8760 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=8444,i,17424511054796247069,7660045697418655672,262144 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=8056 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6248
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,6191533555021263293,6612955913029169991,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=1036 /prefetch:8
  2⤵
  PID:6420
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,6191533555021263293,6612955913029169991,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=1036 /prefetch:8
  2⤵
  PID:6376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8828,i,9548978513131427540,14811504947364828631,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=8736 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8868,i,4177543798718425553,22983606109489177,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=9004 /prefetch:1
  2⤵
  PID:6340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=5184,i,8773132981139964599,15392893499098071048,2097152 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=7752 /prefetch:1
  2⤵
  PID:6392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,17386068956220095069,17348018276393173148,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=8596 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8580,i,8983296321406625252,8423056631868887716,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=8776 /prefetch:8
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,3497410687920499515,16009910153996473937,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:8
  2⤵
  PID:5244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8756,i,13348010932041299268,11732493734768474138,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=8720 /prefetch:8
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9256,i,2312409746486845834,12242058871809171667,524288 --field-trial-handle=1940,i,7197632545524563106,8819161014510200314,262144 --variations-seed-version --mojo-platform-channel-handle=9244 /prefetch:8
  2⤵
  PID:6324

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2328

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:6976

C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe
"C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:6720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/xe-no
  2⤵
  PID:6196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://discord.gg/xe-no
    3⤵
    PID:6216
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=6720.5896.16936506179585762036
  2⤵
  - Drops file in Program Files directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  PID:6240
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x178,0x17c,0x180,0x154,0x188,0x7ff8b997b078,0x7ff8b997b084,0x7ff8b997b090
    3⤵
    PID:6260
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1712,i,1203379784605592715,12061236131239940270,262144 --variations-seed-version --mojo-platform-channel-handle=1784 /prefetch:2
    3⤵
    PID:5996
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=1960,i,1203379784605592715,12061236131239940270,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:3
    3⤵
    PID:1896
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2420,i,1203379784605592715,12061236131239940270,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:8
    3⤵
    PID:2364
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3780,i,1203379784605592715,12061236131239940270,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:1
    3⤵
    PID:6752
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=3836,i,1203379784605592715,12061236131239940270,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:8
    3⤵
    PID:6212
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=792,i,1203379784605592715,12061236131239940270,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:8
    3⤵
    PID:5228
- C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe
  "C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3816
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=3816.5400.16776921284095266086
    3⤵
    - Drops file in Program Files directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:2196
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x17c,0x180,0x184,0x158,0x1b0,0x7ff8b997b078,0x7ff8b997b084,0x7ff8b997b090
      4⤵
      PID:2984
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1976,i,550851704023690270,3241853179970001013,262144 --variations-seed-version --mojo-platform-channel-handle=1912 /prefetch:2
      4⤵
      PID:4408
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=1836,i,550851704023690270,3241853179970001013,262144 --variations-seed-version --mojo-platform-channel-handle=2172 /prefetch:3
      4⤵
      PID:2960
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2324,i,550851704023690270,3241853179970001013,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:8
      4⤵
      PID:5964
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3608,i,550851704023690270,3241853179970001013,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
      4⤵
      PID:4884
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2228,i,550851704023690270,3241853179970001013,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
      4⤵
      PID:5316
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4868,i,550851704023690270,3241853179970001013,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:8
      4⤵
      PID:4688
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=796,i,550851704023690270,3241853179970001013,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:8
      4⤵
      PID:6428
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4968,i,550851704023690270,3241853179970001013,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
      4⤵
      PID:3940
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4472,i,550851704023690270,3241853179970001013,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2268
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4532,i,550851704023690270,3241853179970001013,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
      4⤵
      PID:6064
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4972,i,550851704023690270,3241853179970001013,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:8
      4⤵
      PID:2088
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4888,i,550851704023690270,3241853179970001013,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:8
      4⤵
      PID:2392
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4252,i,550851704023690270,3241853179970001013,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:8
      4⤵
      PID:7032
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4332,i,550851704023690270,3241853179970001013,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:8
      4⤵
      PID:2832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1149874438\manifest.json
Size 102B
SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
MD5 19322c8a94f1ac01a70f8c58cdbbc720
SHA1 7c90dac178c47dac9087dfce738f24a4a627f022
SHA512 f54a9cab8dbe96333862a67912e88c4f26cc3e25a7dc93e8f06d1fb5b0b8e91d53cc0f5619c192380573a2846034ee583276d7eda73dc9fc93bb0d9168f4e099
TLSH
T156B01221EC10B4B32004036C086CC3C063272F032C4079280DE19F84E90D9DBE471528
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1338894210\manifest.json
Size 78B
SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
MD5 259f068207f60fb9d4448c02c27b74ba
SHA1 99131d95cce94750a928738a99caa5c710bbc924
SHA512 fa41eac9d1ca244d06083e3d4230dd94700861155359722c1d815d0d9933dcd39c113b6f0f6ea02ff7ee1acd2fbc6ed40267d557afde16f417e80b678e8136bd
TLSH
T173A02230AC02E23320C803B002B083C383A02C02302A388C0B0320A232C823BE2F323C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1352265208\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1431547468\manifest.json
Size 1002B
SHA256 dca3cd7a673d0776a085c0b8958a85bdd8392923db21a0b55f4d37210f752322
MD5 9be87722ce3608a2d38a79079feaa394
SHA1 34ed541044567272d5402b30fa99eff29d70e9b9
SHA512 d4d22a3c277a9cc3325f4f6f15f18c56efc6945ce8abccae32d66158b9f35039b347e93d0f1002b66336fbef2d750f78184e6a4b72644cb71a2ef944af52388d
TLSH
T10B119B00CC388DD322D4BAA21CC6580A93621DAF4CC23E84339E161D8F1C8AB927366C
MD5 SHA1 SHA512 TLSH

Submit Download

Other

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1662190063\Sigma\Other
Size 34B
SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
MD5 cd0395742b85e2b669eaec1d5f15b65b
SHA1 43c81d1c62fc7ff94f9364639c9a46a0747d122e
SHA512 4df2ce734e2f7bc5f02bb7845ea801b57dcf649565dd94b1b71f578b453ba0a17c61ccee73e7cff8f23cdd6aa37e55be5cb15f4767ff88a9a06de3623604fbf0
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1662190063\manifest.json
Size 132B
SHA256 de864bf0ab8abacfba536d4e9764eca658f903bd2457f955e128c4ee181c7e58
MD5 c9209ab189a035569ba3c65d7375d220
SHA1 1987aaec8f436325415fe36c168c9a37829523f9
SHA512 60495e096f78de05c6025a9d7b69aef9dce0d08ec1abbd4ccba206827a8c25d8449f54f93637599649762ec09a034d32fc8afc06199b1b57cd010ff1a0c850c0
TLSH
T17FC092615802797A14DEB7F00D29CB926AB3CB2E18A4650546F5C228ED2DCDFB5B330B
MD5 SHA1 SHA512 TLSH

