Analysis

  • max time kernel
    34s
  • max time network
    67s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-05-2023 11:46

General

  • Target

    krnl_beta.exe

  • Size

    1.8MB

  • MD5

    3701dc535fb395d6a1fb557a3aeec5e9

  • SHA1

    ef517659229ddc6ecfc02481c3953ac9322dae35

  • SHA256

    ec6df713446a8dd5efb376fbb7b444ed7e09f5cdd98c0494999b64af2e2d5537

  • SHA512

    20dc14387138f913034bd2c265156dca1f36c128c040a99d6904fe6f1830d2f98afb3dcf0553817adb66e480be7d0fb0d7df58f0feb9b007a5a6bab648b081a2

  • SSDEEP

    49152:+P1uB0SVp4+KSxyrRUzS65+x+rnxYr9PC:+Pk0ST4+RgRUzS65+x1ZPC

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 13 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of AdjustPrivilegeToken 9 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\krnl_beta.exe
    "C:\Users\Admin\AppData\Local\Temp\krnl_beta.exe"
    1⤵
    • Checks computer location settings
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:384
    • C:\Users\Admin\AppData\Roaming\Krnl\Data\7za.exe
      "C:\Users\Admin\AppData\Roaming\Krnl\Data\7za.exe" x "C:\Users\Admin\AppData\Roaming\Krnl\krnl.7z" -o"C:\Users\Admin\AppData\Roaming\Krnl" -aoa -bsp1
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:3192
    • C:\Users\Admin\AppData\Roaming\Krnl\Data\7za.exe
      "C:\Users\Admin\AppData\Roaming\Krnl\Data\7za.exe" x "C:\Users\Admin\AppData\Roaming\Krnl\Data\Community.7z" -o"C:\Users\Admin\AppData\Roaming\Krnl\Community" -aoa -bsp1
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:3496
    • C:\Users\Admin\AppData\Roaming\Krnl\KrnlUI.exe
      "C:\Users\Admin\AppData\Roaming\Krnl\KrnlUI.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:4516
      • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.exe
        "C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.exe" --type=gpu-process --no-sandbox --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --log-file="C:\Users\Admin\AppData\Roaming\Krnl\debug.log" --mojo-platform-channel-handle=2236 --field-trial-handle=2260,i,11094393367069947993,6593284164668122615,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2 --host-process-id=4516
        3⤵
          PID:1228
        • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.exe
          "C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --log-file="C:\Users\Admin\AppData\Roaming\Krnl\debug.log" --mojo-platform-channel-handle=2264 --field-trial-handle=2260,i,11094393367069947993,6593284164668122615,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 --host-process-id=4516
          3⤵
            PID:368
          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.exe
            "C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --no-sandbox --log-file="C:\Users\Admin\AppData\Roaming\Krnl\debug.log" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=3684 --field-trial-handle=2260,i,11094393367069947993,6593284164668122615,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker --host-process-id=4516 /prefetch:1
            3⤵
              PID:1876
            • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.exe
              "C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --no-sandbox --log-file="C:\Users\Admin\AppData\Roaming\Krnl\debug.log" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3676 --field-trial-handle=2260,i,11094393367069947993,6593284164668122615,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker --host-process-id=4516 /prefetch:1
              3⤵
                PID:3304

          Network

          MITRE ATT&CK Matrix ATT&CK v6

          Discovery

          Query Registry

          1
          T1012

          System Information Discovery

          2
          T1082

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Roaming\Krnl\Community\Cmdx\card.config
            Filesize

            12B

            MD5

            773229091774b2b77583da0f15a718ac

            SHA1

            fcdbebdefc85658d65e23dcc52cd1a3ae9a12ee3

            SHA256

            f70e955a67aad2ee28ac0c8b1c0882c9bd9991da51b87b224a4e22eefb8956f9

            SHA512

            7762bbbc14bdc679c51b5d9b75b1c19b0977d70c98a1edcbceaa950e7ba42c991ae4e81768a9bd80bb1bb2bd1eed4e6a18e98e16a2ec974464850d9c14a9fc2b

          • C:\Users\Admin\AppData\Roaming\Krnl\Community\Cmdx\preview.png
            Filesize

            155KB

            MD5

            971fcb67b3ed9746cfd5c12032c8f54a

            SHA1

            378d56a2909c9b4dacc1a679664de7a3b9b48109

            SHA256

            94d47c3270fd8af9431722aac704778dd0e157fcffe7e24435a25368272e6bfc

            SHA512

            3d5e2f7112462049cd84fabce244cd51cbc341e8adc4fa27e5516855dd6f1d9727d6dde463812f6c552a732ebb2dad87ea6eed38a9bf7a1ea55800068fecfa63

          • C:\Users\Admin\AppData\Roaming\Krnl\Community\Cmdx\profile.png
            Filesize

            7KB

            MD5

            fe0cf96f57839cdd21191af66c241b96

            SHA1

            fba1b795f839c0fbaa4e47dfd9ad79ac6c2a4562

            SHA256

            bafaba91b68e495a6946cfae26a1f194dd8e556c1fb28dcf1e220721eb0ecbfc

            SHA512

            5adf6c8fc4b24f5af253c0f03c5b57ac7243008765b3854ed4b83d758a1901997ff4e6d9e0e1918383bce19832b72fc68cc7005c8a53a329df41b2ad91162ce9

