7e56d14a6868b1b58544b94f4f991fbaef16cfe43ad2023b617a5cb7bef4de1e

Analysis

max time kernel
38s
max time network
116s
platform
windows10-1703_x64
resource
win10-20230915-en
resource tags

arch:x64arch:x86image:win10-20230915-enlocale:en-usos:windows10-1703-x64system
submitted
09/10/2023, 22:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

mongodb-compass-1.40.2-win32-x64.exe
Size

124.7MB
MD5

50c27a452cbc945ee3a9746d0ee76de8
SHA1

d53332325a924a8ece8472b4e56556e67ef52662
SHA256

7e56d14a6868b1b58544b94f4f991fbaef16cfe43ad2023b617a5cb7bef4de1e
SHA512

a24cf6d19f6101753067797b4cd00c248453fa21934f1c367aff00924dbf7f7b6b9ef0afce505b5d74f1520bc1ef6f48bf45b792b5fb8d56cc1e7352afce74f2
SSDEEP

1572864:6zORlZ6UIRCyaNzdhh9WrzMC0TaORN2pqrYMXiYV/8B+7yDQKjrOqpxqxTUxPbig:6zGDHW8CGaTWnSYasSQKjrVxqxI5ZcTg

Score

5^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000\Control Panel\International\Geo\Nation	MongoDBCompass.exe

Executes dropped EXE 6 IoCs

pid	Process
1668	Update.exe
4412	Squirrel.exe
992	MongoDBCompass.exe
1220	MongoDBCompass.exe
1996	MongoDBCompass.exe
3832	Update.exe

Loads dropped DLL 8 IoCs

pid	Process
992	MongoDBCompass.exe
992	MongoDBCompass.exe
1220	MongoDBCompass.exe
1220	MongoDBCompass.exe
1220	MongoDBCompass.exe
1220	MongoDBCompass.exe
1220	MongoDBCompass.exe
1996	MongoDBCompass.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 32 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv\shell\open	reg.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv	MongoDBCompass.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb\ = "URL:mongodb"	MongoDBCompass.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv\URL Protocol	MongoDBCompass.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv\shell\open\command	MongoDBCompass.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb\ = "URL:MongoDB Protocol"	Conhost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\MongoDBCompass\\app-1.40.2\\MongoDBCompass.exe"	reg.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb\shell	reg.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv\shell\open\command	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\MongoDBCompass\\app-1.40.2\\MongoDBCompass.exe\" \"--\" \"%1\""	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\MongoDBCompass\\app-1.40.2\\MongoDBCompass.exe\" \"--\" \"%1\""	MongoDBCompass.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb	Conhost.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\MongoDBCompass\\app-1.40.2\\MongoDBCompass.exe"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\MongoDBCompass\\app-1.40.2\\MongoDBCompass.exe\" \"--\" \"%1\""	MongoDBCompass.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb\URL Protocol	reg.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb	reg.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb\DefaultIcon	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv\ = "URL:mongodb+srv"	MongoDBCompass.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb\URL Protocol	MongoDBCompass.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb\shell\open\command	MongoDBCompass.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv\ = "URL:MongoDB+SRV Protocol"	reg.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv\URL Protocol	reg.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv	reg.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb	MongoDBCompass.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb\shell\open\command	reg.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb\shell\open	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\MongoDBCompass\\app-1.40.2\\MongoDBCompass.exe\" \"--\" \"%1\""	reg.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv\DefaultIcon	reg.exe
Key created	\REGISTRY\USER\S-1-5-21-844837608-3875958368-2945961404-1000_Classes\mongodb+srv\shell	reg.exe

Modifies registry key 1 TTPs 16 IoCs

Modify Registry

T1112

pid	Process
3612	reg.exe
1092	reg.exe
4088	reg.exe
3936	reg.exe
436	reg.exe
1264	reg.exe
4904	reg.exe
4312	reg.exe
3392	reg.exe
4764	reg.exe
3728	reg.exe
2392	reg.exe
4296	reg.exe
4488	reg.exe
308	reg.exe
3008	reg.exe

Suspicious use of AdjustPrivilegeToken 8 IoCs

description	pid	Process
Token: SeShutdownPrivilege	992	MongoDBCompass.exe
Token: SeCreatePagefilePrivilege	992	MongoDBCompass.exe
Token: SeShutdownPrivilege	992	MongoDBCompass.exe
Token: SeCreatePagefilePrivilege	992	MongoDBCompass.exe
Token: SeShutdownPrivilege	992	MongoDBCompass.exe
Token: SeCreatePagefilePrivilege	992	MongoDBCompass.exe
Token: SeShutdownPrivilege	992	MongoDBCompass.exe
Token: SeCreatePagefilePrivilege	992	MongoDBCompass.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1668	Update.exe

Suspicious use of WriteProcessMemory 56 IoCs

description	pid	Process	procid_target
PID 868 wrote to memory of 1668	868	mongodb-compass-1.40.2-win32-x64.exe	69
PID 868 wrote to memory of 1668	868	mongodb-compass-1.40.2-win32-x64.exe	69
PID 1668 wrote to memory of 4412	1668	Update.exe	70
PID 1668 wrote to memory of 4412	1668	Update.exe	70
PID 1668 wrote to memory of 992	1668	Update.exe	71
PID 1668 wrote to memory of 992	1668	Update.exe	71
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 1220	992	MongoDBCompass.exe	72
PID 992 wrote to memory of 3728	992	MongoDBCompass.exe	108
PID 992 wrote to memory of 3728	992	MongoDBCompass.exe	108
PID 992 wrote to memory of 1996	992	MongoDBCompass.exe	75
PID 992 wrote to memory of 1996	992	MongoDBCompass.exe	75
PID 992 wrote to memory of 2392	992	MongoDBCompass.exe	76
PID 992 wrote to memory of 2392	992	MongoDBCompass.exe	76
PID 992 wrote to memory of 4296	992	MongoDBCompass.exe	78
PID 992 wrote to memory of 4296	992	MongoDBCompass.exe	78
PID 992 wrote to memory of 4488	992	MongoDBCompass.exe	80
PID 992 wrote to memory of 4488	992	MongoDBCompass.exe	80
PID 992 wrote to memory of 4904	992	MongoDBCompass.exe	82
PID 992 wrote to memory of 4904	992	MongoDBCompass.exe	82
PID 992 wrote to memory of 4312	992	MongoDBCompass.exe	85
PID 992 wrote to memory of 4312	992	MongoDBCompass.exe	85
PID 992 wrote to memory of 308	992	MongoDBCompass.exe	87
PID 992 wrote to memory of 308	992	MongoDBCompass.exe	87
PID 992 wrote to memory of 3008	992	MongoDBCompass.exe	88
PID 992 wrote to memory of 3008	992	MongoDBCompass.exe	88
PID 992 wrote to memory of 3832	992	MongoDBCompass.exe	90
PID 992 wrote to memory of 3832	992	MongoDBCompass.exe	90