Submit Download

english_wikipedia.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1852075040\english_wikipedia.txt
Size 269KB
SHA256 ff105c5b6e65386cd0af95272607eca296c5b8b786c2f0bb4a9ffef20b4cd4f1
MD5 c5b5e739e99f368b294af5d6341d79ab
SHA1 ac32ffdb158540338cee54b3e1c1bcd883b97e99
SHA512 93887a641de44647a191cacdd4b720b4091e4bb5463c0f1ff81bc53b361173b577dcc3717ee9281cf77d27d24576582f89a4008edfd6904e92df32dc8081cc0a
SSDEEP 6144:Uarig5YkFuhe6bke9u8avUdUhWn5dXbcsHqkFnghZwKTZ+oP8:nrd5YkKe+BNavUdUhWn3I+qYngnzx8
TLSH
T14F440A70EA54353BDB9B139F88942F824568D5321F2574A4F69D068A040BFCE877EF2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2196_1852075040\manifest.json
Size 69B
SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
MD5 fb0d9796a86299d3689982f7a949dc6e
SHA1 6179cd612ac0dcc44d0659c7c99d1e0aecbf206e
SHA512 e3e1a18be661da9d450a30a37d24dc08dc8de628a104ce0f4197214ce6f27a2bf9de3eca1c1697fcfa3c601787ca7a6b5e30a5fe3d6ae3b2c10f1ab34af22fd0
TLSH
T141A022200C2088FFF200E3CC0020E380CF28A300A2088C0A022220002280CB80200320
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-as.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2196_530347234\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2196_683490601\manifest.json
Size 76B
SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
MD5 ba25fcf816a017558d3434583e9746b8
SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
TLSH
T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2196_797157198\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping6240_295511671\manifest.fingerprint
Size 66B
SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
MD5 06d2b48de0edcb3e022ed639f0fb0085
SHA1 32f93d5a76998c407087269794026d1ea028828f
SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
TLSH
T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping6240_295511671\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping6240_726191770\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 ba39e449b0b6f939171018ba737eb6e1b7a8a70693dd27046f4781faf2e9a2e1
MD5 790d895123e52cdd5a430ce51833a81f
SHA1 05b596a08273db9dded20d225ff8a813b3dc0edb
SHA512 77ed339e7577d855598afaf78baa9acecf19803ec496352a3e888a2c09492f37f39537839bc22e8967d3c00d678bb34a4a96ec9d5f99620d68107076d11e7914
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P70:fwUQC5VwBIiElEd2K57P70
TLSH
T1DEB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c107d5cf33a714a068be0aded9bac4225385ecd3f59f1705fa681e4010125f6c
MD5 aa4214cdd355dd491d7e78f2dc15f214
SHA1 60b5b7a0e0c833918c018f11fa7354bbb8735685
SHA512 aaaa9dc5718e77344760f3ebe4d3dbfe1578d67071ac4752c2addfa29e2e562b6da4ab466d0cef8231f31f45568e99edbac8c445454402bcf9b5c4cbebeb232e
TLSH
T10BD02372BE91D3D0D019303D502002403B26023123CF832310A8480CDC7404082DEECB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 23KB
SHA256 caaed8bfd99de066ebda9225d0a37fae9058d4293a6f884d049fcd7e8109bee9
MD5 e6e582a56baefb3b457254966ca15021
SHA1 adee7cff52ed81abc85cde7078fdf1eeadc38ef1
SHA512 a762f861e6922f78a60a59d35c41e9aa4c2fc8a7c59ef47c3a922cf485db1d2b354c9c898ebc7ab564aea4d3496d9462f2f6cd5ede769fb899a841ffbeb9f98d
SSDEEP 384:+4Mm3p5ikxHT41BTNM1PK41FzxYtu4weVGgBNHLMSIBmlvFi9dn8T+qfI3KshI:xMm3p5imaQPxMUe4QxxFi9yI+
TLSH
T131B2E2424C78F24AF220807D76F1A18DD43E51A47A581B7E78C4FAF54C0A292A9F994C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 21KB
SHA256 33f8632a05b4e9c216c58432c88e8a83ce96c1492e2da258c5d6a88b51bc82be
MD5 57d7a1228717c2dce06de9bb01dfc8be
SHA1 675a78f3e15f905f243d16b5c50b4d1f51a77aa3
SHA512 dd78ac7e4d4350f328c280852b5f9f64bbcbe430babd62992d27700e0c9bf60229c194487a2c8e151f310fc96badba6d3fcefa6de9dd85c5cd972ee2bcdaa784
SSDEEP 384:V54oBrS7i7BGHB5Ueyx4qLQI+Ttoq6/CL1nWJO+D5aCdVqyeP:VuoJS7kCB5Pu4qimh+4gP
TLSH
T176A2DF3DD64BEEDCF5ED9EB480D51B03338A529AD0E89977023A4B0343F526095DC69D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010a
Size 335KB
SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
MD5 9f9c9ac1a584487d0961c6af2cac057c
SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
TLSH
T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3a85a438103f6d8_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3a85a438103f6d8_0
Size 3KB
SHA256 8563a81e6f1b0cdbf1157b142861a8697d5c1cb51820c0278cfc093685b60ea0
MD5 722f5c8a1c674996b7cdbb81678c8e87
SHA1 d81dbd2d2194241e68f16e09d6c824c6d1ca5b4e
SHA512 194da2ace68606cbe1943135be1272815f30911dcb8573e36cdbe137a532828e639ca70a27cfbc1d15122128758a406a22199729c4fd6d549429034dfc02afa0
TLSH
T19671A69AA354960DCF32A3F91692462AA33580456FD3C72720C5EB721C842F7B99DD4E
MD5 SHA1 SHA512 TLSH