          • C:\Users\Admin\AppData\Roaming\Krnl\Data\7z.NET.dll
            Filesize

            15KB

            MD5

            982475050787051658abd42e890a2469

            SHA1

            d955e35355e33a9837d00e78c824f6e5792b47f3

            SHA256

            4e193ccda4ef7ec7fc1bc12d7abba225a9af5b4612aa0b67a02324b9da8b268c

            SHA512

            c97b40c82499759e8a11b581004252be618f967153b5a9ce425f9a385746f3a1bdc467686023f36ed11212ea23e1c6b03b4df32cc5dd2a8c4b1d4ab23541c1f6

          • C:\Users\Admin\AppData\Roaming\Krnl\Data\7z.NET.dll
            Filesize

            15KB

            MD5

            982475050787051658abd42e890a2469

            SHA1

            d955e35355e33a9837d00e78c824f6e5792b47f3

            SHA256

            4e193ccda4ef7ec7fc1bc12d7abba225a9af5b4612aa0b67a02324b9da8b268c

            SHA512

            c97b40c82499759e8a11b581004252be618f967153b5a9ce425f9a385746f3a1bdc467686023f36ed11212ea23e1c6b03b4df32cc5dd2a8c4b1d4ab23541c1f6

          • C:\Users\Admin\AppData\Roaming\Krnl\Data\7za.exe
            Filesize

            628KB

            MD5

            ec79cabd55a14379e4d676bb17d9e3df

            SHA1

            15626d505da35bfdb33aea5c8f7831f616cabdba

            SHA256

            44a55f5d9c31d0990de47b9893e0c927478930cef06fbe2d1f520a6d6cba587d

            SHA512

            00bbb601a685cbfb3c51c1da9f3b77c2b318c79e87d88a31c0e215288101753679e1586b170ccc9c2cb0b5ce05c2090c0737a1e4a616ad1d9658392066196d47

          • C:\Users\Admin\AppData\Roaming\Krnl\Data\7za.exe
            Filesize

            628KB

            MD5

            ec79cabd55a14379e4d676bb17d9e3df

            SHA1

            15626d505da35bfdb33aea5c8f7831f616cabdba

            SHA256

            44a55f5d9c31d0990de47b9893e0c927478930cef06fbe2d1f520a6d6cba587d

            SHA512

            00bbb601a685cbfb3c51c1da9f3b77c2b318c79e87d88a31c0e215288101753679e1586b170ccc9c2cb0b5ce05c2090c0737a1e4a616ad1d9658392066196d47

          • C:\Users\Admin\AppData\Roaming\Krnl\Data\7za.exe
            Filesize

            628KB

            MD5

            ec79cabd55a14379e4d676bb17d9e3df

            SHA1

            15626d505da35bfdb33aea5c8f7831f616cabdba

            SHA256

            44a55f5d9c31d0990de47b9893e0c927478930cef06fbe2d1f520a6d6cba587d

            SHA512

            00bbb601a685cbfb3c51c1da9f3b77c2b318c79e87d88a31c0e215288101753679e1586b170ccc9c2cb0b5ce05c2090c0737a1e4a616ad1d9658392066196d47

          • C:\Users\Admin\AppData\Roaming\Krnl\Data\Community.7z
            Filesize

            2.2MB

            MD5

            e7e69e3bb82e50d10e17fceb8851f1e3

            SHA1

            ac38d2c834b5ef30feb0b23272ee289779caf14c

            SHA256

            1f70e675fd69fa7d0efe44a2a6cbade8350ebb1cb3a9a18ff824cfd680b35ddd

            SHA512

            ba44f453d75ac413f404b89c5dfd1acbdf95aae10beb65599e7e52ecec7eb3ea82b95a6947fcda38e2cb878eb197714be3f3e3d93d5fc09e83ebb952117ded44

          • C:\Users\Admin\AppData\Roaming\Krnl\Data\krnl.config
            Filesize

            56B

            MD5

            176325ad48a278b0d65251950bca1155

            SHA1

            ce999c4afef01e548d2e7128d6423f93c8268f12

            SHA256

            fbe762e1fefeb1b6ef095e383add7fc70a40977167ba3f70cf692885b06bacb7

            SHA512

            3e9479d127447f69b831ad0ddea56b376e4e9de21758a2d94fc6ea7bdfdb8c9599bc5dc529b20dc397ea52377469fd12a8e0ec2c60e913c506d8a37140dc273a

          • C:\Users\Admin\AppData\Roaming\Krnl\KrnlUI.exe
            Filesize

            1.1MB

            MD5

            39ed86952a1e7926924a18802c0b75e4

            SHA1

            e7ad2a51e62fe68b1a82b17bcde347ab38c09ca3

            SHA256

            b84ceb86e9a8eba4d168f2cc6c9010c93779641e595f900aafe8cfef6165c126

            SHA512

            fe7b93af9bb2621148154389e6c7e1dca54c426df88fd09eab9b33763584a4eee837995d29f7dc1550acc4643c05f03a28b5a25e7019d7a4ceb70c238ae33bad

          • C:\Users\Admin\AppData\Roaming\Krnl\KrnlUI.exe
            Filesize

            1.1MB

            MD5

            39ed86952a1e7926924a18802c0b75e4

            SHA1

            e7ad2a51e62fe68b1a82b17bcde347ab38c09ca3

            SHA256

            b84ceb86e9a8eba4d168f2cc6c9010c93779641e595f900aafe8cfef6165c126

            SHA512

            fe7b93af9bb2621148154389e6c7e1dca54c426df88fd09eab9b33763584a4eee837995d29f7dc1550acc4643c05f03a28b5a25e7019d7a4ceb70c238ae33bad

