Analysis

  • max time kernel
    7s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/02/2024, 17:44

General

  • Target
    GDLauncher-win-setup.exe
  • Size 73.9MB
  • Sample240222-wa41jsdf79
  • SHA256 9a4744a9ea6fa058995157b052e1d96b7063039ab3971ce5660fe9cc29bea7aa
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GDLauncher-win-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\GDLauncher-win-setup.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1044
    • C:\Windows\SysWOW64\cmd.exe
      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq GDLauncher.exe" | %SYSTEMROOT%\System32\find.exe "GDLauncher.exe"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2992
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq GDLauncher.exe"
        3⤵
        • Enumerates processes with tasklist
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4944
      • C:\Windows\SysWOW64\find.exe
        C:\Windows\System32\find.exe "GDLauncher.exe"
        3⤵
          PID:5116
    • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
      "C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe"
      1⤵
        PID:4068
        • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
          "C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_next" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1568 --field-trial-handle=1780,i,18296855108028806682,12994967130990787039,131072 --disable-features=OutOfBlinkCors,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          2⤵
            PID:3544
          • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
            "C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_next" --mojo-platform-channel-handle=2068 --field-trial-handle=1780,i,18296855108028806682,12994967130990787039,131072 --disable-features=OutOfBlinkCors,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
            2⤵
              PID:3460
            • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
              "C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_next" --app-path="C:\Users\Admin\AppData\Local\Programs\gdlauncher\resources\app.asar" --enable-experimental-web-platform-features --no-sandbox --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2452 --field-trial-handle=1780,i,18296855108028806682,12994967130990787039,131072 --disable-features=OutOfBlinkCors,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
              2⤵
                PID:4904
                • C:\Windows\system32\cmd.exe
                  C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
                  3⤵
                    PID:5404
                    • C:\Windows\System32\reg.exe
                      C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
                      4⤵
                        PID:5476
                  • C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
                    "C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\gdlauncher_next" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=844 --field-trial-handle=1780,i,18296855108028806682,12994967130990787039,131072 --disable-features=OutOfBlinkCors,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                    2⤵
                      PID:2636

                  Network

                        MITRE ATT&CK Enterprise v15

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads

                        7za.exe

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\7za.exe
                        • Size 1.1MB
                        • SHA256 8117e40ee7f824f63373a4f5625bb62749f69159d0c449b3ce2f35aad3b83549
                        • MD5 SHA1 SHA512 SSDEEP

                        D3DCompiler_47.dll

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\D3DCompiler_47.dll
                        • Size 447KB
                        • SHA256 2f2e7f37a95248e694262233df5fd150417bf62634368c9b04afe5b8baaa2967
                        • MD5 SHA1 SHA512 SSDEEP

                        GDLauncher.exe

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
                        • Size 1.6MB
                        • SHA256 0f5d4ae11a85970eea61ff3aef67412d76efe245d39145898369a4f03507bd54
                        • MD5 SHA1 SHA512 SSDEEP

                        GDLauncher.exe

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
                        • Size 589KB
                        • SHA256 06f4dc13b6a9498bd1c16f7e4398c67ce8edad6f9e27e0ff84e164829bef8141
                        • MD5 SHA1 SHA512 SSDEEP

                        GDLauncher.exe

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
                        • Size 703KB
                        • SHA256 f34c223e50317fd1543bf48f69a46de4d83567a661bac56e8a99ca8316fbc53f
                        • MD5 SHA1 SHA512 SSDEEP

                        GDLauncher.exe

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
                        • Size 666KB
                        • SHA256 6339b4036d58f4184db48c684772c2a18f5ff9767c3b97437826b0e82218775e
                        • MD5 SHA1 SHA512 SSDEEP

                        GDLauncher.exe

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
                        • Size 1.9MB
                        • SHA256 b5db421bdb6b9818e3720e63c1c8b20feba28654e5a28b47a0f10cd5ecc68f17
                        • MD5 SHA1 SHA512 SSDEEP

                        GDLauncher.exe

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\GDLauncher.exe
                        • Size 242KB
                        • SHA256 2cf876c23bff586953e40eaa7c2357e9712821110b5663e963e4bb0915fdae7d
                        • MD5 SHA1 SHA512 SSDEEP

                        d3dcompiler_47.dll

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\d3dcompiler_47.dll
                        • Size 314KB
                        • SHA256 7316b2d5fb2de34b0a24de1f112030e1ecd6c3ba686f5cce3d40e6380abb63e3
                        • MD5 SHA1 SHA512 SSDEEP