Submit Download

df53bad28ea1e322_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\df53bad28ea1e322_0
Size 263B
SHA256 5dc88bd956ede5cebe458633fade77c4521893955d35f88312456267dd39be13
MD5 4ef2b18b55d5027d97ed8fc43ed34918
SHA1 f2ec1922762bf7590bdd2b8d9bc761e85638a2a3
SHA512 29014335ad80203f7aedcf478327b9f42a2cf36604d519169b88cd0b203453f5744b9d7c08ffe2722ad2f72dcbc27c66003ecc26645c9a23e7a72e38ae6e7ca3
TLSH
T1A2D0A7E7D0D82A81C61D85F0EA9E126FA22750DA459EE9DD511420A28744FF4B7C5237
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 11KB
SHA256 9da84c132f8ed4eec6565cbe5fecbd2e3d9d68a038a26c6324c102b0f1b69798
MD5 3084d35c9d00e46a40049e65464ba847
SHA1 f12948d93b29257c1ce009b954e6bb6e69f8e677
SHA512 2e38f71ade93780df3e46fc39e3b0836447cf48a2c0a1fe24772072506a32ed315cc25c9738d9346f77b3cc2421323669719a16fc58cea665388091c89548b2c
SSDEEP 192:7bIUwZHMpNQDF74ZS/TH4A7VtAVao+JzHXi/o:XZOMjy7B/LJ7VtSoz3iQ
TLSH
T1DB32D6499CD5CB2AEB6892B0F0F5CC42347E845B1A77AF7322106C7C291FBC0BB60556
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 15KB
SHA256 c11483194bd5316e1d947d4767e597df8aaff206f772c85e1208fc82d49625fb
MD5 881f282b19d69db632f9c6957890ee74
SHA1 e91c0d6c7ce2c83ca36e55f387e14a2eba85bed2
SHA512 aabea997f77ec4484722dd2b53dfd5b3dbc9d01bd346e8b709a52de14a5022958a94654c6581a53b4af35e2da36370f4d1aeb076a32c87b38fc4457f02369be7
SSDEEP 192:U/kxSULIbwo5mrc7QNkCNYlAlKdOSnl2dTwqZB1u2mGH7Y/xLoaozcd8vKlm19:TZLGUc7KnBl1ddkqZ/u2PbpNzE8vaU
TLSH
T1B062C54998DEC76AEB9852B0F0E58D52387E8C5FD9776E2323002D7C390BBC5BA70506
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 d5232a740e91e3c1aac4174feff562ca8f91d037734236cb1ab696176a58e067
MD5 99b8a051b1c84d59e549069a0cada512
SHA1 bc625abee4cf28d84869210477b2f26da171aa29
SHA512 896de0d9b8977dd03f9354bc3f71e83c7b43e8f88e05fd690e7aaad42a84b695efe3a9d515b822b5a43fcdc4fa1a8411cea0efe4e3cf2d9c6c823c3dd58b45cc
SSDEEP 96:xaPwkVtO0N3e0YfjwxgcMOQfq7oM+IozqRN6rg:xow2NGjwxUOglMLozq9
TLSH
T13FB12E46E9EA8426DB7186F1E0E64D91307F489E3A5BCF3225109C7D351FBD4BEB410A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 e1a132d13b2c09c605c9da5752fca8a603fdbf15e83a43bc77dc87567d5947dc
MD5 3242229b5fda64aac70c763e10ea0bcd
SHA1 8701ed18868107f094fd6c82ab753e8cdb0d8cd5
SHA512 0ca5251c48603bbe8fe21b0decb677f0bf4f8f287e530e550bdd5dd766363136a608f04ebb756c93223848aeca1162e51741830dcfddab50000d086a2a511955
SSDEEP 48:U81TGkuuSt7SnNvVy9WMxqOjbOqetYnxKXynePhIF8I1y0EaWdCTQxLRNl87:BabtOnN8EOjbJeOxm4UOF8IwzJRNS7
TLSH
T15091C80AEDEA8856E77192B1E0F60D9134BF0CAE3B5B9E2624140C7C390FBD4BDA4106
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 e20788b163db80a19ea8e5728080a05bad73c986e6531baa393d204cca578e5c
MD5 67522f5d1f2f8bef17585e7769107f20
SHA1 ed803d64c2684a01e97f65dd63e272a879709906
SHA512 67e91061125ee0631ce3e22111b4f61b8428a215d35af6d1310096f0733db8c8fc858215ee41970c432721cf3cca279c0d8aa88487e456d9d9c6cecf10058790
SSDEEP 384:DS3UUCt8e8JpBeKeZARpuNE3JpJtqHve4jSn1WALWc4YNSekzjW4S8FBUqQivEUS:I3l/McZQLbm
TLSH
T119827CF2C3E4897D891166F856246D3ADE5E191A02183D67CDE8EE4FA3E1833E70194F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 23c765d1781763e2de06e0af86b7d3dde7e2f0eb9c37f68f5e06c9e860fb4b93
MD5 e9ca19968f97308de999bab6ad03ae7e
SHA1 d6ebe3b52443d0f0391b5efc3ab2d3b6eb386614
SHA512 2b855d980fe79099985b570f342a7f7d802318d2185ddae14248e067551ab283b3f6f71ec3031d5f9360d2114d012375ec7d509ff7937326a38bd296d296f8d0
TLSH
T196D022A31B0830B6B56F3F89906EBC8FC72600640903EDE411D1DC9D0A7E46D0A0B183
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5a54a9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5a54a9.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fbf22ac85ee1e047fe54d3bb186b7ef953051c1a234e04cd7068d8da92667286
MD5 d9e5c415cebfe2da168fdc38efb8b561
SHA1 a30ec0b60719f8228fe0cf3e216da974bdf8544d
SHA512 c72d7ea1b4c8cb4c1eff73e059cce765cd6a14f53fff8a7feb34b048acfc6cf4a9e597cc0b1376718a439a50e652c3b0ed58aace0d9d4c8f2d698cf8051fa0f3
SSDEEP 192:sxZsRLyM/jK1Ml8ME//fGsp7bYWIdpSJnHW6+WNrkzZY476ksAIg51J:sxZsxs//fGsp7bYX6HbMZHJ
TLSH
T13F52F812AA3469778CDBE209F945BF53E6F5147392901E44AAFCCA1C04E6BED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 bba9a75403f296183e35fa72ca8285d46efb048aa3e5dada6b96582279114ab6
MD5 5c4c1c2604567c7eac7cc6aa89507922
SHA1 8c85f4bed56e9fb4200d8f67b3899fee56d1d122
SHA512 3ba7301e621daad0d00c6f5e37feaa1e5bf4b97d9c1447973e856c8bea38f8f93aec62339a60be9afd4340e21fbe21a00f080ff7299fce117b6818bff757c069
SSDEEP 384:sxZexqFm4//fGsp7bYV+dc7mRAHbvfA2W/CN4:s2YFm4//ffwVU6HbQVQ4
TLSH
T147921952A92469B79CD7E209F915BF23E7F81463D9845F48A9FCC90C04E66ED2223C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9c81dfa052825a7dfa96f2d6c7cce808238e84a6bf7f974b82828438f543541f
MD5 3c8a00534a64eb0874ed8d28b6afb64a
SHA1 b153926a76a9b5d5a4bf0faba99b8004c337b9a1
SHA512 c00192599462aef89e767beeb3ea361ba0f339cfd90ab8d2f0613e1d29121a7e8eaa856bda8fa3263c39d8f943f502a208317d22d2f9fb187cb0354fe43e9eab
SSDEEP 192:sxZsRLyM/jK1Ml8Mx//fGsp7b13IdpMtHW6+WNrzQXY4n1rsAIg5nJ:sxZsxp//fGsp7b1YcHb4XJX
TLSH
T1B952E912AA3469B78CDBE209FA45BF53D6F5157392901E44A9FCCA1C04E6BED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 2eca0ce83986e8a6931e938769fcbf0a1e78ffe310a72c4b9cc63145677f999c
MD5 7cd5da487900752fe424e20f31ef7de9
SHA1 dbb3a678432262f0b982397ce8183998bd0e17c6
SHA512 3b8c400be4533dda84d804daf615b4caecda2fd5ca7df9a8e11d4d150aea76c1b4070e769a13f3f6ca71c3bd0c489df1b9044e664eddfead264646f3a36ea5f9
SSDEEP 384:sxZOxVm4//fGsp7bYV+dc7mRDHbvfA2/Wc4:sWfm4//ffwVUJHbQs94
TLSH
T1D882F852A92469B79CDBE208F9157F23E6F81473DA545E48A9FCC90C04E6AED2213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 91d65b91b98e9fc4dadfb36edb606ea7d94988c76cd725fd1af283a7eb796e00
MD5 cb6bfa87fde816bb9617a8412e565203
SHA1 f9743f9b3258e92352e91c58e7cb20a72180712d
SHA512 4b7a57ca8e47ac1abf88cc8eb11aa1ec4178205cd5b7562bff7dadb6bdcd71158e5db9114f0fa43da667a1e0dbb7bac02d4c74efcc11919a72cc85fd5c71bf4d
SSDEEP 384:sxZexym4//fGsp7bYV+dc7mRAHbvfA2W/CN4:s2Ym4//ffwVU6HbQVQ4
TLSH
T1D1820952A92469B79CD7E209F915BF23E7F81463D9845F88A9FCC90C04E67ED2213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 841169616d79848245150ac63daa74ff93f133d707cc2ac692c04c217af30491
MD5 eda12da48894ff65fc47d65c540776ff
SHA1 1a984d1a9c61e80fad872409e742d98548dce521
SHA512 f326b6a29074d176b4f38c791cdc40eabecb21b4f0c0c6c437cbdd80fe2beac5896b70e7ee0792566a7bf4378e858a239f29445f3b1b68fffff659525214440a
SSDEEP 384:sxZexq4m4//fGsrWvM7bYP+dc7mRHHb9gfA2W/hL4:s2Y4m4//fVYMwPUFHbNVR4
TLSH
T1CDA2E652A52469B79CE7E219F911BF22E3B95463C9845E88ADFCCD1C04E67ED2213C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 454a92b138ad02ebbadd25f7a76d8a66ae4904f2676c771f31eb6d14d36f3113
MD5 d65d34b3628bb28182219da617cdc6a3
SHA1 aebf63c60ece8b1afa3dbb706d966ff77ad12195
SHA512 9ce05a2b234617902ff3c1ba29a8ab9718e55f810238e4af376b94ab141a243975085d66af9ed8af7dbb171ed4af7720da1b667c09b6197075662e3b96d921f4
SSDEEP 384:sxZex3m4//fGsp7bYV+dc7mRAHbvfA2W/CN4:s2Jm4//ffwVU6HbQVQ4
TLSH
T11A820952A92469B79CD7E209F915BF23E7F81463D9845F88A9FCC90C04E66ED2213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 224782616cac26c63d744a8d7459bcc729e6c213938073c756418113d8a2021a
MD5 9bbfb839f45cfc84f23194b930216008
SHA1 cc1408788948e0554b3d0c986c80b1a0b5d0511e
SHA512 ca01ce9002f55985292af6e4f518136c4912836de53eda135c1f220a5758520523210c811afb2559a5d2e081bfec404b457f1aa3f3a104c8f2a4eae3175c2fda
SSDEEP 768:jP8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdorojbkOeUnj1:jP8iJPNWvx76ru1jahALocdTCUR
TLSH
T196D20A3B680CCB7E4F845E9CEC266F966DD801CB5A988D5447FA880C03C76EE512699B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2079e03b-da06-4427-af71-e6e1ddbd9ea9\index-dir\the-real-index
Size 72B
SHA256 ddc8c61e7efdfa9961027b8c64e51389ac4071163ccf4bb5c873747639f47105
MD5 e713a9a7054bc0d08899c838e3d1d103
SHA1 217e534cf4281a167579a1dd74f2cc9cb7a81850
SHA512 48c0b62820756754bdb939f9e23422bc963ef8d8fdd26d8bd3bbec1de5bc52c9f234936e3f3f8e1aee482d79ced90df0cd96a20ef55e982302efac4f2135ff1e
TLSH
T189A0022413F14183C64792B125D6066522144921A2222709F1911274C8A0A65964700C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index
Size 3KB
SHA256 20be2a186d44708c893b338211a636a608469f4b3585608dc66bf8b44ed91df6
MD5 c9c287c0ed20b156bb688c0794f8242b
SHA1 5969379b7ffb634f875c31cf6557aee686a1539d
SHA512 8b27423733deb827fe9593f026842f440cf74ed5688e67e4fb60ad5977dc749622dbe51c1136e7da2c742e0d17c3df883480aa345f7ab6cbd81365551752c4be
TLSH
T1ED51FC4E4C451D6DC96D00B25DFA184237763CDE9745CE0B679DE1306CC337A2D14155
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 bc65eee13535b0a1641938d5b535ce93078c3490e3e7eebd7502b8bd5dc019cd
MD5 0ef9c38bbeb2dd10e4fa9a89cee05500
SHA1 99f8456ee07f80fc9dff3135e3bb3ff052f52312
SHA512 b5eef57835f8002efbff2ce3f4fd72ade2cf7e9bac2776804244a3d7ba41dcf120fe97e57a9c850ce8dcd9ef443b09df06847f43a40459ade86ae941389571a6
TLSH
T1B7E0C0F72EF72C44FEBF63E10570A8A00246B469D544BC8F1426EB832461352340AC22
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\37495d39-86cb-4a5a-b07b-961bab271ec4\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 652d67bf27fb2e34d4bbfa7ecbf3d27b5b4222273c8dc584ca8b991c84284562
MD5 fae4b0895b1ae59af5929da42cd9d96f
SHA1 10a795799f07c3fea006fc25f7869d5b38fe4cb7
SHA512 fcd6d7064774e0d0bf8317691803ca95d23d65181459b43479f8fbb5d6bd02560949ef734b66ec3c0a959f64c23ab1ca4847c6d6d6c21ebc1a45c376300ebf22