          • C:\Users\Admin\AppData\Roaming\Krnl\KrnlUI.exe.config
            Filesize

            438B

            MD5

            909df77c711b4133a8f8560483ec2bb3

            SHA1

            8df8505ec0a0dd670b4044c641e772f6ded485a1

            SHA256

            c49ed8da5765f33cc854cf13ee0c33ed65d4eba6843c24d05e321e3b40f4a68c

            SHA512

            0547bae72cd75ad753ddd95c12b7a42b8b3285a3384925cf738c4cc6835c6dd21d16a6206662c4a723fcf348da7e62db3585564782c7daad49b765b43accb28d

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.Core.dll
            Filesize

            908KB

            MD5

            9aa41e58b0ceded6442c54e93cc279dc

            SHA1

            76b3622d8bd5c0ab88d2a6422866e8b572afb318

            SHA256

            a3ec829be118703645ebadde46a13d8aecc08291567314652e81ebc163ea8f0d

            SHA512

            ba24aac25bf61898e924cbf049a44e45dd996308b2caedce91978b67f4bb1accfc98860610ff0a5469fe5dd5e34c2a87bee1e8930d4019d3139bcab89552b3bf

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.Core.dll
            Filesize

            908KB

            MD5

            9aa41e58b0ceded6442c54e93cc279dc

            SHA1

            76b3622d8bd5c0ab88d2a6422866e8b572afb318

            SHA256

            a3ec829be118703645ebadde46a13d8aecc08291567314652e81ebc163ea8f0d

            SHA512

            ba24aac25bf61898e924cbf049a44e45dd996308b2caedce91978b67f4bb1accfc98860610ff0a5469fe5dd5e34c2a87bee1e8930d4019d3139bcab89552b3bf

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.Core.dll
            Filesize

            908KB

            MD5

            9aa41e58b0ceded6442c54e93cc279dc

            SHA1

            76b3622d8bd5c0ab88d2a6422866e8b572afb318

            SHA256

            a3ec829be118703645ebadde46a13d8aecc08291567314652e81ebc163ea8f0d

            SHA512

            ba24aac25bf61898e924cbf049a44e45dd996308b2caedce91978b67f4bb1accfc98860610ff0a5469fe5dd5e34c2a87bee1e8930d4019d3139bcab89552b3bf

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.Core.dll
            Filesize

            908KB

            MD5

            9aa41e58b0ceded6442c54e93cc279dc

            SHA1

            76b3622d8bd5c0ab88d2a6422866e8b572afb318

            SHA256

            a3ec829be118703645ebadde46a13d8aecc08291567314652e81ebc163ea8f0d

            SHA512

            ba24aac25bf61898e924cbf049a44e45dd996308b2caedce91978b67f4bb1accfc98860610ff0a5469fe5dd5e34c2a87bee1e8930d4019d3139bcab89552b3bf

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.Core.dll
            Filesize

            908KB

            MD5

            9aa41e58b0ceded6442c54e93cc279dc

            SHA1

            76b3622d8bd5c0ab88d2a6422866e8b572afb318

            SHA256

            a3ec829be118703645ebadde46a13d8aecc08291567314652e81ebc163ea8f0d

            SHA512

            ba24aac25bf61898e924cbf049a44e45dd996308b2caedce91978b67f4bb1accfc98860610ff0a5469fe5dd5e34c2a87bee1e8930d4019d3139bcab89552b3bf

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.Core.dll
            Filesize

            908KB

            MD5

            9aa41e58b0ceded6442c54e93cc279dc

            SHA1

            76b3622d8bd5c0ab88d2a6422866e8b572afb318

            SHA256

            a3ec829be118703645ebadde46a13d8aecc08291567314652e81ebc163ea8f0d

            SHA512

            ba24aac25bf61898e924cbf049a44e45dd996308b2caedce91978b67f4bb1accfc98860610ff0a5469fe5dd5e34c2a87bee1e8930d4019d3139bcab89552b3bf

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.Core.dll
            Filesize

            908KB

            MD5

            9aa41e58b0ceded6442c54e93cc279dc

            SHA1

            76b3622d8bd5c0ab88d2a6422866e8b572afb318

            SHA256

            a3ec829be118703645ebadde46a13d8aecc08291567314652e81ebc163ea8f0d

            SHA512

            ba24aac25bf61898e924cbf049a44e45dd996308b2caedce91978b67f4bb1accfc98860610ff0a5469fe5dd5e34c2a87bee1e8930d4019d3139bcab89552b3bf

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.exe
            Filesize

            7KB

            MD5

            5f7e54710987e30dfca1e90c2063402d

            SHA1

            3917a469d1516efe34f275b5f31a83227cd14694

            SHA256

            2b44d738767dc991b0f8cbf3832190de9c1670da929e28e8073a88033f9548af

            SHA512

            b9ae359ae2a2f833aab10d3399b3620b0ef24482fdb398c8a3794f2fbba3329ef94227a200cf63c064bab18779ea56cd940159279a5ba2ae7f65bec5403fef4e