                        ffmpeg.dll

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\ffmpeg.dll
                        • Size 1.4MB
                        • SHA256 02a03e51c92c6bdfa573e90483ef5956f7e7983a9e6cf3c62ae0e31c096307d1
                        • MD5 SHA1 SHA512 SSDEEP

                        ffmpeg.dll

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\ffmpeg.dll
                        • Size 1.1MB
                        • SHA256 eaa90c7f4e372e8d1f06f9ea596d65e476f984c8fae4617fc6ac58e5ef76993a
                        • MD5 SHA1 SHA512 SSDEEP

                        ffmpeg.dll

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\ffmpeg.dll
                        • Size 872KB
                        • SHA256 6b8b761a45425318ecfed2757d72fc408f8bdbb6a6254c7bf717b61c44f735e6
                        • MD5 SHA1 SHA512 SSDEEP

                        ffmpeg.dll

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\ffmpeg.dll
                        • Size 744KB
                        • SHA256 43eac3a975fcaf25eeafb64cc6b27b8394a447fa5b5ba9d5feace42284dd2564
                        • MD5 SHA1 SHA512 SSDEEP

                        ffmpeg.dll

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\ffmpeg.dll
                        • Size 544KB
                        • SHA256 4bba3833eed5ca95c93a37c77b7eca3c2ce1c7139435e1a6928b432cc3fc6f8b
                        • MD5 SHA1 SHA512 SSDEEP

                        ffmpeg.dll

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\ffmpeg.dll
                        • Size 262KB
                        • SHA256 5791762084aab6f6517aa2cbaa95686ef339c31e3671eea0a16b979a9adb4774
                        • MD5 SHA1 SHA512 SSDEEP

                        icudtl.dat

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\icudtl.dat
                        • Size 1.4MB
                        • SHA256 c6bcd91547f28675e22ee7db26bfddaed1f4cfc6744f2da89dc8f6e5c50d1c28
                        • MD5 SHA1 SHA512 SSDEEP

                        libGLESv2.dll

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\libGLESv2.dll
                        • Size 413KB
                        • SHA256 d55dab6c8e75e4dd2608fee5111b8b7ee2d3618f44570d38555a62befa014bfd
                        • MD5 SHA1 SHA512 SSDEEP

                        libegl.dll

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\libegl.dll
                        • Size 340KB
                        • SHA256 814269b0038341865287c8c6def33857f8ef18b5e72f41f54f09b3b558241bda
                        • MD5 SHA1 SHA512 SSDEEP

                        libglesv2.dll

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\libglesv2.dll
                        • Size 390KB
                        • SHA256 e3a022e1da0595dad85d0d562aa5199d21b26b84e9e2d57811cb97412cc28e73
                        • MD5 SHA1 SHA512 SSDEEP

                        en-US.pak

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\locales\en-US.pak
                        • Size 115KB
                        • SHA256 4221cf9bae4ebea0edc1b0872c24ec708492d4fe13f051d1f806a77fe84ca94d
                        • MD5 SHA1 SHA512 SSDEEP

                        pl.pak

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\locales\pl.pak
                        • Size 144KB
                        • SHA256 6a97c2ce05545607a59df2f0daef5da71058dc1e1685f26263b7110edc431755
                        • MD5 SHA1 SHA512 SSDEEP

                        resources.pak

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\resources.pak
                        • Size 1001KB
                        • SHA256 06ab121e9802a5d90e49c01d3899ab1d6269c82bd5679b89efbdc0097ff9dd95
                        • MD5 SHA1 SHA512 SSDEEP

                        app.asar

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\resources\app.asar
                        • Size 1.1MB
                        • SHA256 1fc8648c8c848f98964f06576e4269c937120ea27a908d29454bee6ebbf688b9
                        • MD5 SHA1 SHA512 SSDEEP

                        v8_context_snapshot.bin

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\v8_context_snapshot.bin
                        • Size 713KB
                        • SHA256 47a8d799b55ba4c7a55498e0876521ad11cc2fa349665b11c715334a77f72b29
                        • MD5 SHA1 SHA512 SSDEEP

                        vk_swiftshader.dll

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\vk_swiftshader.dll
                        • Size 410KB
                        • SHA256 f7ad496182568a6025d5290eedc6bcb7833f78c212f8eea0503ddbc594ca8c0d
                        • MD5 SHA1 SHA512 SSDEEP