C:\Users\Admin\AppData\Local\Temp\mongodb-compass-1.40.2-win32-x64.exe
"C:\Users\Admin\AppData\Local\Temp\mongodb-compass-1.40.2-win32-x64.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:868
- C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
  "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
  2⤵
  - Executes dropped EXE
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1668
- - C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\Squirrel.exe
    "C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
    3⤵
    - Executes dropped EXE
    PID:4412
- - C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe
    "C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe" --squirrel-install 1.40.2
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    - Modifies registry class
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:992
  - - C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe
      "C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\MongoDB Compass" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1660 --field-trial-handle=1664,i,1020967921859700643,15164506607400488433,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1220
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb /ve /t REG_SZ /d "URL:MongoDB Protocol" /f
      4⤵
      Modifies registry key
      PID:3728
  - - C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe
      "C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\MongoDB Compass" --mojo-platform-channel-handle=2164 --field-trial-handle=1664,i,1020967921859700643,15164506607400488433,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1996
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb /v "URL Protocol" /t REG_SZ /d "" /f
      4⤵
      Modifies registry class
      Modifies registry key
      PID:2392
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb\DefaultIcon /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe /f
      4⤵
      Modifies registry class
      Modifies registry key
      PID:4296
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb\shell\open\command /ve /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe\" \"--\" \"%1\"" /f
      4⤵
      Modifies registry class
      Modifies registry key
      PID:4488
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb+srv /ve /t REG_SZ /d "URL:MongoDB+SRV Protocol" /f
      4⤵
      Modifies registry class
      Modifies registry key
      PID:4904
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb+srv /v "URL Protocol" /t REG_SZ /d "" /f
      4⤵
      Modifies registry class
      Modifies registry key
      PID:4312
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb+srv\DefaultIcon /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe /f
      4⤵
      Modifies registry class
      Modifies registry key
      PID:308
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb+srv\shell\open\command /ve /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe\" \"--\" \"%1\"" /f
      4⤵
      Modifies registry class
      Modifies registry key
      PID:3008
  - - C:\Users\Admin\AppData\Local\MongoDBCompass\Update.exe
      C:\Users\Admin\AppData\Local\MongoDBCompass\Update.exe --createShortcut=MongoDBCompass.exe
      4⤵
      Executes dropped EXE
      PID:3832
- - C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe
    "C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe" --squirrel-firstrun
    3⤵
    PID:1188
  - - C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe
      "C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\MongoDB Compass" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1636 --field-trial-handle=1640,i,13064971904598676949,8143439538406771521,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
      4⤵
      PID:3260
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb /ve /t REG_SZ /d "URL:MongoDB Protocol" /f
      4⤵
      Modifies registry key
      PID:4088
  - - C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe
      "C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\MongoDB Compass" --mojo-platform-channel-handle=2236 --field-trial-handle=1640,i,13064971904598676949,8143439538406771521,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
      4⤵
      PID:4788
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb /v "URL Protocol" /t REG_SZ /d "" /f
      4⤵
      Modifies registry key
      PID:3936
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb\DefaultIcon /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe /f
      4⤵
      Modifies registry key
      PID:436
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb\shell\open\command /ve /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe\" \"--\" \"%1\"" /f
      4⤵
      Modifies registry key
      PID:3612
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb+srv /ve /t REG_SZ /d "URL:MongoDB+SRV Protocol" /f
      4⤵
      Modifies registry key
      PID:4764
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb+srv /v "URL Protocol" /t REG_SZ /d "" /f
      4⤵
      Modifies registry key
      PID:1092
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb+srv\DefaultIcon /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe /f
      4⤵
      Modifies registry key
      PID:1264
    - - C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        5⤵
        Modifies registry class
        
        PID:3728
  - - C:\Windows\system32\reg.exe
      C:\Windows\system32\reg.exe ADD HKCU\Software\Classes\mongodb+srv\shell\open\command /ve /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe\" \"--\" \"%1\"" /f
      4⤵
      Modifies registry key
      PID:3392
  - - C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe
      "C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\MongoDB Compass" --app-user-model-id=com.squirrel.MongoDBCompass.MongoDBCompass --app-path="C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2784 --field-trial-handle=1640,i,13064971904598676949,8143439538406771521,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
      4⤵
      PID:652

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\Update.exe.log

Filesize
1KB

MD5
26714738742ed6c7e6e824979218754e

SHA1
2072bab092ef6e82a13103a9dd4f172fbaf218e5

SHA256
e00fe44978b689c224aca3afea9a78743342263d9104737dbf052344c9ebfaca

SHA512
2de4806b89531938162f4393a5ab85e5ddd92603f761346c20b0d00468dcbd2bc6e7d6e067c4dec9f8472bcfaaa74d20e7dc85920b9bfd0152568929e42a1fde

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\MongoDBCompass.exe

Filesize
647KB

MD5
bfffe9c6e1a30316f44989a37decd04e

SHA1
0f52a5bc398e38d7fe1db1221477dda5781836a0

SHA256
630086b608eb35db0562012a8bd4dfd1a59195bef0d978946abdee0fd71be0f1

SHA512
d61dfcbccf795e8144c993898f72ba8c73f52791810f6b2ac689c202365b9c16a123464a2149f576704b480be2bd96669692ea1aa0cd83695cc2585032b0fad9

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\Update.exe

Filesize
1.8MB

MD5
dd6e62dfeff097e62721314c94ab775d

SHA1
e3843b28672ad4cdf5e13cede00e00604f6ef90e

SHA256
df8536836e02f781a9b435fadc1c21192b55dbf9628da7eda68c0221da1531aa

SHA512
796c9f4f0b8142304141bca1d7980d49f43ad24d0a1c01177cd5685b98f6527eab94dfa1590a87fa7e6890c71f80bd2f77c198fae3e9f38fe70f235e39ce9cee

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\Update.exe

Filesize
1.8MB

MD5
366624a45cc206eb87a34659d4d36b6e

SHA1
277625f2d7233faf38c61f2c5deaa30ee46afff3

SHA256
eaf4a78d007bdbc0ecc17ff57bc8d66e1b650fb6d2e28834138189bac5980958

SHA512
745c8eb9a0654b4d7b99c93ddf0adf5f99fd8cb7fd4e9cedc9d6e4bfeb4197312bb1ab5ea89f01ea25055edfe21bac261522abbe234d270a7833699a2115bd4c

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\D3DCompiler_47.dll

Filesize
4.7MB

MD5
2191e768cc2e19009dad20dc999135a3

SHA1
f49a46ba0e954e657aaed1c9019a53d194272b6a

SHA256
7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d

SHA512
5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe

Filesize
149.8MB

MD5
cb76cedfd7a8ce6d4efe7f13a235d7da

SHA1
ce495c02a9cd843665461c995551be7eca5a17e0

SHA256
a672ad108560ced02b5fcbde82a6e1631d3d5630ed2f48a68f8438a7b4c94cc6

SHA512
30d2e9af8729b6d553f77188e2804aa7a396d4bc713e74b6334fdfc8f30327cbce5928649d590b1e3196f9d7f5922f7bfd997cab1bdf6149f025fad8ae033a2f