TLSH
T16DD097A7E9600460C7EF0EE10A21006F8314AC88449B508C9802302D64B3703C526F93
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 51505b8661c4bb0a62530b48186821f88ba2b5c80cae6afd752a74d0b0ecfad6
MD5 d609aed21c74856e751e217b590d8bb8
SHA1 670f502090758a317f7bcc7095259466084560a9
SHA512 026622900cf86a0e56900c3f8f5569e4fa1c27b9b59e2d608f73603bc13b60e1ff2bebd6ecb6282d5230ab718bd95ca7a470100e048280e9e6c20a467f68cceb
TLSH
T164D097A7D0544460C7EF4FE10A11403F8304B888409B508C680210598487703C422F93
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5b3a17.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5b3a17.TMP
Size 138B
SHA256 9e83d5f1d463f7f48af9e7cb414171a4771a5d519232f4d005987c2e0c50164b
MD5 bb40be4b0a3c74d59a4067a142dcb288
SHA1 b390bd3fe56b00232cbf4ee0c6889dbf1effe4c3
SHA512 125f339eaa0829821408a3f8c694bd547fc2648812e65313047ab317619a89ee7a1da9555cad39f7f25ca06960373e41f1583ccafac480c70f432156596896ac
TLSH
T187C02BD7E1600711C7190A910732421E4305BDCD8887818D7403302920B1F23A50AED3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 40c0ec65d2b3c18c07fdf36a2260cf8cca689a74f894e9d60cb25757fbb72088
MD5 51b6fa0daa0221d2ceb80168e6c55189
SHA1 30abd8f6658b13749087ed1f201f0e3dfce7ce6f
SHA512 950344bec41da7c69a696132af9c595772849b528d0a73669d25b4763cc628e26eead10caa569dc16b4a5ec3561d688476a968bdec88089e99eead1e8b610397
TLSH
T122A00220118A53CAD91197F868455142A3944C110105034DC4D0E099CD95B45AA51219
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 32c485aa525a696d0bdcdede4ea60cc421ff6554ef3fa6aba97ab99ea815e92b
MD5 b6cbbcde9a121112f914d8cb4222ed48
SHA1 344740129fbc47460f1e095360a968bb60ea165e
SHA512 eba2f54eb771891cc7d082bc47856801c61dbbc6d29b36cc57482fb3a36521405bd8d2b5e8351ece7c1df1b34827f56c6edc6330296201f7401731f9bf2391f0
TLSH
T1C2B0120C0C4C57C6C55C0374E65A148421AC0954670432068668ECA4A812288D28E13D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fe41.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58fe41.TMP
Size 48B
SHA256 36fd39e92bd46426e551711022659a79f90c16c04984f129ffa95de32943254d
MD5 9a66c6eb09c9867e3d505356f70d3f0a
SHA1 950dcf41968bc314048a8c02c3eba3a4ba3029fd
SHA512 a297d56a36c1fdef7ca31dfca38228a24089d0d91f412ad86261ec9e2a049b56050281809455186634c4a1819c88be1f2eb843dc3c68cae51cb78203cb4ca5db
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 894280c68393c2edd97106eb29350c73cc4eebab170dcb0d2d60a9392148bdaf
MD5 533f4f545fe84069222d1eab2067451a
SHA1 866a9d71e70fc08caa3111f93acd50119b1764a2
SHA512 432cb8194f8aa58ef7f60d108c732f0b7c809bf0cfb38b5b1e224e86e2753a3a47217f3124cbf1a4e22b71a9978eea373be2328cb9cc6b0d12f896610e7527e2
SSDEEP 96:KkOkKHK6TEPIkumW28mJ9Wk2K+TWi2yMERS9DmKQMSa:S3TEPIkumWlmJkk0TWi5MERScta
TLSH
T16491A35536BF42013D3F6829919A8B6707437D63352EA43B3BA840B64E66E210EFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c633dd28-41ad-457f-82ff-b51cc286a8fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c633dd28-41ad-457f-82ff-b51cc286a8fb.tmp
Size 13KB
SHA256 60d8599a8a936ef0bdb6b04a1d9688e480e098b8a8ae548974ad66c9c18f926e
MD5 2589fb3a87dd8192b952252a61ca89a4
SHA1 3125324353d430d58bc785b7417284e546009c83
SHA512 adc6b684948e0a1bf341801d583f24c76726e1878f35116833c183749466ca875309524ee6687deee7873b504bf497d68669162041abc09e9863578ddaca6c54
SSDEEP 192:sxZsRLyM/jK1Ml8Mk//fGsl7b13IdpMtHW6+WNru+/Y421rsAIgrJ:sxZsxM//fGsl7b1YcHbP/a9
TLSH
T17352E811AA3469B78CDBE209FA45BF53D6F9157392901E44ADFC8A1C04E6BED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe598f07.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe598f07.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7fc7491d72e2de2b96414889c4631fd11bd025de3b371a3433806ad6297b8318
MD5 c02a72b97b836ec14040e4f6ca3d2128
SHA1 e6d04514c7d9313d3c9665b6d1a6e47f7b233679
SHA512 be8d3cfad65a34db72340fccff6b665a947c73123cf35f8b2087ba665f2ba566d74efdca43cf5f4fd5accd89963826086e8bc766e3ee18546fdf4e57eae0ade1
SSDEEP 384:wZcIhsNPN23TrvDJkhOp3VeTVOOPrXLpe8C/RB3:OhvDeOpuVOi9PG3
TLSH
T1A9928D32A87C6D676DE3EA49F88623079FF89067F2C42FD4D5DCA71C05DA25C131A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 538ababe551c96d309b4313c48251c1e040eb4fbd25662fc46dc501667a79388
MD5 9df898a98815691192cc90207f6376bb
SHA1 086ba4da92ecd50977ad0e70fa44767af629fdf1
SHA512 57aba03904f3089a83ec07d8fe15510b17d04566051b9a337043abeebfe777ab1c10de3ffb0b65dad2f588bafbcac27f8af24570e73866ce3e17c632577e1de8
SSDEEP 384:PDiFiZcIzsNx8TUNTUlIl+23Tr6DS2khOp3VeAVOOPrXLpe8C/RB3:PuFQzwwgKDStOpvVOi9PG3
TLSH
T1D9D219F258EB5576E9AE9B47A77D2E039EBCC067F5846A90B3C8560CCC8617FC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 40bb44da0c0bbcb51d0bac28c2a08079ab62e600e088c0d23b252a925ffa8f15
MD5 4418f89e4263712f8721a1da589deede
SHA1 f0f4f486379f017dbf51e38e1afd3a6b00157d80
SHA512 2f46dee93685e35f8c0f01ca9a8795be2fa5cd4df4197250f3cc146daca8b967d834b7ebd4506b759e13721ec3071fd554fca3d3867fbb2c6f182205eb0fdeea
SSDEEP 384:PDiFJZcIgsNq8TUNTUlIl62TfTOsZgDtkhOp3VedVOOPrXLpe8C/RB3:PuFBgZwg1yD6OpUVOi9PG3
TLSH
T16DD219F248EB5576E9AE9B47A77D2E039EBCC067F5846A90B7C8560CCC8617FC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c8c5edf7d8cdc24046a393ad427ca7faf813cbd726bf9af72141d5625a57f728
MD5 fba77d76eeb217415ace1db33e9cebdd
SHA1 03c352edf4d61da97c6d916ca9e47eab5b066829
SHA512 e475a46fcf8bfa8042a7fc9ceaa8a4a41cb19ea9a8049f20e25a65103be89f087c0967e8cad1b6b60c70c4a3490fcb99668e10aa0cfe8b1fcf5f6cf339f16174
SSDEEP 96:ZqONkIQsjpfmUTmDK5ih/cIPURHl8h4otop5w5DKBhPwivh50xy0SFYKEAxnO0Bp:gONY6kDfQmiUySaZ903yO4+TQibo1U6
TLSH
T14A02E9356C782CBB9EA3AE49F54737276FA5112FEAC52F85D9E81A1C00C734C2746826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 3ab9e360b37a48be8cd540f7018e21773371a6e0a599f2d61b58b2d0608ec327
MD5 ea1db2dabad2b80f5ba75f44b34d681b
SHA1 c2df7651ff8d6ee23b97379a5bc9e406ce6ecdbb
SHA512 5a9565673cb287d4f698ec0a357c27149e38bbc10ee27cd56dbe70bb0d0bc85733706ae1891286aa3c792dcfc6c781d305756f77809784e1477f418e63305384
SSDEEP 384:PDiFPZcIDsNq8TUNTUlIl62TfTMZgDtkhOp3VedVOOPrXLpe8C/RB3:PuFHDZwgsyD6OpUVOi9PG3
TLSH
T1F7D219F248EB5576E9AE9B47A77D2E039EBCC067F5846A90B7C8560CCC8617FC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 c475cf4df6e6fdea6a1f6ff609ffbef1a8015f4e51df105b42ca9d504d71f6a0
MD5 a54e45d4cce7506a4500198d477db134
SHA1 e4446e3fa03acd82451c98429f3f8941ff627a93
SHA512 79e9691d59c142ee86897bcf0428fcee911e1389ea453ac161781c0afdbc15a2489e0ed54dd8ba6d07adc46ce59f5f1b8159919486199c0259077c2c6328e260
SSDEEP 384:HZcIhsNP+23TrvDJkhOp3VeTVOOPrXLpe8C/RB3:vhADeOpuVOi9PG3
TLSH
T1FA928D32A87C6D676DE3FA49F88623079FF89067F2C42FD495DCA71C05DA25C131A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 012e376a1d2187c17d3be5714e7cd0e0dbe6d46542eb3194b0fc0bb3856f7ec4
MD5 a70a29e101f1a147df09469056773017
SHA1 67239c90a8af1a691cbb27db721039efea37a181
SHA512 05d7f3adcf49d46895717984f1f720f9b402be735fb11e1d896ca02d80b3ea3ae9756ce6626ae7be2bfec87e285e528cd61e0b6ddccd16d87c956d33d9ea19dd
SSDEEP 192:xONS6kRQmiUy+ar903yO4+R5pbr9eGcRzqiU6:xONS6eOr9hOp3VeTVU6
TLSH
T16F121A3268786C7B5EE3A949F48732139FA5812BEBC87FD1D9DC2A1C05DB35C131A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 509a1ec55341066b1a96ef4897b1b8332de282d8ae6c7d00e7cf32e3b64f1455
MD5 a6a64145bb7a3a3a307dd5f20f7d50cb
SHA1 21f545313f78d874e3b166a39a18ee7e08dc4597
SHA512 0e1c50584e74765e814026a1ba0fd706da72baf1118ff71d6e4767265993f1d1dfd7d34c2aa7138fb53c21ba08b20de170c2c005cc7d90365872f1ce76579448
SSDEEP 384:PDiFiZcIgsN78TUNTUlIR62T2TvZS29khOp3Vec7YvDV4BbiGxzO6aqKkBwOOPrq:PuFQg6wgqg2qOpNuh4G6aqtwOi9PG3
TLSH
T180F26CF194D65DB6D49DABC7A77DAD0269BCC033B0485658B3E8A52CEC8B0BFC311851
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7a8b1702ad59ef18019cfbe08c5c45ee312a0a8069e1c7ca5c18d2bd425e02c8
MD5 7bc89bf60b31572f562ada41a4806a4a
SHA1 4096108c34d29c44e998a9557bd5f1a01f3e79a1
SHA512 b0d1b36ef7d2b64f055afcc2f371fb9ae735a256ef3bfb33aa9e8f81d71f122253c8c0fb508e742549ff2da3920d54188308038f638aa43124120c0868963d09
TLSH
T15DE00103930004FBD469073000D31B113BF7D03417F20B6B9E2222752C63B042D71F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e6ee68e9a708c21a0a854d1cd736bedbc4d7d9ea344b458ab06cb231f6dc3bc5
MD5 24be298fce5b5d91998b67f1a7e2d670
SHA1 9cb677c46f3e9959a338ce048682b15279f21e73
SHA512 110a59b3583d8f9c4ca2395426a6c5fb5f8ef00a7032f58aee38f57068b80ab09612f3aee0b30b859e7d008a6bbff51f4824f2dc296da38d57188dc4a36e3eaf
TLSH
T13FE0091BD30085FFD46D073110D36F613AE6E02417F20B6A9A2226AA2C63B482EB1F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c87804322a4c585fb13b3dc290b23785203eacce3473cff9fe1278d25a957f7f
MD5 a16c9e4ad73aec4778be653444fb92da
SHA1 c00c7d981dd23fa45dc875bd56d1eda5dfb1103f
SHA512 c763daf4d55c2bcfe40176d2f09738596fb2d1ab233423fedbef5039ef550a8f9fd6ba32562518eee095a87f5369f92cf9b9f3b31cdec8112481f623c4f84173
TLSH
T15AE00917930005BBD469073100D35F213AE6D02417B20B6A9E22266A2C62B482E61F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5a20b8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a20b8.TMP
Size 392B
SHA256 47b2c5b7fbe061e2712e55f4b16035c043acca2a044ba3bdb47e4651c2e01c00
MD5 7676fa24269ea2625fbe5aef0970ba2f
SHA1 8b9700ab5a27e2d4582710671ae2d2d21486bf09
SHA512 2f696a32c9a59f0e451a9d5716958cb3695d163ff790f51030a69512948eefb9b5bb337dc6cbf4c3c995c31975158b77654bdba583b43ae5b81ce5fc43142d86
TLSH
T14DE002025300049BC410033000D31F113FF6D0240773074BDE2113791C63B002D51740
MD5 SHA1 SHA512 TLSH