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.exe
            Filesize

            7KB

            MD5

            5f7e54710987e30dfca1e90c2063402d

            SHA1

            3917a469d1516efe34f275b5f31a83227cd14694

            SHA256

            2b44d738767dc991b0f8cbf3832190de9c1670da929e28e8073a88033f9548af

            SHA512

            b9ae359ae2a2f833aab10d3399b3620b0ef24482fdb398c8a3794f2fbba3329ef94227a200cf63c064bab18779ea56cd940159279a5ba2ae7f65bec5403fef4e

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.BrowserSubprocess.exe
            Filesize

            7KB

            MD5

            5f7e54710987e30dfca1e90c2063402d

            SHA1

            3917a469d1516efe34f275b5f31a83227cd14694

            SHA256

            2b44d738767dc991b0f8cbf3832190de9c1670da929e28e8073a88033f9548af

            SHA512

            b9ae359ae2a2f833aab10d3399b3620b0ef24482fdb398c8a3794f2fbba3329ef94227a200cf63c064bab18779ea56cd940159279a5ba2ae7f65bec5403fef4e

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.Core.Runtime.dll
            Filesize

            1.3MB

            MD5

            a7fd4a62e39e518d26c93c72a2574123

            SHA1

            d466eb6792cc8a22237d34e49b29b1fef88a9256

            SHA256

            8145075e6bee962eb6b160cf13fa16d907be16a1155291e7016b69a5ccaeef85

            SHA512

            96b8e9f1f40111009b4dd2c404545f1272f2ff04e888839ae9e8cda9f88ebfa47862e64d88f772616f9687aac8888bc805f79f17c205d168a9a306e3f70d5576

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.Core.Runtime.dll
            Filesize

            1.3MB

            MD5

            a7fd4a62e39e518d26c93c72a2574123

            SHA1

            d466eb6792cc8a22237d34e49b29b1fef88a9256

            SHA256

            8145075e6bee962eb6b160cf13fa16d907be16a1155291e7016b69a5ccaeef85

            SHA512

            96b8e9f1f40111009b4dd2c404545f1272f2ff04e888839ae9e8cda9f88ebfa47862e64d88f772616f9687aac8888bc805f79f17c205d168a9a306e3f70d5576

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.Core.Runtime.dll
            Filesize

            1.3MB

            MD5

            a7fd4a62e39e518d26c93c72a2574123

            SHA1

            d466eb6792cc8a22237d34e49b29b1fef88a9256

            SHA256

            8145075e6bee962eb6b160cf13fa16d907be16a1155291e7016b69a5ccaeef85

            SHA512

            96b8e9f1f40111009b4dd2c404545f1272f2ff04e888839ae9e8cda9f88ebfa47862e64d88f772616f9687aac8888bc805f79f17c205d168a9a306e3f70d5576

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.Core.Runtime.dll
            Filesize

            1.3MB

            MD5

            a7fd4a62e39e518d26c93c72a2574123

            SHA1

            d466eb6792cc8a22237d34e49b29b1fef88a9256

            SHA256

            8145075e6bee962eb6b160cf13fa16d907be16a1155291e7016b69a5ccaeef85

            SHA512

            96b8e9f1f40111009b4dd2c404545f1272f2ff04e888839ae9e8cda9f88ebfa47862e64d88f772616f9687aac8888bc805f79f17c205d168a9a306e3f70d5576

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.Core.dll
            Filesize

            36KB

            MD5

            100f91507881f85a3b482d3e1644d037

            SHA1

            4319e1f626318997693e06c6a217fbf2acdf77b2

            SHA256

            7f9338f537a469e71dd3c269137bc0e5a11f769edfda8a1891319c0139a1b550

            SHA512

            993b92a1f28b1cbd37b2d7fb646ee04473eb81de02017b66e7ec2efa2a83b4ff35bee44aaa643c0ed531d42fc4638081a73b50caa530f29eff6bbeb252ea46e1

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.Core.dll
            Filesize

            36KB

            MD5

            100f91507881f85a3b482d3e1644d037

            SHA1

            4319e1f626318997693e06c6a217fbf2acdf77b2

            SHA256

            7f9338f537a469e71dd3c269137bc0e5a11f769edfda8a1891319c0139a1b550

            SHA512

            993b92a1f28b1cbd37b2d7fb646ee04473eb81de02017b66e7ec2efa2a83b4ff35bee44aaa643c0ed531d42fc4638081a73b50caa530f29eff6bbeb252ea46e1

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.Core.dll
            Filesize

            36KB

            MD5

            100f91507881f85a3b482d3e1644d037

            SHA1

            4319e1f626318997693e06c6a217fbf2acdf77b2

            SHA256

            7f9338f537a469e71dd3c269137bc0e5a11f769edfda8a1891319c0139a1b550

            SHA512

            993b92a1f28b1cbd37b2d7fb646ee04473eb81de02017b66e7ec2efa2a83b4ff35bee44aaa643c0ed531d42fc4638081a73b50caa530f29eff6bbeb252ea46e1

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.Wpf.dll
            Filesize

            100KB

            MD5

            6a9e3555a11850420e0e1d7cbaa0ada4

            SHA1

            17597a85caf29df6556fef012dd1fe5205ef2cb2

            SHA256

            a39b72613843a4e1b40761fa83c2b7c87941e461c32d091655c42d9cbfa59fac

            SHA512

            41d1f5c6e38a02a232f8cf3afcf44e7bc8c83ac5616849a78560a3e064e7b220d272f37507c2d5d939b1a0aff5884f3f930759d1b39d11c3cedcc0f2d962ae6d

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.Wpf.dll
            Filesize