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe

Filesize
138.1MB

MD5
6bb9e3964d6f9bef2f67199153893b89

SHA1
76a20d5eb052c67aec139aced69d1ff2e5fb0296

SHA256
c803177eea30509208ad85801ba0db7591916050e899fa25fca1222ada6f78b4

SHA512
91d2f070e2de78f56c2997df834046e7e1a0eff260975b3342565c9fa29a9fcd9304afbb785acdfde48831ada1ee0cdcd0bdc7669cf51f705ddfd0ad9f7c3571

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe

Filesize
120.2MB

MD5
f729c3c2400c3d9ebc4574d961af9585

SHA1
ef89b2025b1a511ab059732f090ead333ac25ac5

SHA256
167d99d2dc486ae7bf6faec24594e0500442416ae5239e6f605eb9b3ac49ea84

SHA512
792a379fd9bd8baf61ab2dde9899058f62fe853a554b9d60f77da35d59ac7226abea9e0741c34d2dbe3bd92d11259b3515dd1d6773638276df0238069d411e14

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe

Filesize
120.0MB

MD5
bc903a1081030c1fb1bf5cab419f86a2

SHA1
692edad1b34849efcd9c2b87eed76dbdb9061bc7

SHA256
1e5e8bd193cbde34a5976269d499b68dcd4adac6645ee713d0484a8da70aa040

SHA512
fbd639fbc843e7e31ccd175b63074601a62b9253507d8c7b45639ed298466cff9b7f017b8dcc6f556bb2855915af2e1f374ffdf4e556016dcaf666c0fab30bc5

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe

Filesize
123.1MB

MD5
e175c7148223ef95504e352a076eab31

SHA1
c925297c2b083817a7cb7738788fb13a41583e1d

SHA256
dabf8578e667eb1d667d7b6074a9915cfb492452a0604c199ceeb3ae80f73ca1

SHA512
b6256efc206a2940184873a92dc8a7c76cc793cf5fe87855f0b18118f7a3ccedc1b39f3b0e91898af8ede9adde99c18cf44395ff44d0b587b5d330e13df25a4e

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe

Filesize
118.5MB

MD5
e1a160b1a303f2de683cf62003a14550

SHA1
f2bc074423ecbdab990316a31d83c536fd3e9312

SHA256
45a176e8a6ac6e330932a5634b255050a7da3c66dac9ac18e1fe2f07ad4ce2a0

SHA512
48bcf08f0921ae9cd7d92597365ffdc267aaebc3ec608a3d00ba857013f9cb92e5c99a5eb8cca226357d199a3a944ab54a6a7bf46258f59884d226d01ac6c268

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe

Filesize
108.6MB

MD5
990cafecf83c1eb007e3a1a68bcaa422

SHA1
011d0bda2b8c122901e96828463c5cec05baf7ee

SHA256
9050cc70942a7599305828da278cc9596f0bb6a373143784c6c1861a759deb87

SHA512
298319970a338d5b96690cc5d7d17a7b6a8539ff93e4729fdcf20cba57c40f4ef63034bb041d3fc3c86e0ff9d9ee955f766f609eb3d4b258bbe54811ebd2286c

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe

Filesize
113.9MB

MD5
b16432af63e24140e414aca0c13f1528

SHA1
50acd4fee252e9cf9a113b89a025159067ae3677

SHA256
99f578c6051c56694bdf06cfe73020868bcd2120ec8f3519220fae4a9786edb2

SHA512
4441feb6aee4207d83c2c2d674454928a471237d2c0e5ba21a99bf67c24c56bbd76addb3d2bacbe46400461d64d70a0b3759612a6911f61578b38282551f4adc

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\MongoDBCompass.exe

Filesize
107.2MB

MD5
179d6a65c252c7c285bfb6e30c539281

SHA1
7fc046a8f06fdd66efe3eca7d2836dad8deeb56b

SHA256
455c21a5e45e1445c3c065e4c5ce1f0028d48603e41a09a0cea61d32b3ff9835

SHA512
a54d1ddac970116b2702b885c80a3e41ac6109f6f6fde89e83a2fad7d4adf16f07177341e4f46d06723c00486e9b7f57ab215ed3312d02489f4505f10dcab467

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\Squirrel.exe

Filesize
1.8MB

MD5
366624a45cc206eb87a34659d4d36b6e

SHA1
277625f2d7233faf38c61f2c5deaa30ee46afff3

SHA256
eaf4a78d007bdbc0ecc17ff57bc8d66e1b650fb6d2e28834138189bac5980958

SHA512
745c8eb9a0654b4d7b99c93ddf0adf5f99fd8cb7fd4e9cedc9d6e4bfeb4197312bb1ab5ea89f01ea25055edfe21bac261522abbe234d270a7833699a2115bd4c

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\chrome_100_percent.pak

Filesize
132KB

MD5
e4cbb48c438622a4298c7bdd75cc04f6

SHA1
6f756d31ef95fd745ba0e9c22aadb506f3a78471

SHA256
24d92bbeb63d06b01010fe230c1e3a31e667a159be7e570a8efe68f83ed9ad40

SHA512
8d3ea1b5ca74c20a336eaa29630fd76ecd32f5a56bb66e8cef2bce0fa19024ea917562fd31365081f7027dde9c8464742b833d08c8f41fdddc5bd1a74b9bc766

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\chrome_200_percent.pak

Filesize
191KB

MD5
99b95d59d6817b46e9572e3354c97317

SHA1
6809db4ca8e10edd316261a3490d5fc657372c12

SHA256
55d873a9f3ac69bbf6eb6940443df8331ebd7aa57138681d615f3b89902447e7

SHA512
3071cfeb74d5058c4b7c01bfe3c6717d9bb426f3354c4d8a35bd3e16e15cde2f2c48238cb6382b0703b1cc257d87fcecfb84fbf4f597f58e64463ceede4366dd

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\ffmpeg.dll

Filesize
1.8MB

MD5
4265bba6847fbe6ab4446c18cb48cd66

SHA1
aac219d142f53f178b6d87b656d3904b540fc7ec

SHA256
8d27b8db1788d6eee08280a83a52abffcd36c86ce7b0ef041a3d9974581e52e2

SHA512
062f81dad910edc22c5d19ec538bf25e77c4a4ce478ba190e4256a900fdb55d6f9d4605e00fb9e9c2c5753f4f869b002c3cd8bd664c8d07fa306082a43ca0260