Submit Download

ac9a574a-e6e6-42ea-aea1-c91e3ca0b08a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ac9a574a-e6e6-42ea-aea1-c91e3ca0b08a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f0bed118c8b2d54700d5c062ae483eafb40187f3ece0f499f227c9419fcb1126
MD5 96691b9f6898bce03ab06eb5587af310
SHA1 828b6adb6235630c686362f1a66b4f306fcd7f4f
SHA512 dbe25c6cd94ed4d8cf7abb1df5468211d68760e1bba7852636cdffca7925c861a50ad0674cfa58918ab1c185d4ee8e7cea1ddcb2fbf7247e051dd359a311eafb
TLSH
T143411C58B6FA1148B3B76F5AABF6A82E087F7D762E06D05D00110E4E0A67B05CCA1737
MD5 SHA1 SHA512 TLSH

Submit Download

c5004759-0ea4-46bb-a49d-8a3d8f2ca247

Path C:\Users\Admin\AppData\Local\Xeno\Tabs\c5004759-0ea4-46bb-a49d-8a3d8f2ca247
Size 22B
SHA256 cf603e7740f7f7cbf211c7b240f8426c0bf602353290cdb3c9a52adbb0dfaec1
MD5 7f9e869133ec86dd8316e6610419e87e
SHA1 c7f7c502d3829603581008641cc1fddd0b020b47
SHA512 82eefffefe5175f27d629cb07ee36a954d585d4be65921a9ecdd7195331ae2440845686b870d6180ebd587ff5530e04a04af0c9515f9f2feab919b61ef91c1f4
MD5 SHA1 SHA512

Submit Download

config.json

Path C:\Users\Admin\AppData\Local\Xeno\Tabs\config.json
Size 78B
SHA256 a04d13abfa298f6e9298bf644ef72f75522ac55915c5a7f66fdb7b2f1a0f57f9
MD5 dd75c1cce0fee3e7ee7beb938e6f80d5
SHA1 cdc8005caf2eb3c2bb9b22416f7ab35fd4a00c33
SHA512 8d8a52bfa1ecfe3ec47b08204fbfc37a31887a5faeaf598552e7e9dac40ac65ae8ef0dfdbc5204f28f9a3b2a26cbe8038fe2209f1a21dd3a1e36b853a6b328ba
TLSH
T12BA022F3B82A388008F2B30C228A0083C00A3ACBCC802000F03280888FB3E800082A02
MD5 SHA1 SHA512 TLSH

Submit Download

XENO_CACHE.bin

Path C:\Users\Admin\AppData\Local\Xeno\XENO_CACHE.bin
Size 36B
SHA256 3bab55816f9c1c63b26bee8027a74983736938cfa748d9c91230391d4bacfb88
MD5 03b4e88d732421deccbdd05cb90b0513
SHA1 1ba9d3bd3af60ecc041e93251633b5a0fbac4d9b
SHA512 40e01403608fc8d8c0bc7bc6e1367a472778dea5d4dde4d242b37b0860d098075ac71cf24abd85c6b9ee67bf6adf80adaaf279a969f4477555807003276a2c75
MD5 SHA1 SHA512

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Xeno\settings.json
Size 101B
SHA256 88e5c8567b1cad0fa2a42a21ac273a1ffb8a6992be41e5de548d11f281f4c373
MD5 7109faf92716c37ae9d65f89a2477be0
SHA1 de2903bb44600fd8a69649c395335d4fc226c5e0
SHA512 f41ca49622d3458c1365fd9f610e1c27fd3dd816ce5c910e785532dcc39d94ceb1a00991909cc247ab4b9e9da0ac583245168853d8bdcc235116f0a7a4538b2f
TLSH
T11CB09232984108FC01608299C841D80203118E0120662E02B4BE025928308346000FD8
MD5 SHA1 SHA512 TLSH

Submit Download

Xeno-v1.3.60.zip.crdownload

Path C:\Users\Admin\Downloads\Xeno-v1.3.60.zip.crdownload
Size 6.8MB
SHA256 e8ea6ee3a8936390ca866af0340c8512df663bd7ffc71407ee01cb021dbbcf36
MD5 c8426d98b2d7521a9a21775da525a608
SHA1 7484351e39d6611b512a7e7362ad2a6970d918dc
SHA512 e075a9b9731a0a51d93a50e8cddc0649ddba16f114230fc944a92b0ee1d9b62481ea1e8f2339943fbd4ce51a16c3e1a2b502c9a21dfe54524309f7806a71ef3a
SSDEEP 196608:MpF20v3bGBvG7bM0Y2XaCzC/s+528kgAjJ5wop0IKBA8MW:MpFzv3b/nMkhZ8kgoFp0xG8MW
TLSH
T11976334C66FC18D2FA3492BC1D351AE4B593B7467611A813AA4808E736EBDC05B53F2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 1fc5015b08c330bd1453066adc547f0e0f54ded4050770a8187fe5602a2d0797
MD5 7b8406bf5f7cf1fd6fee966de7c55a4d
SHA1 932db765ab5f0a24fa273cf3fdbea305c7c74947
SHA512 952d3825c32bfe7bf8749027596fe925d4e6036fcfbd22c5e52096f554679d5a3ca31c622d8b21b4466004f707d5890607992749417c8036ec4549d2481f85ed
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 17170f5045be6605ae56bf3a89fd3d8a6667685a8d950faa84e6aba51271fae3
MD5 7cc0634bd44fcd82e5fd03c3be1c2251
SHA1 e4a2343f902524f8af8cfc6c144fb047ab588597
SHA512 3bccd55596e779453b40202a04ced3cb1301c9994c962fae6c3e5811146c436952367b5c7d17999bef9fd1037837e6691ed8736eda1decbdf579d7c1a0664aba
TLSH
T129D011223222A23CC82020B30803A208A800C20F800A8000A82C8A2E2E088A80EA388A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 db98802a9d2b66d6c653bb4a908847da541153ed7da462c0c687d5ca858a64bc
MD5 bfe6fc70fe48295d2d61241d15765a97
SHA1 508b1a0c7c562e2e52f47c34c2719d59453564c6
SHA512 fa80c4e4fab0056d2ab2186f79f14d4bef2c38dde0c12d753e79e112c4cbe89b146a2690aaeca39031fa62634927226b4adfefaecefbef53570a75371a835acb
TLSH
T1EED02B6222351538C61071734883E248A000C11F000784001E39F92D1E418F50CC2985
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 dd6b307f1e6556029049398613f12a4fa2936375a6e254472aa0a69da2a8557f
MD5 3050ed6b7b3ffae31c248f29ff93ab51
SHA1 d0dbb537116bf684929087df5c0afb0545df2f73
SHA512 48fc2ab4a8bd324f8805b0c681fd9607ca08ac1c9703ddbafa413562b7ea1f56d8f3b514e4240e24ea2ad58cd56a407b2ab8f77d27f6431f2b5a6820d9136742
TLSH
T160D0C0F633257939C320303380C3D1446140C10F208645185D34EA7C1DA5CA708D94C4
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 9e5f41fadc10bffa2bd206858cfbe47eb39696a85f2360a7a440e9c3e64c5ec5
MD5 e16cb8dc1d102fc094ac51110fab75d7
SHA1 70905079f22f3b18cfaf33babe7a06c95c2abc03
SHA512 981646957ced9511bc74e8f175e875f1c9ed11952a62a0458b3619c5bf074c573dbd3cd269fcd71b2dcefd4e2f73bcd7fee57bbdea1efc5a25cccdcf66ab20d4
TLSH
T192D0C0F633257539C32031328083D1446240C00E208646185D34DA7C1DA6CA748D94C4
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Extension Scripts\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Extension State\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Network\Network Persistent State
Size 229B
SHA256 153938ecc186cd98a2f1ebd1f53ae88cfe9d9884bd470e9166a53348a071fb2b
MD5 5c9f79435fd36dd2a8914a542651f839
SHA1 81f4f5faf2f14d448626b3f49618d11fd4295cad
SHA512 0e7cf3372f919b11b0c6341bc4df2bb8ba5106463b06c74f0736b14755fa23a78db7e9b3111938570225435169bd01f7198b6124007defa77e90bbe21fd14588
TLSH
T17AD0A7B655601AFE075583E01A24685BCE7D4003422C9DBAC6347B2D43A11B9901095B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5c5115.TMP