                        vk_swiftshader.dll

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\vk_swiftshader.dll
                        • Size 448KB
                        • SHA256 7e7e215e13dd1c717dbf131da3ba426086a03d8c1d5ed884d0f6c63bef0c7676
                        • MD5 SHA1 SHA512 SSDEEP

                        vk_swiftshader.dll

                        • Path C:\Users\Admin\AppData\Local\Programs\gdlauncher\vk_swiftshader.dll
                        • Size 768KB
                        • SHA256 21f440aebfeab21f9b33bd1a7fb185201a9999a71f1c427db1dd5c36e1f527a5
                        • MD5 SHA1 SHA512 SSDEEP

                        f9ba0571-a595-4909-8af0-dddbed0f0b65.tmp.node

                        • Path C:\Users\Admin\AppData\Local\Temp\f9ba0571-a595-4909-8af0-dddbed0f0b65.tmp.node
                        • Size 495KB
                        • SHA256 a8ae4e1f6ff70c724282b5d468ac463012e9b0fd5b52997116946fdb2e2ac34f
                        • MD5 SHA1 SHA512 SSDEEP

                        fc13310b-e4c1-4c66-ac9c-6e5c2337332e.tmp.node

                        • Path C:\Users\Admin\AppData\Local\Temp\fc13310b-e4c1-4c66-ac9c-6e5c2337332e.tmp.node
                        • Size 281KB
                        • SHA256 bccc1ea670ddf3560352327eac402e7a99b5a585bd1d2af02bff8111b6ee9738
                        • MD5 SHA1 SHA512 SSDEEP

                        GDLauncher.exe

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\GDLauncher.exe
                        • Size 535KB
                        • SHA256 6899a4603230cad53faec822b471e449fec6551d3d9b2859af1c89734d62d5b2
                        • MD5 SHA1 SHA512 SSDEEP

                        LICENSE.electron.txt

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\LICENSE.electron.txt
                        • Size 1KB
                        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                        • MD5 SHA1 SHA512

                        LICENSES.chromium.html

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\LICENSES.chromium.html
                        • Size 413KB
                        • SHA256 0f3e1e080c3040a1f3aa977e2ed71e5837382b401a21978fae3c7c35f2a84f63
                        • MD5 SHA1 SHA512 SSDEEP

                        chrome_100_percent.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\chrome_100_percent.pak
                        • Size 125KB
                        • SHA256 d2c299095dbbd3a3cb2b4639e5b3bd389c691397ffd1a681e586f2cfe0e2ab88
                        • MD5 SHA1 SHA512 SSDEEP

                        chrome_200_percent.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\chrome_200_percent.pak
                        • Size 174KB
                        • SHA256 f49abd81e93a05c1e53c1201a5d3a12f2724f52b6971806c8306b512bf66aa25
                        • MD5 SHA1 SHA512 SSDEEP

                        concrt140.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\concrt140.dll
                        • Size 324KB
                        • SHA256 d404b49c25cc76dc4c86e1d82fc23799482f6509e85a73ed8177efc320ec0195
                        • MD5 SHA1 SHA512 SSDEEP

                        d3dcompiler_47.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\d3dcompiler_47.dll
                        • Size 1.4MB
                        • SHA256 b747d77120f112602cc7bbf899197bc21ab6f7d2280fb2e6cfa0c558001bc30c
                        • MD5 SHA1 SHA512 SSDEEP

                        ffmpeg.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\ffmpeg.dll
                        • Size 1.5MB
                        • SHA256 2c2058dd0025458d81ae543b73c331b0b0192cdf7feadb6af6492e1ee9c8d267
                        • MD5 SHA1 SHA512 SSDEEP

                        icudtl.dat

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\icudtl.dat
                        • Size 476KB
                        • SHA256 065881dd33f75898e718d481597f2536a9074b546d14a57e2ef82cafaa6579fe
                        • MD5 SHA1 SHA512 SSDEEP

                        info-about-msvcredist.txt

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\info-about-msvcredist.txt
                        • Size 393B
                        • SHA256 9329f7579fd8ce5f0503c2458ec49f1f42cf587559d0902f9954e3cf170f0a34
                        • MD5 SHA1 SHA512

                        libEGL.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\libEGL.dll
                        • Size 460KB
                        • SHA256 44febbc02e69d492d39e2cd5d025bbf0d81b1889b37725bd700cc0c21e5ba22a
                        • MD5 SHA1 SHA512 SSDEEP