            100KB

            MD5

            6a9e3555a11850420e0e1d7cbaa0ada4

            SHA1

            17597a85caf29df6556fef012dd1fe5205ef2cb2

            SHA256

            a39b72613843a4e1b40761fa83c2b7c87941e461c32d091655c42d9cbfa59fac

            SHA512

            41d1f5c6e38a02a232f8cf3afcf44e7bc8c83ac5616849a78560a3e064e7b220d272f37507c2d5d939b1a0aff5884f3f930759d1b39d11c3cedcc0f2d962ae6d

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.Wpf.dll
            Filesize

            100KB

            MD5

            6a9e3555a11850420e0e1d7cbaa0ada4

            SHA1

            17597a85caf29df6556fef012dd1fe5205ef2cb2

            SHA256

            a39b72613843a4e1b40761fa83c2b7c87941e461c32d091655c42d9cbfa59fac

            SHA512

            41d1f5c6e38a02a232f8cf3afcf44e7bc8c83ac5616849a78560a3e064e7b220d272f37507c2d5d939b1a0aff5884f3f930759d1b39d11c3cedcc0f2d962ae6d

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.dll
            Filesize

            1017KB

            MD5

            f371f39e9346dca0bfdb7d638b44895d

            SHA1

            742f950afc94fd6e0501f9678ba210883fd5b25c

            SHA256

            3a7bf88d5376a46cab4d6be0169a6dc98361f9485d178c20faa162380d165327

            SHA512

            753b400c80be841910227c5eff53dbf607b5c6fcdd05e53cfaf487529c54955bf32ea4d939927a7be1a602fc6e306c20e25850d36690b36d22948c0a7bf2d4a7

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.dll
            Filesize

            1017KB

            MD5

            f371f39e9346dca0bfdb7d638b44895d

            SHA1

            742f950afc94fd6e0501f9678ba210883fd5b25c

            SHA256

            3a7bf88d5376a46cab4d6be0169a6dc98361f9485d178c20faa162380d165327

            SHA512

            753b400c80be841910227c5eff53dbf607b5c6fcdd05e53cfaf487529c54955bf32ea4d939927a7be1a602fc6e306c20e25850d36690b36d22948c0a7bf2d4a7

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.dll
            Filesize

            1017KB

            MD5

            f371f39e9346dca0bfdb7d638b44895d

            SHA1

            742f950afc94fd6e0501f9678ba210883fd5b25c

            SHA256

            3a7bf88d5376a46cab4d6be0169a6dc98361f9485d178c20faa162380d165327

            SHA512

            753b400c80be841910227c5eff53dbf607b5c6fcdd05e53cfaf487529c54955bf32ea4d939927a7be1a602fc6e306c20e25850d36690b36d22948c0a7bf2d4a7

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.dll
            Filesize

            1017KB

            MD5

            f371f39e9346dca0bfdb7d638b44895d

            SHA1

            742f950afc94fd6e0501f9678ba210883fd5b25c

            SHA256

            3a7bf88d5376a46cab4d6be0169a6dc98361f9485d178c20faa162380d165327

            SHA512

            753b400c80be841910227c5eff53dbf607b5c6fcdd05e53cfaf487529c54955bf32ea4d939927a7be1a602fc6e306c20e25850d36690b36d22948c0a7bf2d4a7

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.dll
            Filesize

            1017KB

            MD5

            f371f39e9346dca0bfdb7d638b44895d

            SHA1

            742f950afc94fd6e0501f9678ba210883fd5b25c

            SHA256

            3a7bf88d5376a46cab4d6be0169a6dc98361f9485d178c20faa162380d165327

            SHA512

            753b400c80be841910227c5eff53dbf607b5c6fcdd05e53cfaf487529c54955bf32ea4d939927a7be1a602fc6e306c20e25850d36690b36d22948c0a7bf2d4a7

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.dll
            Filesize

            1017KB

            MD5

            f371f39e9346dca0bfdb7d638b44895d

            SHA1

            742f950afc94fd6e0501f9678ba210883fd5b25c

            SHA256

            3a7bf88d5376a46cab4d6be0169a6dc98361f9485d178c20faa162380d165327

            SHA512

            753b400c80be841910227c5eff53dbf607b5c6fcdd05e53cfaf487529c54955bf32ea4d939927a7be1a602fc6e306c20e25850d36690b36d22948c0a7bf2d4a7

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\CefSharp.dll
            Filesize

            1017KB

            MD5

            f371f39e9346dca0bfdb7d638b44895d

            SHA1

            742f950afc94fd6e0501f9678ba210883fd5b25c

            SHA256

            3a7bf88d5376a46cab4d6be0169a6dc98361f9485d178c20faa162380d165327

            SHA512

            753b400c80be841910227c5eff53dbf607b5c6fcdd05e53cfaf487529c54955bf32ea4d939927a7be1a602fc6e306c20e25850d36690b36d22948c0a7bf2d4a7

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\D3DCompiler_47.dll
            Filesize

            3.9MB

            MD5

            e1677ec0e21e27405e65e31419980348

            SHA1

            666de481c46e2c21b8f0decc7e9115fc61d28acd

            SHA256

            c2c7ca6505ad10826e6b92319ce7aa355392b0cbd092a0fb8d4381c2d31268bf

            SHA512

            31ea9e22a2de873ad71c56386b45f510cc89b63eff5526f75a9de7987c65e91bff9ae141cb47b49b986992a53d9a6e73fa3199a04f0bde665d4928112fd13070