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\icudtl.dat

Filesize
10.1MB

MD5
62880b7d351a9f547b62b8da6c97ce25

SHA1
057f11003013cfb3f1c63e6bdd4f2f9949ff0104

SHA256
7c40c811d30d459dbf04a04c141b60eb4247cd58a008fb836605317df665748f

SHA512
0d6f83175a91d90f4cc3ec4d9071b7acd0cd8ebbcc592322e46fde2adb7198e035af62c45a11a622f2a908e26d4dd8b8d1af023e634a74d0824d02c791ba3c1a

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\libegl.dll

Filesize
469KB

MD5
6a43613c3bd23734d4b5855b1b261089

SHA1
28c7caad795cdbaa79e1c4a9bfc4ab5bdfa85a39

SHA256
aee897df5a2bea53bd9f1fde3e8ccedf60536817d6b23e9213451c1ecdb7898c

SHA512
f563b189182831e5042a93b2052954f2fa39d0d86d318fd74965b6cf533b03f2b4ff2adfdb39d68f5233de126403d3f6c34ed8c3182da43493c09b188f3270f4

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\libglesv2.dll

Filesize
7.1MB

MD5
4d9c018e8d4617407a8a9e8027aa9202

SHA1
c2a4ba40734acc2b319528fa352e6d50aadbcb37

SHA256
04a8972573c270b6247dd851a7858ca5da0a37d5d0406dffb19dbe4a5ae65bc2

SHA512
6c974abb36851b3c6c2ee7dee120cad72e68e937768fd718b7600196a421cf91a4860306085277a3ffdb506def4b8e20f7a6ce91c8f2efb715d7a0b6ff1609fa

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\locales\en-US.pak

Filesize
391KB

MD5
c9c2abcb04e1ad5f1a20244da8d595a8

SHA1
89ca81da21900074a5ccdcdc852768277b2b620b

SHA256
0364c73f320e441b03cb2afcaaca3ffbfac51a3559dcd0ff99a1accf82c7f762

SHA512
96bbf21174f56a111a2fc6ec024ab2f143945306797e77d773367a7fad42b7828ebb7b08d0dab76858d9fa340bf3205be403bc53df9e5e4e390058c94a751ffd

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources.pak

Filesize
5.2MB

MD5
69feae8019553a0433e79849b6f0dbac

SHA1
e6488a69e1ef2e57dece2b4115d46b26ae1120c3

SHA256
285ec4cbe41cb1761b4bda6723499488750a668bf3e6734baa57c7149f6ca8ae

SHA512
c293a8014d7d3b065a1401fb938b45eb10b1559a1246039530fca6d25f5c9179c8dc5e2a77f9ebcb96658ff46f96aa24222481231c3befbadda968380ddea3ba

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar

Filesize
37.3MB

MD5
da8124203b3295046ba7ec7b19c649b9

SHA1
280280b9b0b8ac667694cc7abcbe1254f9bf42e6

SHA256
67d10ecab13428f884b20a2611eb6ed80a96cfaf899fc9dc0fd0c32dd4e13b3b

SHA512
7c9e00b339b021f8ffc1974697f59e8c249dfee705954cbb7302d4bfc3992343fd93a8b53bcad0e812bd5c84df3f635ba9db5b73c6749960adc7595a2eafc6c1

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\@mongosh\node-runtime-worker-thread\dist\index.js

Filesize
81KB

MD5
ca1a067321c0b28b4fa3760520a1d19f

SHA1
3131c66a5f95139a3b0426d16c1b6afb4f4068ce

SHA256
b9d9e2f861170a26558625a0857af899ac9e18781283b183e98df9f29931b876

SHA512
4d202760cac50962162618316bc9cee3b47ce7a05b710686311328f1c1514b5424b0ba0ba031cd6e34e400fdc8030cf704f281ca1268ea78f1ee160ed51688b9

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\@mongosh\node-runtime-worker-thread\package.json

Filesize
2KB

MD5
9ae646742ba6f24cbb82f9c55fff2f84

SHA1
decbe8cc456e9a21ef9394d34155dd0e2b94cfee

SHA256
a347d828978fef0e44970680bc17770c06612823c59db195d20a8f05f60c8274

SHA512
29eb9625b6502c0d29b73a60a4a52ac7b55047ddc42cab66fb71ec00f684f59245de3f2f9acd90382c59b45426f9afe6e458b6a7bf79faae764448260db82c5c

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\keytar\build\Release\keytar.node

Filesize
150KB

MD5
e4fb32afb11fbf0d00a0bf5d3d91f9d6

SHA1
b98eda3dc654bd08965acba0e4e5f5259c6475a6

SHA256
95b8aeb00dc1bab3c6153737cfbd7a6737c64d75320c4bda8bac186e90c23b45

SHA512
0853262094445a769c67e9d4805c5b34f1deae3e2cb0e5b0a375c1675845f4a35078e681c23f2b8c1ebf59fb9948a6505fc59ed66d00de2d4a37843dd0426df9

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\system-ca\lib\impl.js

Filesize
3KB

MD5
5b3f866231768d77467e649b1e5768b4

SHA1
995b58566ab30b314ad47cf29e6c630f138fb09a

SHA256
b09db3d65e928b6eb6fff228f24fe8b9e2d119d6d35e36d4c7694a4437d2d219

SHA512
245c448fe8b67bd4e12bfb37159bfa2047bdae2f89530f1b018912b3939adc95f7efc98f4abef67794a33b34d6ffb75508e4cd718c86f88b59ff1228e467ec1e

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\system-ca\lib\index.js

Filesize
2KB

MD5
8f1d48341de3512b4cde0bd98cae91eb

SHA1
8a4d21962775d4bf6a4236ea09def65cf9db7aeb

SHA256
2e7702e625e338c2e4ac5d3428ab8a45754b7644625820cbda00dc537402de43

SHA512
05955293a516c1d99391998ab3c8b2eb15af18197bee7e72af0c6663beaf4a1817b87d86dd66e1c8bb7f7550d617ddcd5504ab13e0525118929439c6a28cbae4

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\system-ca\package.json

Filesize
1KB

MD5
ca63eab058eabb9408ec18f3cadb9422

SHA1
db7f96336c2997a48ff076bfc7253786069cddcd

SHA256
7edbd759f00ca3a1c05cdba8bff2bb2e700f6994be036859334e52c84c562957

SHA512
740fe32dc3bf52e3f08dca76844ca94e29c25566078d388673d1f911663bbef7b2011943f9d1dc2a4e198f76485cd1e0d2e8d79343c9422674ec4fce61cf0417

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\win-export-certificate-and-key\node_modules\node-addon-api\LICENSE.md

Filesize
1KB

MD5
0492ef29a9d558a3e9660e7accc9ca6a

SHA1
0aef1ff2a58152dc83baaa6d5e97e54525c4ff21

SHA256
4fcf69bbecb999ec8fa0ece62bc8934b7cdd45061ac1a8b1939a09be64cd4352

SHA512
2ff6743661d190a0c7dabf3508d57c0d86c7ecd7b8200577e4ebfd937d3782a15d49f327b81428afabc706d378c45f20eca067c084a3376d770d4dfce0f3e29f