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Network\Network Persistent State~RFe5c5115.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Network\TransportSecurity
Size 356B
SHA256 fbbcdea5deab082b92190c44b0234f77f40443b6e324b2d9b8c317a62d1b86ce
MD5 7c7ebcd0097d8ab0f0950009f5bdcbdd
SHA1 756febf4a2eea19f11a3f4689391d6ad4243e98e
SHA512 5292459e121d4abd74574d22b3591a30a56d93b4b3efb153b6b6c7b958bafa7498d30ae0e2bcfabaa3e7c918c860a0d083e8cdf1e1d0c156601ddd8613f20ddc
TLSH
T10DE0DFE385AEB42710AC0A6A9D44AC046E7AE4304051E8F9DAA2827CB0888FA5702013
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 824c0509d6ae86987c89cb7a6cdfe954fb2a72e3a6b3f638bacce2d17c2714e5
MD5 f9cab01dd8cb994dc7eb92f94fc95ebe
SHA1 75997c22d204b00a7f36d855d3bf4b924fc0cec9
SHA512 bbb5f23968a5b8a0f9941c33b08580876ac8c60fe4f2e113e9b1806bb4cf1631b7ba3fe49996c76d96545c246822e201e9e3d868305ff31457f5a3d534bae59e
SSDEEP 96:stsC5sA+cObDznffqPZ8i0vhEzkmim/7qx+WVHMSm+uecadQjl+gBwL/+MOB:stsCbinf+Z8paL//S+Wi8dYQL/+MC
TLSH
T147E1A7026E2879775CC7F61DFA35BB52E2FA606261D11E58EBFC861C08D66CC520790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 bff4c845a2b92fe62159c56197b6fe14fd21d8805af1dba577f473360bbeb184
MD5 6cdb65412171bb749aa79f0109aac7c2
SHA1 2f390d2aed3c580ddf85b9644a585682ab282761
SHA512 21e9714c76e240477652024b9af010bae1f3fb3c911bf8e0c481c86e58c31ea4feb13e70df7295ea3effd5fd0f8949e8d86ab8c46bed833d27d2622178a55a49
SSDEEP 96:sts85sA+c6b9znffqPZ8i0vhEmkmLm/7qx+WVHMSm+uecadQjl+gBwL3KOB:sts8bsnf+Z8pama/S+Wi8dYQL3KC
TLSH
T1EEE1B7026E287D775CC7F619BA35BF52E2FA606221D51E58EFFC861C08E66CC520790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 9b6d5acdfd324dbeefe277f6a739d793ef33efa46e1748098876195fd959a1b4
MD5 04805f7b5e087e966c0c5a5cc84775d4
SHA1 b59e22077d821f6faa584b7390d05b614bc33538
SHA512 909cff0e33a1b9ddfa94a218f374fce9f44696d81113aa8393920b6a863bae1b5d6a092793308066c0f38bf624bd8e13a2e7eea171e113eedf02ae1e1a91dd5a
SSDEEP 96:sts85sA+c6b9znffIZ8i0vhEmkmLm/7qx+WVHMSm+uecadQjl+gBSKaMOB:sts8bsnfAZ8pama/S+Wi8dYyKaMC
TLSH
T10AD1BA426E2879774CC7F619BA35BF42E2F9606225D51E58EFFC861C09D66CC130790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5bd32b.TMP

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Preferences~RFe5bd32b.TMP
Size 6KB
SHA256 382f651ee091e62c2cbb687fe336af121aa0c729048a46fce2ab88826fc4fa38
MD5 85b460d195ed0cc2432e161b71dd8175
SHA1 75053c910797db6f3b7d85f0eb59f67d43e660bd
SHA512 47bd11d1a804f5ac5601e5a6fbab68e887035f07c139a1495a810d89ee9e54f48fc9f4a0cdeac1f6c32467e7599096e2ad350f828c8afd93056ae35c26f08657
SSDEEP 96:sts85sA+c6b9JnffIZ8i0vhEmkmLm/7qx+WVHMSm+uecadQjl+gB+aMEB:sts8bunfAZ8pama/S+Wi8dYeaM8
TLSH
T1E0D1B8026F2878774CC7F619BA35BB42D2FA206225D51E98EFFC851C08D66DC130790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Local State
Size 1KB
SHA256 a11c7c3ba575eb6e7c71bacc97122a9786232a2d041cf6dc6355004cc90cea92
MD5 f7d2ff4d33e9d7d00795976011a92693
SHA1 d144de33bde1e05027527730dd360d79264085d9
SHA512 16985d1ccd506a709cf3487f6b52746f3e5d08d9ac694a2926c8764b4322146fccb17551c15cebf985c298e8a840b6d9ee35a7e88493d7048d0d4330b59f3d61
TLSH
T1193167B2F8907B37AC817586B146E7176F21617580D16F4492ED4B1802E36DC567BD33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Local State
Size 2KB
SHA256 27f3f8397967eb9a986c5120f37ebd7492877abfc67bbfd8b0577b92263578e2
MD5 9f621b550dd8d8bcabd689f2935a0ded
SHA1 732c34bafc302b794d08c14b5e2855f6cb517d48
SHA512 3a1832b0aaba68c5049b7c2f6c788718e15026ecf214c951a814cb46f998ac5d0d373c549013d7cb6cdbf269c135fbc65b13fa85fa441205e1a3d12bd05b66ee
TLSH
T16551B773FC44BA7789D2A644B909BB13AE3661A085E23F909AFD0B1C01E769C1353C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Local State
Size 3KB
SHA256 867f367f02128e254fdc11c369012e5d3a8bc0af8752218d15086b43e3688340
MD5 1c0e20d9f29c16558c6491e7d7ccbb00
SHA1 ff2bc99d29df337670260aca081e17b6bca98036
SHA512 4568475a349b17cb1a083d72b75270f39d6beaa7b7ca68efd625e92a659ab8aef14ba0f3e08456ee3af0f412f5a6c571f1752744a18b7d6e7683175f1cb5c7eb
TLSH
T15271D662B864B9374DE2AA44B8857B07BB656232D0D13F98CAFC0F1C02D73D81352C13
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Local State
Size 16KB
SHA256 10dcceb7ae88de0512d55d453b637b28f8e05dea7f95746305243b39add00bec
MD5 15f178ddc87b76fdff592e373c95bc90
SHA1 0e41ac01e21dcfd7c614582b7d70ef8c2d3f31fb
SHA512 d8fc80dc4439f5c8e8dda0a050066fd2a02bfba912bb4bba9af3a1433c060ffaa60a9a7a2e64f76e4eb5442e4ca616fed76db144484f53b7f5aed0246888d677
SSDEEP 384:zd+aQikB+z/xvxjg/qhEwNbo1afWlb59zN:k/UxvxjgC+Cul1FN
TLSH
T148728D2B65687E23A9F3F645B95C174BDB7594B290C27EA84EFE5F0906973D80303E02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Local State
Size 17KB
SHA256 822e5f9d881d167a5f8825225aaae210b3ca973424fe15038529b9b3c0705f7e
MD5 17058b3bc501fb34fffcc0fae49c96df
SHA1 b6f0656a72c60cbcb0729648d4557cec27e27496
SHA512 d151485f6c20224cd31acfe08f4ebcc310075e5deb87a373cc0e69d37dffcf27ea3327ce17521866c7dedf3e2d150099f858b5dd20961e1d7bf381ce8ca22bc5
SSDEEP 384:zd+aQikB+z/xvxjg/qhEm3NgZ1HfEuSphb59zN:k/UxvxjgC+mAPSph1FN
TLSH
T183828D3AE468BE23A8F3F6817609679BDBB4516290C56EE88DED5F0D06873DD0307D06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Local State
Size 18KB
SHA256 9e14345e3fd50c21250fba79696414756e78e3225035f0e587c8066341b60cfe
MD5 6848aa594107d0c546606608b74f9fb3
SHA1 5a8b1d967152b9e3273fcd6bf0700624b3529622
SHA512 abfe5d849117c585cfdd13990ff74537a5fd49550b7e5f8ff93b5cbf65cc19076773b981a2f32d476811af3a0c43ae35244ce2f184675a20ed42fb8ac8e3181e
SSDEEP 384:z3+aQikB+z/xvxjg/qhEH3NgZpzfEuS4Rb9ukDzw9z+:q/UxvxjgC+HiPS4RMF+
TLSH
T173828D3AA468BD3368F3B68176195B8BEBF4556290C52EE88DED5F0D05873DD0307D06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5b3313.TMP

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Local State~RFe5b3313.TMP
Size 1KB
SHA256 82785d0dfba654438754be314b14f7fefc65b643c44e33335d62128bcf3093ab
MD5 acc1ef5cac55afc8b3ccdf8870bed321
SHA1 695c5f93ca0dd805d94e3ba4f16a71403eb23c67
SHA512 85c3b63de4065da40009ba5e00d62276804edb574769297593c2ddc8135ee2301fa58db3f87dbff0beac42a672352e879dcac41415abba3a8bd268280e6077eb
TLSH
T1C02172B6F8C57A37AC816586B502F70B3E2062B440E42F48E2DE461802E75DC82BBC33
MD5 SHA1 SHA512 TLSH