                        libGLESv2.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\libGLESv2.dll
                        • Size 399KB
                        • SHA256 e43fc8d684550eb13d3278e52531fa962e870fae65e68ca4d6a883f52866376a
                        • MD5 SHA1 SHA512 SSDEEP

                        af.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\af.pak
                        • Size 125KB
                        • SHA256 9e0aeb9d58fecc27d43e39c8c433c444b2ce773cc5d510fc676e0ebbcab4bddf
                        • MD5 SHA1 SHA512 SSDEEP

                        am.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\am.pak
                        • Size 105KB
                        • SHA256 6076dedfcae1f731f53c1a8982f3f1fdd1a99d2c4fcd22d0b070a64b49ef6304
                        • MD5 SHA1 SHA512 SSDEEP

                        ar.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ar.pak
                        • Size 207KB
                        • SHA256 ac44c459f86c577f1f510c0b78a8317127522f0d2f80734b6c9ab338d637d4df
                        • MD5 SHA1 SHA512 SSDEEP

                        bg.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\bg.pak
                        • Size 114KB
                        • SHA256 247001d5fa1d561a904d2861d1fbf8af9ee3eef1270337f6af8a80536a1b67ea
                        • MD5 SHA1 SHA512 SSDEEP

                        bn.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\bn.pak
                        • Size 206KB
                        • SHA256 a27c0a03329e33c4307598d9fd7013300bbc2c787180f30e2923888e8cf16496
                        • MD5 SHA1 SHA512 SSDEEP

                        ca.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ca.pak
                        • Size 140KB
                        • SHA256 799ac8c1fa9cdd6a0c2e95057c3fc6b54112fe2aebbb1a159d9dac9d1583ca62
                        • MD5 SHA1 SHA512 SSDEEP

                        cs.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\cs.pak
                        • Size 143KB
                        • SHA256 c06ac5459d735f7ac7ed352d9f100c17749fa2a277af69c25e7afe0b6954d3c0
                        • MD5 SHA1 SHA512 SSDEEP

                        da.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\da.pak
                        • Size 130KB
                        • SHA256 6ee55e456d12246a4ea677c30be952adfb3ab57aca428516e35056e41e7828b5
                        • MD5 SHA1 SHA512 SSDEEP

                        de.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\de.pak
                        • Size 30KB
                        • SHA256 b2b42d623db5125ebf94f4a865bbfa236fcde06728bb26f128959b4ac0de528d
                        • MD5 SHA1 SHA512 SSDEEP

                        el.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\el.pak
                        • Size 10KB
                        • SHA256 db62855fa33f216a3f323ef91b2983732c318ebf5b1a63d3c814c6e8efb5fe51
                        • MD5 SHA1 SHA512 SSDEEP

                        en-GB.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\en-GB.pak
                        • Size 81KB
                        • SHA256 aeb7a61a51c30343ab2ddcb59a99029c48749ecc6fb3fbbcfed61f442eeb8c23
                        • MD5 SHA1 SHA512 SSDEEP

                        en-US.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\en-US.pak
                        • Size 64KB
                        • SHA256 6dba7babe2ecb0172e484121097308ad74600f6761ccd9768d88fae8d63c6755
                        • MD5 SHA1 SHA512 SSDEEP

                        es-419.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\es-419.pak
                        • Size 139KB
                        • SHA256 e49a13bee7544583d88301349821d21af779ec2ebfca39ee6a129897b20dbbd0
                        • MD5 SHA1 SHA512 SSDEEP

                        es.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\es.pak
                        • Size 57KB
                        • SHA256 79b4e8a7dad61be451d79179bd2dbd06a1ef8b1503bbf1251a401a8ae43e1b6a
                        • MD5 SHA1 SHA512 SSDEEP

                        et.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\et.pak
                        • Size 33KB
                        • SHA256 68d6446e5a3840af0da180a4616ae22e1eed8865c470386669d8add2fc63b8c7
                        • MD5 SHA1 SHA512 SSDEEP

                        fa.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\fa.pak
                        • Size 64KB
                        • SHA256 708f6d8de065c2bef8952ea7a350724017391b0a399328f5d965828f4c8cb440
                        • MD5 SHA1 SHA512 SSDEEP

                        fi.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\fi.pak
                        • Size 59KB
                        • SHA256 95b2630a5d399437455b3d48a5f909c90be7f486edd2e9280f04fe46b7113e0d
                        • MD5 SHA1 SHA512 SSDEEP