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\win-export-certificate-and-key\node_modules\node-addon-api\common.gypi

Filesize
762B

MD5
98f8c21891914449f85fdbebde5ee6f2

SHA1
40f91d126351b0fc9fd4f03b33cca72d952defc3

SHA256
f15742e3019096b85ef3e8985e2fe66c4dda722908577e113a1b0264893ecca8

SHA512
e2254b498e89d972733b3f390010843e924c68aeab96f6c00cd6b3fb6c447e69adf3a9b9caf66adc9dbc9bb57dfd92873d931a3d2e9fc37d8f934ca5b258bbe0

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\win-export-certificate-and-key\node_modules\node-addon-api\except.gypi

Filesize
560B

MD5
1fe1ff8ca630ac3f8a8b9c4ac7e08aad

SHA1
5d5716c9cac44eeb2d911cce7dc68f32bf49d47c

SHA256
ddbc09f5b66fe24dd898fbe659085a6ff72e9575025004fc3762271dba781e8b

SHA512
f34eabbb5c9539ec64f9470754783e8d2ad004f2f1613ddf2a4e7cbf2d3e0427496b60acb3d2e0ce03d68e38117351e88ef1d2a9123659a0556f0a3d0dff50a7

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\win-export-certificate-and-key\node_modules\node-addon-api\node_api.gyp

Filesize
132B

MD5
fcec1557ac47891385ae1f67e6da343a

SHA1
e361d3a3be19e802820f2fe59bfdf7c9ef72fc74

SHA256
3cd2c44fb0974f016376b676d46bbebbca7c89d4383b09ece30e4cb4122a1499

SHA512
43715845f701abdc09fe59d33e3f61e19278abbacb122edaf1b26de55bd80b3354b76d5616905c8038eb6158c3399162b40a73742b7e4c733b3ac187e9db0aa3

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\win-export-certificate-and-key\node_modules\node-addon-api\noexcept.gypi

Filesize
639B

MD5
d75852a9f1e16b44a8e8d568cd2cef04

SHA1
4bf93f1ef3e5875cc40632cf229dea170c8f03b3

SHA256
494060b87197c489497a038504147c435b1d09306152048add42ba0d7d16e747

SHA512
857923151649b77e35c0d1a4f3191fe65463ab2fb5746256692f96f8dc810a9e40eefa85eaa8141afed49dd896f7cb58e2eb4893f94b40e4259718c50b93074c

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\win-export-certificate-and-key\node_modules\node-addon-api\package-support.json

Filesize
467B

MD5
33e3fb94807bcd5102535f476c6a46a8

SHA1
dedc07e9973f104e29d2eee9ad3468b0f40dd620

SHA256
b1cb7da23cca1681c7392a3c889eb0cc4916c53d2d7692d4b654ae751f3442f3

SHA512
bbc762c8886ec78fd889b46abfd9f9aca7f5d2cadbf9676f6a010026d4056caa076516380b3c0737c61962e8bb5b0555095dd0386c99d9da773c200cfa130755

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\win-export-certificate-and-key\node_modules\node-addon-api\tools\README.md

Filesize
3KB

MD5
34143c24d232ac62205ec0b7601cb109

SHA1
3decbdeed6f0c742925a5be9b78f5251a4c0b569

SHA256
65e9ea918538f453166b10a1d609cf44cec3d2d01f23fecb5265fb3a4bf303d5

SHA512
07dad1d9c5c618afc5fe2b8183ea40db0cd736e0600ba8bde4f38db726d85e277c460140ef312c91a748a208ffa72283be01a224f976f3421f144a2977ea4b2f

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\squirrel.exe

Filesize
1.8MB

MD5
366624a45cc206eb87a34659d4d36b6e

SHA1
277625f2d7233faf38c61f2c5deaa30ee46afff3

SHA256
eaf4a78d007bdbc0ecc17ff57bc8d66e1b650fb6d2e28834138189bac5980958

SHA512
745c8eb9a0654b4d7b99c93ddf0adf5f99fd8cb7fd4e9cedc9d6e4bfeb4197312bb1ab5ea89f01ea25055edfe21bac261522abbe234d270a7833699a2115bd4c

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\v8_context_snapshot.bin

Filesize
581KB

MD5
b291a4e181d0fa1f65010e13b91c5187

SHA1
aa9b5f3665c02d4d3d77b1fc5cb5f052d1802db0

SHA256
535fe8389ba233e57182fac05f96f612d04187d3cf7ea8a2702e4e28878e97bb

SHA512
730269dd2a1a2fe889d470c2a71af03fa529b5346b2b24aea953843db9d080c541bfc548bc12dedbac052d62bf262b10ce88e75bf8815a7424262ca0d58f5afc

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\vk_swiftshader.dll

Filesize
4.9MB

MD5
503adce551c1c07a7b790abe4726e762

SHA1
3ac2447f3382b49e21ef456276b166ca72762151

SHA256
e209a6683a57a53b0001fa3c94c417dfa09ed6e858f60f3d6caca05be6405e29

SHA512
6a53f1857846c1d54531404f22c92f592654e668a4f32ff047bf453dc07b393afd68eac8badcab378a2c0f83bebe16c566a6e2594b0e2dfad9fd074095c59059

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\packages\MongoDBCompass-1.40.2-full.nupkg

Filesize
124.2MB

MD5
1d18a2e7998e1a961ff834b2136b7fe6

SHA1
68473fad677f3d92c7503469133a77cae6493b5c

SHA256
9dbdd5167b626edcff38e556be11e37b1cbe90cc3ddb67a1b2014e32f3936a69

SHA512
6b09c045526250909b99a30ab2fd89e65654244a0ec69921dfd6f0538cd1f121f27603c44b1d333af3427fdc4fcc2fd40d789ec8cc09958c3822a475dee78242

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\packages\MongoDBCompass-1.40.2-full.nupkg

Filesize
119.8MB

MD5
16b22509720da11065fc9473d3b427d3

SHA1
bc19dd04b3478a86912c34f35c2463f36995ac2c

SHA256
89d27e2ac6602ea53d17a6a4e6dd826d8ceabed458f1331a9f1863ba040c3dcb

SHA512
4d24e1c015ff9a57b257abe7e07426065f28351198a3772bfb848a79bb729da4ef306841e3254f3371b0a70f7ecc0d76a3547a60252511038c3b5047db86b401

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\packages\RELEASES

Filesize
86B

MD5
993cf3a860e3af80a4be736ee79704f1

SHA1
ca5e95c61cbb02cebe16926e0c315fd7a7832228

SHA256
a6c82f10410167bb811937d3713c1d4673fa7aac77238d4669f4b3d5f344f07d

SHA512
133c36b10c3461de2fef18098b1a0b81fdd5e8a5d75b4b9dc5c74d9016898bcd6d6ea7de9a8927c9a24467dda8e2f8fc513b2536868cd6537b3bb598337babb3