Submit Download

crs.pb

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\PKIMetadata\46.0.0.0\crs.pb
Size 233KB
SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
MD5 8bbfaa2cd5cdd9a5019da146cf4deed5
SHA1 17ed2fb07543c5d4bc196a1989dd16a9dbcaacc1
SHA512 cfeee2916f19648ed408b4287e234b4140cf82254cd4b83d918c0a4c3bac2b0467d921915aec290823355be4a0cc82017557be588f65134b466b7192f795f6c2
SSDEEP 6144:KKiD4F7BVps9YpVW+J2i/P66k8GyST+uUP:KB69Vps9C2GAQb
TLSH
T14A34AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\PKIMetadata\46.0.0.0\ct_config.pb
Size 16KB
SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
MD5 ca6e253c3fc7718b4455493460053be3
SHA1 4085dcccd29a931b8ea9b74f008e26409edf78ad
SHA512 0004e83a845bdab07f01df32094c202c9f3b8767a6dadd707abc19796f917221f869791673315e9d2c5a6a1fc50b922cceb622db98601055df5949818dd6ea58
SSDEEP 384:7tomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:7l5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T13A72C9BFA1169F000383D558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A567B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\PKIMetadata\46.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
MD5 8061c7027f406f3e20ea5d26969f00bd
SHA1 635d6260e16d1ac595f760df9c5bdda8279629a4
SHA512 7be0be7d59ed46b7ce6adbc1ddc42119426b3223491a03ff068dae66d13a261cc954640916ff4379a6040e021689f070b33dc82b45c010b728ee59abd42f3610
SSDEEP 96:Bxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:I1IDCrBnYQ5jlMacFwn2c9w
TLSH
T1362204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Filtering Rules

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Advertising

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Advertising
Size 19KB
SHA256 231be4e0be45f588b161634c816b9a5a49f530c0dcb55461d37715a94482dca1
MD5 897eefe311c18078a34e06f3cf624a6a
SHA1 98246e769fb513b8aead588024d1ceadc65422d9
SHA512 0fad93ec06d6cadb4c2e72b3355b509d5b9995706d6b7e9e69df21d9907dd3d4156eaba62a6c64ed34a6747046ffff841cc79020aff0a29690258ab487bbd6cd
SSDEEP 384:/j+Vafk2xyJEYoAYiQZU8rYvepdFhQXVVRwjSTV2quzxmVUiKF4EysZ4y5:zfEHoAYiQHriepdFWlVmjSTV2qwFOs1
TLSH
T16A926151887035622F2F50CDE0583F8E1199667540AEE6DE9FE48666F28C0F37894EFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Analytics
Size 3KB
SHA256 bba2063d20d70f4ab06dc2ae04c2564cc2b8c631b6dab68248957dbdf107fdd2
MD5 b55f84fa839160086b8b337b59f80ded
SHA1 0fde6cb65ef56264517aab0eb5ea93667f5985c2
SHA512 6750626e0efca608abafe63926229887a68c9f3e657cb78921daf9c6b3ce11d6bfe1ba83fac775a8d1b6b69cbc00dc193fcb818c70ded3ea159b6241fd2823ce
TLSH
T1CF815415A4A014433E2E5668E03C76B912E8253880E9FBD9EFB19965F30C0D778E597E
MD5 SHA1 SHA512 TLSH

Submit Download

CompatExceptions

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\CompatExceptions
Size 689B
SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
MD5 108de320dc5348d3b6af1f06a4374407
SHA1 90aa226d3c9d50cf4435ecdd2b8b0086d8edeb8b
SHA512 70f30c45e20b7cddd0cba6476af9338975cec8e40b8b19603af5fa859a34c6eb2138957daaa263633fe65213e2186402d05d9d29ad53e8f311335555116314c2
TLSH
T1E101E6F18EBD58313C74967C876C0E8FB9A5636F2898F2E96502CC87E3C054761A6C78
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Content
Size 4KB
SHA256 9a63f38e22b8573cbd47a4ef7b67ccb0934b87239e075c5cfafc7a1014e340c6
MD5 0e3ce75aaf5e674dcd7508251bb839c5
SHA1 35d4a84a8d946263e6b1d06fadc31c5753a946f0
SHA512 80d49bfdbcce2ac21c5c39c6c538135a9768b5fadd73137f6b5916fe6740827fda06c154508c0f9810723c397a22f3d93542f3e972ed3b736f7478ea2e6dc0a9
SSDEEP 48:lAHJBLfUUIAPMsb2zIEcySe00woiyKIdw5uZWhDNB+jS+3NrSA6CdM+3+1oH:lApdOAP7bercySB/1ylw5usB+WB8x+yH
TLSH
T13991B7037E4409276E95D105C0ED209E2C71ABB0C85DEDC99B964B7FBBC8C8BA4961FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Cryptomining
Size 552B
SHA256 bdee796bf07922c152d770cd5928955f1b12c12515c4db6fc0ab8d2ad0c44c4e
MD5 39461c6ea4ff09d663a65d133eb47c98
SHA1 c41f5b5ac9a202ec7dd12122e64b858379a9a815
SHA512 a8e195fb9bfa68dbb064a0f8a41cd86aef5fca43349388294d364b5fd556f0a01674bffcbb5eb2a36e3fea9c64bf575b5e7ed674661dcb7544ed7a961686d4f8
TLSH
T14AF0C0E5C82197766FD544A1E05E7389F4844BB26094F3D50B56321996E8A432684DEC
MD5 SHA1 SHA512 TLSH

Submit Download

Entities

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Entities
Size 68KB
SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
MD5 478a605d5578236f2d1ddc93c2f22456
SHA1 917f05453d497b3e3de684a905e141972c34a267
SHA512 26d75309976fac0bd03ffe7596209c50ead7518584dd9f27d12a86d80ecec0889bb58da1b8dc8cdb38fc6bfdca7928a54c5a15903c4b8d293633d4d58ec147b5
SSDEEP 1536:Wz20p1W8VMVLwecMFUh+oP9jt1PNEOjy+in:W2W1WUMzUT1jpw
TLSH
T152630877BC500D3384FB804BB09D2D6C21249FE5D8ABFED89BB1516612839C4B5D86FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Fingerprinting
Size 1KB
SHA256 05b29240a28bb75b4535d558edc510eb92df0ac27e9502498b99cdbc576b8298
MD5 f665b35df3c2a7b4efd9dc396f2af9bf
SHA1 2833c37d7d92a4cd1e413eba0d6717e90e69f973
SHA512 e7930341af55bae220962d79ce9aa056bbd1c9fe3cfaf0fd4181d9aa4257b5679648e4aa19561c2f9b5c8fcc6e6757d3616726eb28e77a2b899fa25f7d1b6706
TLSH
T1DF211F8295D038716E6E1488D55C3F9C129A2B7001E6F5DCCEF486A1B61489F7180C67
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\LICENSE
Size 34KB
SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
MD5 d32239bcb673463ab874e80d47fae504
SHA1 8624bcdae55baeef00cd11d5dfcfa60f68710a02
SHA512 7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c
SSDEEP 768:Mo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7D:Mhcycsrfrnoue
TLSH
T1B6F2735FB74413B2018206A26A9F68DEE319D07A73664095785DC15C27B3E3483BFBED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Social

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Social
Size 754B
SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
MD5 1d06d58fe9131c14ba5ba5ff740b020f
SHA1 e6ed812e23e201b20170e928686a5d612165df85
SHA512 2854c73c6ef4d271d0e992113732ad65e406d6310711551952b4d451e2c577a2c3dcb06052e3ab30003b01619a39e87e5dd28d54f459f94efe879d1a79039b8f
TLSH
T14E0126DB1A1450027FAAC495E4458B6948B00630445DFDE582B8D27BA08EC97F39F7B9
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download

TransparentAdvertisers

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\TransparentAdvertisers
Size 105B
SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
MD5 57d5a3548911886de2f3bd3172e808ed
SHA1 ca932af3b25f245ce931fbc6cf10299e5fbe35a7
SHA512 933194509d305b2a60b38c149ba1d74e142ef15647242b287844d263006d33ffa38b6ea263c89cb821a9277d41f0cfda95a0eda830f3a5ef8df5ba80d3bbc818
TLSH
T1FEB00170D480008ADF4062C1D032DD98E08D5377A138C4CAAAF80C66F2433CAD1A38F9
MD5 SHA1 SHA512 TLSH

Submit Download

Advertising

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Advertising
Size 21KB
SHA256 5c62ee354070033dba1bad40dcde115a81db45943b2274fae7059a5aa5c61d33
MD5 452f3e9d40539cd65cafbd008308b5b8
SHA1 34203b4a803009ff56bb28d3a14305348082990f
SHA512 08504c06b603db3cb12f0ed6e30e733c2a2c830cad1124771c64b0e7b8480113383440325c56116fb57bde458b393ce182a3af75f0cef146ad6a8872ab9a964b
SSDEEP 384:oQh4q3kwr8CPLo3AptN7NoTn5LTDq3ZXmRHAez/GRQMKWxV1R:wqRr82LKAptNJoTNT2JXm1AezO2MKWx5
TLSH
T16CA2B361996025513E6F009DF1993FCD5AA8233080E9FAE9CFA0C676B35D4D335948FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Analytics
Size 3KB
SHA256 d303be86132f8d7131941d41736694c2e29647ebaeccb38c0976fe66616ec8af
MD5 c4c782264f4a6a6ba84801c8c148afdd
SHA1 f138b8f526133c5dd612f79825f4706569fd18b2
SHA512 e1d3b123a7eabfe72d4df981e1015ca616c51fe7d94de91223e9c7f4eb98ed7d3ebcf7b5c7e08579db502c7b3529e095d314dc71b8cf5e79081c678e73aa646e
TLSH
T1F261C814312434212E1A126ED55E3E8E6AF8223904FCF7E14FF18A71B2194DB38E873B
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Content
Size 5KB
SHA256 70c295600066e9d3feeacd6bfc735bbcac6243694e4259477822d3db252729e1
MD5 7c5f5e42e885211f783a06b1317ba145
SHA1 079ab890b012120b89f776e4bfe67f3789f67096
SHA512 ec581f41917ee010d71a021cf16648fa757327198113dc3daff3adb33ee739da3f40d87a6f3e49004106770ea705e6b800fe263d21eccd33d7883fd1ed8c82eb
SSDEEP 96:02KCCvwLR/tE1LYSeyTPXD7fOiCrC400uvuJEjchVEy8Upy4uILrqNaRq3:02KCMwtWLYSe8miZHvui68kRBg3
TLSH
T169C183B2495079522F3E01C6F9E6265488E483715CBEEBC787E0C62CDD0E9E335A835B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Cryptomining
Size 32B
SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
MD5 4ec1eda0e8a06238ff5bf88569964d59
SHA1 a2e78944fcac34d89385487ccbbfa4d8f078d612
SHA512 c9b1ed7b61f26d94d7f5eded2d42d40f3e4300eee2319fe28e04b25cdb6dd92daf67828bff453bf5fc8d7b6ceb58cab319fc0daac9b0050e27a89efe74d2734e
MD5 SHA1 SHA512