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\chrome_100_percent.pak
            Filesize

            620KB

            MD5

            e05272140da2c52a9ebef1700e7c565f

            SHA1

            e1dc01309fca499af605f83136d35e6d51fcd300

            SHA256

            123092a649b8def6efca634509fb20ba4fbf9096d6819209510b43b5f899c0a3

            SHA512

            476907363a0d1e1bf81d086aff011b826fd28a885e2eabd2e07e48494eafbd48d508b1a9050efe865585f7c4d92a277886440876846cba8a2226033ff35a7a81

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\chrome_200_percent.pak
            Filesize

            933KB

            MD5

            0d362e859bc788a9f0918d9e79aea521

            SHA1

            33abea51f76bde3e37f71b7e94f01647bb4dcbd5

            SHA256

            782f475d56e62c76688747a22ba4ae115628c5c3519c3c1e3d1a51a4367bfc28

            SHA512

            37ca08bbe5525d0f2d45a9fe65a45f6c5d8366330fc60304822d4c7470dd66b8733d92803ce6aabdf4175ad0cf43d6e4a9ff9d4e49ff89d8eddc5f7083e7f067

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\chrome_elf.dll
            Filesize

            965KB

            MD5

            1b2a029f73fe1554d9801ec7b7e1ecfe

            SHA1

            01f487f96a5528e28ca8ca75da60a58072025358

            SHA256

            d4800601b82371914f0efc45f1200ce8bb9d57c15c52b852f9f452751af61912

            SHA512

            a32e991cbe0681aa66535a454dbc961df4be142f9983dcc48d1bafb9be938c5abbd8cc6219b0614074ab2c51e4ce410d056fced6d6ed4cfc0048bbee9cba29b1

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\chrome_elf.dll
            Filesize

            965KB

            MD5

            1b2a029f73fe1554d9801ec7b7e1ecfe

            SHA1

            01f487f96a5528e28ca8ca75da60a58072025358

            SHA256

            d4800601b82371914f0efc45f1200ce8bb9d57c15c52b852f9f452751af61912

            SHA512

            a32e991cbe0681aa66535a454dbc961df4be142f9983dcc48d1bafb9be938c5abbd8cc6219b0614074ab2c51e4ce410d056fced6d6ed4cfc0048bbee9cba29b1

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\chrome_elf.dll
            Filesize

            965KB

            MD5

            1b2a029f73fe1554d9801ec7b7e1ecfe

            SHA1

            01f487f96a5528e28ca8ca75da60a58072025358

            SHA256

            d4800601b82371914f0efc45f1200ce8bb9d57c15c52b852f9f452751af61912

            SHA512

            a32e991cbe0681aa66535a454dbc961df4be142f9983dcc48d1bafb9be938c5abbd8cc6219b0614074ab2c51e4ce410d056fced6d6ed4cfc0048bbee9cba29b1

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\chrome_elf.dll
            Filesize

            965KB

            MD5

            1b2a029f73fe1554d9801ec7b7e1ecfe

            SHA1

            01f487f96a5528e28ca8ca75da60a58072025358

            SHA256

            d4800601b82371914f0efc45f1200ce8bb9d57c15c52b852f9f452751af61912

            SHA512

            a32e991cbe0681aa66535a454dbc961df4be142f9983dcc48d1bafb9be938c5abbd8cc6219b0614074ab2c51e4ce410d056fced6d6ed4cfc0048bbee9cba29b1

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\d3dcompiler_47.dll
            Filesize

            3.9MB

            MD5

            e1677ec0e21e27405e65e31419980348

            SHA1

            666de481c46e2c21b8f0decc7e9115fc61d28acd

            SHA256

            c2c7ca6505ad10826e6b92319ce7aa355392b0cbd092a0fb8d4381c2d31268bf

            SHA512

            31ea9e22a2de873ad71c56386b45f510cc89b63eff5526f75a9de7987c65e91bff9ae141cb47b49b986992a53d9a6e73fa3199a04f0bde665d4928112fd13070

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\icudtl.dat
            Filesize

            9.8MB

            MD5

            d866d68e4a3eae8cdbfd5fc7a9967d20

            SHA1

            42a5033597e4be36ccfa16d19890049ba0e25a56

            SHA256

            c61704cc9cf5797bf32301a2b3312158af3fe86eadc913d937031cf594760c2d

            SHA512

            4cc04e708b9c3d854147b097e44ff795f956b8a714ab61ddd5434119ade768eb4da4b28938a9477e4cb0d63106cce09fd1ec86f33af1c864f4ea599f8d999b97

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\libEGL.dll
            Filesize

            340KB

            MD5

            c97801cbabaead0a2b9552e869209e44

            SHA1

            cb1339eeabe927adb707e35b7f5ffffd9ed6cc96

            SHA256

            c8487499a93479edcfb8ed00192886b224548c487765979ce709ea8b732796b6

            SHA512

            9ab5f330494026a9a716ebbe6b1e821c0ef4db2fb2f6b8522ba35a2ee3f305ad174a1bd82d2025f895a8bc5a4aff845c98cb7c3dd04d75bf1e36f8de985d5d6c

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\libGLESv2.dll
            Filesize