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\packages\RELEASES

Filesize
86B

MD5
993cf3a860e3af80a4be736ee79704f1

SHA1
ca5e95c61cbb02cebe16926e0c315fd7a7832228

SHA256
a6c82f10410167bb811937d3713c1d4673fa7aac77238d4669f4b3d5f344f07d

SHA512
133c36b10c3461de2fef18098b1a0b81fdd5e8a5d75b4b9dc5c74d9016898bcd6d6ea7de9a8927c9a24467dda8e2f8fc513b2536868cd6537b3bb598337babb3

Download Submit
C:\Users\Admin\AppData\Local\MongoDBCompass\update.exe

Filesize
1.8MB

MD5
dd6e62dfeff097e62721314c94ab775d

SHA1
e3843b28672ad4cdf5e13cede00e00604f6ef90e

SHA256
df8536836e02f781a9b435fadc1c21192b55dbf9628da7eda68c0221da1531aa

SHA512
796c9f4f0b8142304141bca1d7980d49f43ad24d0a1c01177cd5685b98f6527eab94dfa1590a87fa7e6890c71f80bd2f77c198fae3e9f38fe70f235e39ce9cee

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\MongoDBCompass-1.40.2-full.nupkg

Filesize
124.2MB

MD5
1d18a2e7998e1a961ff834b2136b7fe6

SHA1
68473fad677f3d92c7503469133a77cae6493b5c

SHA256
9dbdd5167b626edcff38e556be11e37b1cbe90cc3ddb67a1b2014e32f3936a69

SHA512
6b09c045526250909b99a30ab2fd89e65654244a0ec69921dfd6f0538cd1f121f27603c44b1d333af3427fdc4fcc2fd40d789ec8cc09958c3822a475dee78242

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES

Filesize
86B

MD5
993cf3a860e3af80a4be736ee79704f1

SHA1
ca5e95c61cbb02cebe16926e0c315fd7a7832228

SHA256
a6c82f10410167bb811937d3713c1d4673fa7aac77238d4669f4b3d5f344f07d

SHA512
133c36b10c3461de2fef18098b1a0b81fdd5e8a5d75b4b9dc5c74d9016898bcd6d6ea7de9a8927c9a24467dda8e2f8fc513b2536868cd6537b3bb598337babb3

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

Filesize
1.8MB

MD5
dd6e62dfeff097e62721314c94ab775d

SHA1
e3843b28672ad4cdf5e13cede00e00604f6ef90e

SHA256
df8536836e02f781a9b435fadc1c21192b55dbf9628da7eda68c0221da1531aa

SHA512
796c9f4f0b8142304141bca1d7980d49f43ad24d0a1c01177cd5685b98f6527eab94dfa1590a87fa7e6890c71f80bd2f77c198fae3e9f38fe70f235e39ce9cee

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

Filesize
1.8MB

MD5
dd6e62dfeff097e62721314c94ab775d

SHA1
e3843b28672ad4cdf5e13cede00e00604f6ef90e

SHA256
df8536836e02f781a9b435fadc1c21192b55dbf9628da7eda68c0221da1531aa

SHA512
796c9f4f0b8142304141bca1d7980d49f43ad24d0a1c01177cd5685b98f6527eab94dfa1590a87fa7e6890c71f80bd2f77c198fae3e9f38fe70f235e39ce9cee

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif

Filesize
44KB

MD5
dd5a5dd955041f0c09ebc96e78e6edbb

SHA1
e04477ce08efffc142fd7da37305b9173fbd478a

SHA256
8152393a4f4e08a42d2592682ef40485f9c99a6f14413fc9c9ba2279f903ef2a

SHA512
74c60d3e61373c00c8b78ca427df3e3e42d673255da8b071f17be47d0fb4769464e684f3ccb3b360bd9f8a283fdbc9d6a28da9d3a3828d39a2d2b03b4e77df3a

Download Submit
C:\Users\Admin\AppData\Roaming\MongoDB Compass\AppPreferences\General.json

Filesize
998B

MD5
d0ccb35bf1b3fc33bcf0c4e2e29dd0c4

SHA1
b4c7a7896a309581e3941e459c863c98984f5099

SHA256
11fd07024ecc95e469545cc18216c54c9b2fb7e320aa477cd905cf2c76082763

SHA512
923fb67cb38f8c763c1092d20560796d7d4b17f78aafd2b43c1a47c7f93370a0335a81db2f18bd99c50da3c3738413b15b384d8af5f4813328bad7a82f2870b6

Download Submit
C:\Users\Admin\AppData\Roaming\MongoDB Compass\AppPreferences\General.json

Filesize
1KB

MD5
622886b4baa1274ff20d708e1dfb147f

SHA1
3f0685b6a4bcd6708623bd95dfd3232eab3c763e

SHA256
a2a2d53de639bf279981b201df8d1396cfe4d4bc9e297c3c6b384b17fbf6f1d2

SHA512
663a3989d2849768586994e3889da6cbe6b3fbdbb5adb6d4330e7d31038e7bfe3eb30d595fe7f6b89f471c9c86c5b837cd422c30d02d420ae892103c81ca8a1f

Download Submit
C:\Users\Admin\AppData\Roaming\MongoDB Compass\AppPreferences\General.json

Filesize
1KB

MD5
bbad17d93d5eaf706ca4d5c3cc391691

SHA1
717a5113b418c5747518d93d8cea9bc6d05f0dd7

SHA256
9ac91bd67d3174c5b9e04d3f0f64024f40c87d548158e199399bfea9a4d1a0d1

SHA512
e5ba3a6bb9844261ae85130134d15ca2f720e647d8279e84ad7bb038b0912737711d48886983dd9f592b464eb61e7b2963897987cdea7f389043ca12a8d46523

Download Submit
C:\Users\Admin\AppData\Roaming\MongoDB Compass\AppPreferences\General.json

Filesize
1KB

MD5
957f1a3f94f38dddc756fd0b6e6b9f85

SHA1
7a87d3064fd84a6d590ab7b9529f3b5caa729fa3

SHA256
3f7b0b1c877732eebffa4c4c2e99f7155a991cf54d3c48660aac78e998619486

SHA512
487a8a1c5d533457cf8c6eb7079fc14eabf01a59439721748ccb2da1b79165a94af6514049a271fccaf025f68b45aa01fcc1369d530d80ce411e74e252c44a12

Download Submit
C:\Users\Admin\AppData\Roaming\MongoDB Compass\Local State

Filesize
434B

MD5
d06ca31619da090b01657326d4d1eb42

SHA1
409aac79b920de05fad1056ac6d4a065299cc9a7

SHA256
6b559f1cfbab3cfe5be240b809909591659602954294fe79db419d2da2789793

SHA512
f17c8e8afb6224ca56ddb98d3dc9430d7e3b05a1c2f321ccd8d5ec1f46f4418f9130d115eb6cd23f3b2a40190975648ebec16d7f0a024800d27effb8b01f88d8