Submit Download

Entities

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Entities
Size 128KB
SHA256 a5409d2c6a8cbd9339a95a5e09fcaedd4546a49d47fc4ebeda2d8749cfc66987
MD5 87b4b75312dedc7106ac746153153c1a
SHA1 54fd4b67eb16620ce0dafe8eb641f6a256dfc4f0
SHA512 f594a5039c73db236f97dd50c3eb007f2fa2ff44d558222cf983dcd703d89f9b1e832bd3c249a20bfa592656e9c2e61a41f90df1b927fdd8f490d36734f92d30
SSDEEP 1536:e9nKLDxqghS81HcmcgqPvD2E/FwoqtK1Gmbpq6CXkkqGqnuP7Sr:GnANN1Pt3/oqtKAWvCJqGqnuPK
TLSH
T1A8D30938FE60C8185CEB041B91296DDC5B801BDA5AA6FDC9EF7F78190242DDD33285B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Fingerprinting
Size 2KB
SHA256 5306139881e81eebffd97de016130fdbb04e3ae976d94ad7a74e5dee63fbafcd
MD5 427724f72baa3d5c91671853a89245e5
SHA1 a33deaa88143c298e0732ecb233663c372cb0e2b
SHA512 bd0027e9bd25fa3426dfe85f67bac14bc3124bbbd6493c1d1aafc33343dcb008a8a418134deda235b71377ff970fcdc45ce4e6b1eae79fd3adf1bc3ba2e2103e
TLSH
T19441552354202051BEBD498CF59A3F4D29E5623984DDF6D5DFE08936721A8E734908A7
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\LICENSE
Size 66B
SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
MD5 5b7baf861a48c045d997992424b5877b
SHA1 2b2bd9a13afe49748abf39faf9eb29ed658f066e
SHA512 4820b41aa5ff4d934a583e1f0b93b1512631102bb2dfdb74792a2f0dcf9907da7680c02a5ddd2492a1e6d58cdada3453d9e38bb8deab6ce831ff36a7f8de016c
TLSH
T1A8A0025216021A6312E295EA5E589B4FA50A1AD5255C0341164904D898B01D995E87AE
MD5 SHA1 SHA512 TLSH

Submit Download

Social

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Social
Size 3KB
SHA256 28ac79097cf67587a228fdfe4746a1a9b31dae94d5a63bb3fcaa82443d69e7af
MD5 af4c6f2598c45087a32c4f410f242553
SHA1 cad2a50e20ee6f699e21e78c58991a6a25a55ec0
SHA512 7d378b90e3cb7feac3580bc7858b6d8a4967c77196be5b7d94ef076a7e1e8166156e62954998fa6931593db5c8a8dcaacdfe3421bd39e6517f6c6094caf4f4a1
TLSH
T17B61DC32C550A9932E5D0C81EDC55E704DD8067ECCA6F4E287B082F8F0AD8977D90BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Staging
Size 1KB
SHA256 f90f4cb0976a046e93978971b58fba24bc93b0129e8612fdd0e5646a1bebed22
MD5 5d7f5a0c242d9d1290c8ad0bd57be3e7
SHA1 d454811443284aeaa0294d30caf65e624182b150
SHA512 5d36ffb2ec4d162c49e5dd1207bee8b51f36d91ab38d23ff85d4467ced3a7e0f4f639b230623804260d8b03e49ef124e6ae9714f63c896c024215bfbd13dbc88
TLSH
T1A621E2194E908CB11E596745D20A535ABDEA617D38E7F4CB8EA8DE7FC2CE85702344A0
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.38\manifest.fingerprint
Size 66B
SHA256 403e6e5965571238c03bb289a9e533261775fe381e5a91300788cd37e465b4a2
MD5 bd493e5a161e6d66c7253da476ecb4b6
SHA1 4ce1686e9532aa7190f90457cc648bd55e1a8bf5
SHA512 ae673a5aaf2d5c73eb3a0331cd9dc6b7d8d481aff6afb3015c745079debe10a73c089026c2c614bd847d3d364bcac6e6910f896e785225d88ef81a98ac24c15b
TLSH
T186A022E2E8F3B8802CA0200C08CB32C0A022B3E300800EF8C0000E8C02A2C2CF020AA2
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\TrustTokenKeyCommitments\2026.8.3.1\keys.json
Size 8KB
SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
MD5 ee666d1b2290efa6cdbc89ea3d317333
SHA1 a8bdd2c1d7e76fef48a735a80524243cd453e0bc
SHA512 7b2b577c9a168f626a687ee158cc20fa0ad0f816fb0583abfe45f89222d1762eb4fc619e029856618479fb6096a02eb2f9934cb46334fa781cea5cbcec992ee9
SSDEEP 192:uNtGbR0m0GflPAyR9Pm4lOvMwkoR9PuGMXcy:O7mZpKjA
TLSH
T17F02B6BF14A41182CE7FC16D9F0774B78FB03C066BCA3A83925BEA49484196D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

autoexec.lnk

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\autoexec.lnk
Size 1KB
SHA256 9df9c1928d35277f8ef26f7aeb9db5dd0da8285a65b93a3eaf35b6817de84b47
MD5 15934b7b28cb3e8e884ee36f5439a354
SHA1 eddf9a865c62c3275d38f87d554742753b9d9629
SHA512 be4d530a3eded324eeb5e259ccc2828154ce445be28d57f8a9f05e0a8620fe83ecb9f92ea0ef45ce4bf976246eae6268a78aec931d0a7e6d38782a94d7814897
TLSH
T1B911D0165EE60FA2C370C0B5D7BF132A8633B951A3621F4C4544C34A29609035D15F2F
MD5 SHA1 SHA512 TLSH

Submit Download

scripts.lnk

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\scripts.lnk
Size 1KB
SHA256 3136d917db46e15f0eb8ffa747f79929b2e439871290be8249ab09382f3ee569
MD5 5054b423f489144832de28556d27b677
SHA1 e25e76dc2b642e5853367f58f727bd0585587865
SHA512 59bec53cb5492f7c16afd6cdd35e84c1100d0337369ea612dc5fa776a14b3800104d623f6bdd3b83f93d3d160404a714a1eec42e2bf393066609a8f1c42182c9
TLSH
T1B4110416AFD60F67C1F0C47696FB13168E347A54AB625F880484C3442D609039E65F2F
MD5 SHA1 SHA512 TLSH

Submit Download

workspace.lnk

Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\workspace.lnk
Size 1KB
SHA256 50deb1f1ce48816a9a706e29abf636e81a60b5dc4f4f1e7fe3bda5951f4223b0
MD5 0c63c5a1e864dec07e7f45536383eff5
SHA1 e2134a98dd6a9d066198471a5b96d5b8a5ac377a
SHA512 7ed8eb75da4ab93e08f7e0dd6399f5dc9e87a80042d09dbd40720d182dc84b2e2b15baf97ca8c9741744648baa053abd0d8b219ff645fc8c0ec34c9b99a1417c
TLSH
T13F1100166AD60F63C2B1D07AE7FB272786353954E7A10F8D4150D3451960E439D21F1F
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2268-3741-0x00000204CCBF0000-0x00000204CCBF1000-memory.dmp

Download

memory/2268-3736-0x00000204CCBF0000-0x00000204CCBF1000-memory.dmp

Download

memory/2268-3732-0x00000204CCBF0000-0x00000204CCBF1000-memory.dmp

Download

memory/2268-3731-0x00000204CCBF0000-0x00000204CCBF1000-memory.dmp

Download

memory/2268-3730-0x00000204CCBF0000-0x00000204CCBF1000-memory.dmp

Download

memory/2268-3738-0x00000204CCBF0000-0x00000204CCBF1000-memory.dmp

Download

memory/2268-3739-0x00000204CCBF0000-0x00000204CCBF1000-memory.dmp

Download

memory/2268-3740-0x00000204CCBF0000-0x00000204CCBF1000-memory.dmp

Download

memory/2268-3742-0x00000204CCBF0000-0x00000204CCBF1000-memory.dmp

Download

memory/2268-3737-0x00000204CCBF0000-0x00000204CCBF1000-memory.dmp

Download

memory/2364-1941-0x00007FF8E26E0000-0x00007FF8E26E1000-memory.dmp

Download

memory/2364-1942-0x00007FF8E2390000-0x00007FF8E2391000-memory.dmp

Download

memory/4408-3207-0x0000020D93C00000-0x0000020D93D15000-memory.dmp

Download

memory/5996-1863-0x00007FF8E2390000-0x00007FF8E2391000-memory.dmp

Download

memory/5996-2646-0x0000018B23860000-0x0000018B23975000-memory.dmp

Download

memory/6752-1975-0x00007FF8E2390000-0x00007FF8E2391000-memory.dmp

Download