            5.2MB

            MD5

            23d4a60fdc05b544b794ec3b847712a7

            SHA1

            5a88b20d1269a85274726bfd3444d570736c425a

            SHA256

            06bad73719efe0c26cb3926d6b5e5c832141c0bef672a4efa27d4ec46cbcd36c

            SHA512

            d4633500ea697825e5ff4781c5f3a4e3747714d62c3c3c22ce96e34b25deba2e3c98e6e6829b53d6cfeb0cfa5ecca6429fc2726aaebb35f6e4ecbd23c491b660

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\libcef.dll
            Filesize

            134.3MB

            MD5

            532e0f7437d6ea570e3f43350b9a1a41

            SHA1

            cbd7682a8677306715cb0fd49f729f631219e64a

            SHA256

            9d43081f7de898927f8613f2f7337df578e3d7fa35151ce5704c8abbac54062b

            SHA512

            e8b876c58bce808e1e5304b7618f0344474e74e3aa702f0147411eded6c79cbc1eab7cb4ef2fa87f85bae3cbe551c830e420922c7aca9d38383ac5ecf8e754e0

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\libcef.dll
            Filesize

            130.1MB

            MD5

            c685bb8c017fc78a7af26e71b6075776

            SHA1

            955e88f973ef77189b7d23e5ecc722f1ce95215e

            SHA256

            1b39e339f61a0201402b478bab21c09a7f0458340248e59514a15384632cbe76

            SHA512

            29d8c7c72c30b5c0d452189e03ce0a75c808498d61b969fa87c0d0f61179fc5863d50c0a7ee719e373df7068e19cb05810de3c239b459dccb118a524a4a6e975

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\libcef.dll
            Filesize

            56.8MB

            MD5

            aa27716df62ec418387972fe894b2cc7

            SHA1

            22036b297ec1755bff61ff25330f513263cdd0d2

            SHA256

            9df94f967a6e63d8ad57fddd3bea2828b381844f4326a2e344c7a98562629866

            SHA512

            965723de3e10ac734d49b8c2327fd0e7e8d6463e302211ec3cbb4546c732f2f0058333acf612630555463cd70e553532d18c432b5e3ac780ef723c640491a9e2

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\libcef.dll
            Filesize

            101.2MB

            MD5

            f063048f699daf61408f783faf8686ea

            SHA1

            65207ed5137e2a282f7e594825d701aeb3e13c58

            SHA256

            6df994ad68edc0212132ef2118f98a836d0e968d8e00a61a1a63c5b2b79c3395

            SHA512

            973a8a4ad3f7dfcbd766024eb3a0efb073121d6b9120403a01636c55c17d878df2e88c84fd8476300601375e4e697ecbc783fd8b54697aafa955b00b992eeee3

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\libegl.dll
            Filesize

            340KB

            MD5

            c97801cbabaead0a2b9552e869209e44

            SHA1

            cb1339eeabe927adb707e35b7f5ffffd9ed6cc96

            SHA256

            c8487499a93479edcfb8ed00192886b224548c487765979ce709ea8b732796b6

            SHA512

            9ab5f330494026a9a716ebbe6b1e821c0ef4db2fb2f6b8522ba35a2ee3f305ad174a1bd82d2025f895a8bc5a4aff845c98cb7c3dd04d75bf1e36f8de985d5d6c

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\libglesv2.dll
            Filesize

            5.2MB

            MD5

            23d4a60fdc05b544b794ec3b847712a7

            SHA1

            5a88b20d1269a85274726bfd3444d570736c425a

            SHA256

            06bad73719efe0c26cb3926d6b5e5c832141c0bef672a4efa27d4ec46cbcd36c

            SHA512

            d4633500ea697825e5ff4781c5f3a4e3747714d62c3c3c22ce96e34b25deba2e3c98e6e6829b53d6cfeb0cfa5ecca6429fc2726aaebb35f6e4ecbd23c491b660

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\locales\en-US.pak
            Filesize

            296KB

            MD5

            99b4fdf70abc76d31e44186e09a053a6

            SHA1

            fb4192460341de2a04127f1e7fdf5c41b12ca392

            SHA256

            87dc8b512fdb79d381db0577961967ac2968a902f4914b6fd3bb59ef84a149fa

            SHA512

            d84b2c0a1fb32515e45bfb922f14a7134ddf01c62ec1405f2d5c7e54a8b4993e943333e3a69905856215a51b3df64f2547128bd0094b70280bb105b4444f32da

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\resources.pak
            Filesize

            6.8MB

            MD5

            34516ad6ff9278dea1fa89839156cbe5

            SHA1

            c61792315d0cb0d0f1e55fb985e3f6bb471fb2c5

            SHA256

            91d3ab4e61bc261d9cc78b750dfc26561fee06fe1431136652f9f50371be2426

            SHA512

            6e4046a2eb72b17451528d1995e2359cb058a9dd41af586f3e88693c621ffd97213031462fc1fd8a23c7e91217066c2f0b56522fcdafe862bc24eec30b059d29

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\vk_swiftshader.dll
            Filesize

            3.3MB

            MD5

            3f9480d05c68ed49c72d440394901742

            SHA1

            0fe824855e1796e3137fb8e137ee1de9c92e4121

            SHA256

            0b5b367d8d7f7b785f5a0368e2391b7c58c065d65793d0ab06415ad4972b042b

            SHA512

            abc95e6deddd9533a997dd9dbacc0db6a91ffdd3fe25d6a875f7630300693a40cde5f333aed0b5adadf34d9f18383fad2cb66d7d3e31353d0beedb7c62b916c7

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\vk_swiftshader.dll
            Filesize