Download Submit
C:\Users\Admin\AppData\Roaming\MongoDB Compass\Users\9ea83011-06f1-4ef6-ac44-e7e8626ed16f.json

Filesize
135B

MD5
6a384d88f3194169e974812d11ec6b8a

SHA1
bdefd2299c323dcd59c6e0b4e06a497a4a56106c

SHA256
4479ad265ac8e74afe1bc32aa622b8831adb8c36b2c84d6f709707f11e94950c

SHA512
1b33c679107302665675758192b271d6acf76ead920ecfcaacba0b78b6a91b8523fcbc084ad02a8515d4d0ac4400c81232edc39b04b691f486577f5092d31010

Download Submit
C:\Users\Admin\AppData\Roaming\MongoDB Compass\Users\9ea83011-06f1-4ef6-ac44-e7e8626ed16f.json

Filesize
135B

MD5
6a384d88f3194169e974812d11ec6b8a

SHA1
bdefd2299c323dcd59c6e0b4e06a497a4a56106c

SHA256
4479ad265ac8e74afe1bc32aa622b8831adb8c36b2c84d6f709707f11e94950c

SHA512
1b33c679107302665675758192b271d6acf76ead920ecfcaacba0b78b6a91b8523fcbc084ad02a8515d4d0ac4400c81232edc39b04b691f486577f5092d31010

Download Submit
C:\Users\Admin\AppData\Roaming\MongoDB Compass\Users\9ea83011-06f1-4ef6-ac44-e7e8626ed16f.json

Filesize
135B

MD5
ae6bc74a377d084f8fa598a781217823

SHA1
179514311e5a7994778348a1608ff79fe4095caf

SHA256
d04e761da18adaf04727c129bab0d4776e467dbe8a347608a4c2e6d41415fbfb

SHA512
39adb91111c6cf4e355c67ac544e2140d20f70300d34eef9464e9a5605fac29bfc133ee42ef072ec33f5098ca9d23b549ec3234197ac3ffb2b61e541c6f8fc55

Download Submit
C:\Users\Admin\AppData\Roaming\MongoDB Compass\Users\9ea83011-06f1-4ef6-ac44-e7e8626ed16f.json

Filesize
135B

MD5
ae6bc74a377d084f8fa598a781217823

SHA1
179514311e5a7994778348a1608ff79fe4095caf

SHA256
d04e761da18adaf04727c129bab0d4776e467dbe8a347608a4c2e6d41415fbfb

SHA512
39adb91111c6cf4e355c67ac544e2140d20f70300d34eef9464e9a5605fac29bfc133ee42ef072ec33f5098ca9d23b549ec3234197ac3ffb2b61e541c6f8fc55

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\d3dcompiler_47.dll

Filesize
4.7MB

MD5
2191e768cc2e19009dad20dc999135a3

SHA1
f49a46ba0e954e657aaed1c9019a53d194272b6a

SHA256
7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d

SHA512
5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\d3dcompiler_47.dll

Filesize
4.7MB

MD5
2191e768cc2e19009dad20dc999135a3

SHA1
f49a46ba0e954e657aaed1c9019a53d194272b6a

SHA256
7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d

SHA512
5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\ffmpeg.dll

Filesize
1.8MB

MD5
4265bba6847fbe6ab4446c18cb48cd66

SHA1
aac219d142f53f178b6d87b656d3904b540fc7ec

SHA256
8d27b8db1788d6eee08280a83a52abffcd36c86ce7b0ef041a3d9974581e52e2

SHA512
062f81dad910edc22c5d19ec538bf25e77c4a4ce478ba190e4256a900fdb55d6f9d4605e00fb9e9c2c5753f4f869b002c3cd8bd664c8d07fa306082a43ca0260

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\ffmpeg.dll

Filesize
1.8MB

MD5
4265bba6847fbe6ab4446c18cb48cd66

SHA1
aac219d142f53f178b6d87b656d3904b540fc7ec

SHA256
8d27b8db1788d6eee08280a83a52abffcd36c86ce7b0ef041a3d9974581e52e2

SHA512
062f81dad910edc22c5d19ec538bf25e77c4a4ce478ba190e4256a900fdb55d6f9d4605e00fb9e9c2c5753f4f869b002c3cd8bd664c8d07fa306082a43ca0260

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\ffmpeg.dll

Filesize
1.8MB

MD5
4265bba6847fbe6ab4446c18cb48cd66

SHA1
aac219d142f53f178b6d87b656d3904b540fc7ec

SHA256
8d27b8db1788d6eee08280a83a52abffcd36c86ce7b0ef041a3d9974581e52e2

SHA512
062f81dad910edc22c5d19ec538bf25e77c4a4ce478ba190e4256a900fdb55d6f9d4605e00fb9e9c2c5753f4f869b002c3cd8bd664c8d07fa306082a43ca0260

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\ffmpeg.dll

Filesize
1.8MB

MD5
4265bba6847fbe6ab4446c18cb48cd66

SHA1
aac219d142f53f178b6d87b656d3904b540fc7ec

SHA256
8d27b8db1788d6eee08280a83a52abffcd36c86ce7b0ef041a3d9974581e52e2

SHA512
062f81dad910edc22c5d19ec538bf25e77c4a4ce478ba190e4256a900fdb55d6f9d4605e00fb9e9c2c5753f4f869b002c3cd8bd664c8d07fa306082a43ca0260

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\ffmpeg.dll

Filesize
1.8MB

MD5
4265bba6847fbe6ab4446c18cb48cd66

SHA1
aac219d142f53f178b6d87b656d3904b540fc7ec

SHA256
8d27b8db1788d6eee08280a83a52abffcd36c86ce7b0ef041a3d9974581e52e2

SHA512
062f81dad910edc22c5d19ec538bf25e77c4a4ce478ba190e4256a900fdb55d6f9d4605e00fb9e9c2c5753f4f869b002c3cd8bd664c8d07fa306082a43ca0260

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\ffmpeg.dll

Filesize
1.8MB

MD5
4265bba6847fbe6ab4446c18cb48cd66

SHA1
aac219d142f53f178b6d87b656d3904b540fc7ec

SHA256
8d27b8db1788d6eee08280a83a52abffcd36c86ce7b0ef041a3d9974581e52e2

SHA512
062f81dad910edc22c5d19ec538bf25e77c4a4ce478ba190e4256a900fdb55d6f9d4605e00fb9e9c2c5753f4f869b002c3cd8bd664c8d07fa306082a43ca0260

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\ffmpeg.dll

Filesize
1.8MB

MD5
4265bba6847fbe6ab4446c18cb48cd66

SHA1
aac219d142f53f178b6d87b656d3904b540fc7ec

SHA256
8d27b8db1788d6eee08280a83a52abffcd36c86ce7b0ef041a3d9974581e52e2

SHA512
062f81dad910edc22c5d19ec538bf25e77c4a4ce478ba190e4256a900fdb55d6f9d4605e00fb9e9c2c5753f4f869b002c3cd8bd664c8d07fa306082a43ca0260

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\libEGL.dll

Filesize
469KB

MD5
6a43613c3bd23734d4b5855b1b261089

SHA1
28c7caad795cdbaa79e1c4a9bfc4ab5bdfa85a39

SHA256
aee897df5a2bea53bd9f1fde3e8ccedf60536817d6b23e9213451c1ecdb7898c

SHA512
f563b189182831e5042a93b2052954f2fa39d0d86d318fd74965b6cf533b03f2b4ff2adfdb39d68f5233de126403d3f6c34ed8c3182da43493c09b188f3270f4

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\libEGL.dll

Filesize
469KB

MD5
6a43613c3bd23734d4b5855b1b261089

SHA1
28c7caad795cdbaa79e1c4a9bfc4ab5bdfa85a39

SHA256
aee897df5a2bea53bd9f1fde3e8ccedf60536817d6b23e9213451c1ecdb7898c

SHA512
f563b189182831e5042a93b2052954f2fa39d0d86d318fd74965b6cf533b03f2b4ff2adfdb39d68f5233de126403d3f6c34ed8c3182da43493c09b188f3270f4

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\libGLESv2.dll

Filesize
7.1MB

MD5
4d9c018e8d4617407a8a9e8027aa9202

SHA1
c2a4ba40734acc2b319528fa352e6d50aadbcb37

SHA256
04a8972573c270b6247dd851a7858ca5da0a37d5d0406dffb19dbe4a5ae65bc2

SHA512
6c974abb36851b3c6c2ee7dee120cad72e68e937768fd718b7600196a421cf91a4860306085277a3ffdb506def4b8e20f7a6ce91c8f2efb715d7a0b6ff1609fa

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\libGLESv2.dll

Filesize
7.1MB

MD5
4d9c018e8d4617407a8a9e8027aa9202

SHA1
c2a4ba40734acc2b319528fa352e6d50aadbcb37

SHA256
04a8972573c270b6247dd851a7858ca5da0a37d5d0406dffb19dbe4a5ae65bc2

SHA512
6c974abb36851b3c6c2ee7dee120cad72e68e937768fd718b7600196a421cf91a4860306085277a3ffdb506def4b8e20f7a6ce91c8f2efb715d7a0b6ff1609fa

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\keytar\build\Release\keytar.node

Filesize
150KB

MD5
e4fb32afb11fbf0d00a0bf5d3d91f9d6

SHA1
b98eda3dc654bd08965acba0e4e5f5259c6475a6

SHA256
95b8aeb00dc1bab3c6153737cfbd7a6737c64d75320c4bda8bac186e90c23b45

SHA512
0853262094445a769c67e9d4805c5b34f1deae3e2cb0e5b0a375c1675845f4a35078e681c23f2b8c1ebf59fb9948a6505fc59ed66d00de2d4a37843dd0426df9

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\resources\app.asar.unpacked\node_modules\keytar\build\Release\keytar.node

Filesize
150KB

MD5
e4fb32afb11fbf0d00a0bf5d3d91f9d6

SHA1
b98eda3dc654bd08965acba0e4e5f5259c6475a6

SHA256
95b8aeb00dc1bab3c6153737cfbd7a6737c64d75320c4bda8bac186e90c23b45

SHA512
0853262094445a769c67e9d4805c5b34f1deae3e2cb0e5b0a375c1675845f4a35078e681c23f2b8c1ebf59fb9948a6505fc59ed66d00de2d4a37843dd0426df9

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\vk_swiftshader.dll

Filesize
4.9MB

MD5
503adce551c1c07a7b790abe4726e762

SHA1
3ac2447f3382b49e21ef456276b166ca72762151

SHA256
e209a6683a57a53b0001fa3c94c417dfa09ed6e858f60f3d6caca05be6405e29

SHA512
6a53f1857846c1d54531404f22c92f592654e668a4f32ff047bf453dc07b393afd68eac8badcab378a2c0f83bebe16c566a6e2594b0e2dfad9fd074095c59059

Download Submit
\Users\Admin\AppData\Local\MongoDBCompass\app-1.40.2\vk_swiftshader.dll

Filesize
4.9MB

MD5
503adce551c1c07a7b790abe4726e762

SHA1
3ac2447f3382b49e21ef456276b166ca72762151

SHA256
e209a6683a57a53b0001fa3c94c417dfa09ed6e858f60f3d6caca05be6405e29

SHA512
6a53f1857846c1d54531404f22c92f592654e668a4f32ff047bf453dc07b393afd68eac8badcab378a2c0f83bebe16c566a6e2594b0e2dfad9fd074095c59059

Download Submit
memory/1668-591-0x000000001BEC0000-0x000000001BED4000-memory.dmp

Filesize
80KB

Download
memory/1668-595-0x00007FFB236A0000-0x00007FFB2408C000-memory.dmp

Filesize
9.9MB

Download
memory/1668-7-0x00000000004C0000-0x0000000000696000-memory.dmp

Filesize
1.8MB

Download
memory/1668-8-0x00007FFB236A0000-0x00007FFB2408C000-memory.dmp

Filesize
9.9MB

Download
memory/1668-79-0x0000000020320000-0x0000000020358000-memory.dmp

Filesize
224KB

Download
memory/1668-9-0x000000001B460000-0x000000001B470000-memory.dmp

Filesize
64KB

Download
memory/1668-382-0x000000001B460000-0x000000001B470000-memory.dmp

Filesize
64KB

Download
memory/1668-337-0x00007FFB236A0000-0x00007FFB2408C000-memory.dmp

Filesize
9.9MB

Download
memory/3832-542-0x00007FFB236A0000-0x00007FFB2408C000-memory.dmp

Filesize
9.9MB

Download
memory/3832-552-0x00007FFB236A0000-0x00007FFB2408C000-memory.dmp

Filesize
9.9MB

Download
memory/3832-545-0x0000000003050000-0x0000000003070000-memory.dmp

Filesize
128KB

Download
memory/3832-544-0x000000001BB50000-0x000000001BB60000-memory.dmp

Filesize
64KB

Download
memory/4412-612-0x00007FFB236A0000-0x00007FFB2408C000-memory.dmp

Filesize
9.9MB

Download
memory/4412-519-0x00007FFB236A0000-0x00007FFB2408C000-memory.dmp

Filesize
9.9MB

Download
memory/4412-606-0x000000001B070000-0x000000001B080000-memory.dmp

Filesize
64KB

Download
memory/4412-457-0x00007FFB236A0000-0x00007FFB2408C000-memory.dmp

Filesize
9.9MB

Download
memory/4412-456-0x0000000000230000-0x0000000000406000-memory.dmp

Filesize
1.8MB

Download