            3.3MB

            MD5

            3f9480d05c68ed49c72d440394901742

            SHA1

            0fe824855e1796e3137fb8e137ee1de9c92e4121

            SHA256

            0b5b367d8d7f7b785f5a0368e2391b7c58c065d65793d0ab06415ad4972b042b

            SHA512

            abc95e6deddd9533a997dd9dbacc0db6a91ffdd3fe25d6a875f7630300693a40cde5f333aed0b5adadf34d9f18383fad2cb66d7d3e31353d0beedb7c62b916c7

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\vk_swiftshader_icd.json
            Filesize

            106B

            MD5

            8642dd3a87e2de6e991fae08458e302b

            SHA1

            9c06735c31cec00600fd763a92f8112d085bd12a

            SHA256

            32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

            SHA512

            f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\vulkan-1.dll
            Filesize

            689KB

            MD5

            12e63a688cd5863050ae3af9126cb7c0

            SHA1

            2ce0b06009fce050f3f4605d47946932397827ab

            SHA256

            72bd2520405a41f8238a8f508194f58a2854943dd1302898e79d19b7cfe69d3d

            SHA512

            5d84a983c032b2aa0f34bdd107e085506e88332c0b419265d2a8089d60435b8367e13c1b692eaf09d73a4819fb20d694cfddd7c2b7a2cbdda2d3eeafa6ac0b9a

          • C:\Users\Admin\AppData\Roaming\Krnl\bin\vulkan-1.dll
            Filesize

            689KB

            MD5

            12e63a688cd5863050ae3af9126cb7c0

            SHA1

            2ce0b06009fce050f3f4605d47946932397827ab

            SHA256

            72bd2520405a41f8238a8f508194f58a2854943dd1302898e79d19b7cfe69d3d

            SHA512

            5d84a983c032b2aa0f34bdd107e085506e88332c0b419265d2a8089d60435b8367e13c1b692eaf09d73a4819fb20d694cfddd7c2b7a2cbdda2d3eeafa6ac0b9a

          • C:\Users\Admin\AppData\Roaming\Krnl\krnl.7z
            Filesize

            71.1MB

            MD5

            cb244bb2cbed782853d39042fd705b4b

            SHA1

            f9a69f8f2b87134579ca8c50b91a67bd596553fe

            SHA256

            d45f3cc6274717014136b6515c250a966f86cd3ecd3dc2c66b3c4c234831e015

            SHA512

            3d189aba28e8dd59e1e293ad8e962f38518ca11b8aa88b364e06f5ebcbc2626e9963594aa76a59971efbb5a34f6a99e23a1f090def1661abae95ebdd758bf73d

          • memory/368-609-0x0000000005450000-0x0000000005460000-memory.dmp
            Filesize

            64KB

          • memory/384-134-0x0000000005130000-0x0000000005140000-memory.dmp
            Filesize

            64KB

          • memory/384-135-0x0000000007D90000-0x0000000007D98000-memory.dmp
            Filesize

            32KB

          • memory/384-136-0x0000000008F00000-0x0000000008F38000-memory.dmp
            Filesize

            224KB

          • memory/384-139-0x0000000005130000-0x0000000005140000-memory.dmp
            Filesize

            64KB

          • memory/384-138-0x0000000005130000-0x0000000005140000-memory.dmp
            Filesize

            64KB

          • memory/384-190-0x0000000005130000-0x0000000005140000-memory.dmp
            Filesize

            64KB

          • memory/384-289-0x0000000005130000-0x0000000005140000-memory.dmp
            Filesize

            64KB

          • memory/384-294-0x0000000005130000-0x0000000005140000-memory.dmp
            Filesize

            64KB

          • memory/384-137-0x0000000008EE0000-0x0000000008EEE000-memory.dmp
            Filesize

            56KB

          • memory/384-133-0x0000000000420000-0x00000000005FA000-memory.dmp
            Filesize

            1.9MB

          • memory/384-159-0x00000000090B0000-0x00000000090BA000-memory.dmp
            Filesize

            40KB

          • memory/1228-576-0x0000000000030000-0x0000000000038000-memory.dmp
            Filesize

            32KB

          • memory/1228-607-0x0000000004D40000-0x0000000004D50000-memory.dmp
            Filesize

            64KB

          • memory/1876-617-0x00000000050D0000-0x00000000050E0000-memory.dmp
            Filesize

            64KB

          • memory/3304-616-0x00000000053A0000-0x00000000053B0000-memory.dmp
            Filesize

            64KB

          • memory/4516-548-0x00000000051B0000-0x00000000051D0000-memory.dmp
            Filesize

            128KB

          • memory/4516-558-0x0000000005690000-0x00000000056A0000-memory.dmp
            Filesize

            64KB

          • memory/4516-554-0x0000000004DE0000-0x0000000004DF0000-memory.dmp
            Filesize

            64KB

          • memory/4516-552-0x00000000056A0000-0x00000000057A4000-memory.dmp
            Filesize

            1.0MB

          • memory/4516-608-0x0000000004DE0000-0x0000000004DF0000-memory.dmp
            Filesize

            64KB

          • memory/4516-553-0x0000000004DE0000-0x0000000004DF0000-memory.dmp
            Filesize

            64KB

          • memory/4516-610-0x000000000D970000-0x000000000DA70000-memory.dmp
            Filesize

            1024KB

          • memory/4516-544-0x00000000004D0000-0x00000000005EE000-memory.dmp
            Filesize

            1.1MB