                        fil.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\fil.pak
                        • Size 144KB
                        • SHA256 945c0160938c3bcecda6659a411b33cd55dfac18814bed88575bfd100c53d42e
                        • MD5 SHA1 SHA512 SSDEEP

                        fr.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\fr.pak
                        • Size 149KB
                        • SHA256 d641d9d73262ca65a613ee0395204435d6830316dd551f8992407ae77ead4b64
                        • MD5 SHA1 SHA512 SSDEEP

                        gu.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\gu.pak
                        • Size 4KB
                        • SHA256 31c3fc79d4f563ac2d91324f185c23325051a4746b99252231656aedb617b2c6
                        • MD5 SHA1 SHA512 SSDEEP

                        he.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\he.pak
                        • Size 6KB
                        • SHA256 dc810a7101f15e968fcbbba1e2e98f2af2b723fb58ff77641fadaa1caa79349b
                        • MD5 SHA1 SHA512 SSDEEP

                        hi.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\hi.pak
                        • Size 15KB
                        • SHA256 314fb82a2bbb0c3130f64b9e2b34c48f54e4b0140c182dbb7f8978d83c91a8f5
                        • MD5 SHA1 SHA512 SSDEEP

                        hr.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\hr.pak
                        • Size 137KB
                        • SHA256 3d01f9d2c51efa0c0d8d720dd832493b1b87d2429970396c42cee2199e7bef40
                        • MD5 SHA1 SHA512 SSDEEP

                        hu.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\hu.pak
                        • Size 149KB
                        • SHA256 6edcdaf17483c4b7b74d9c728c3f38d9e4704bfbdb618b578c7ccb6bbe6e824f
                        • MD5 SHA1 SHA512 SSDEEP

                        id.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\id.pak
                        • Size 124KB
                        • SHA256 fa38d911dec71800d33802441412f20133e960bb316c79161bdc7f78ea1af3d7
                        • MD5 SHA1 SHA512 SSDEEP

                        it.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\it.pak
                        • Size 138KB
                        • SHA256 75b37965b88933ba32119ebdd13cb98c54300b1e1e312080947eed6a94fc70b0
                        • MD5 SHA1 SHA512 SSDEEP

                        ja.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ja.pak
                        • Size 14KB
                        • SHA256 34573289e4027e63bc4091f6c69a2bc8d59922d5991050803779f0b01bc270a5
                        • MD5 SHA1 SHA512 SSDEEP

                        kn.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\kn.pak
                        • Size 319KB
                        • SHA256 407599a388bc151ccd2561181ea90ff620f4cb5c767317af8ca4748927ba7f35
                        • MD5 SHA1 SHA512 SSDEEP

                        ko.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ko.pak
                        • Size 138KB
                        • SHA256 de71f906636d2a8f5833a22e92b61161182c53e233b75b302dbe061ed57e9bdc
                        • MD5 SHA1 SHA512 SSDEEP

                        lt.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\lt.pak
                        • Size 151KB
                        • SHA256 ec70edca70373390f028aa751a74057fb1c2c583c310492723a228c863007c47
                        • MD5 SHA1 SHA512 SSDEEP

                        lv.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\lv.pak
                        • Size 149KB
                        • SHA256 026e6a4ea0fd11c07375f0532a0756bffef585889a71f33243a116c462b0c684
                        • MD5 SHA1 SHA512 SSDEEP

                        ml.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ml.pak
                        • Size 337KB
                        • SHA256 01a0e2f809fed45b9b67831202d297c3221077fa2dd84f3b635ab33016a07577
                        • MD5 SHA1 SHA512 SSDEEP

                        mr.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\mr.pak
                        • Size 1KB
                        • SHA256 ded40d713fe05aaceec7a880f882de1046ff9708940cff05e1de91be0d6e856e
                        • MD5 SHA1 SHA512

                        ms.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ms.pak
                        • Size 21KB
                        • SHA256 f6e70fa445f5ba1b967c84f670941620c8919891b6983f6d088b7fd723161d92
                        • MD5 SHA1 SHA512 SSDEEP

                        nb.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\nb.pak
                        • Size 44KB
                        • SHA256 27c63c1b34d9333cb700f490a38e1b5bf9ec8b73725b226b6fbed61b1985d410
                        • MD5 SHA1 SHA512 SSDEEP

                        nl.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\nl.pak
                        • Size 131KB
                        • SHA256 7a7be29044bf2fa9459a90dcce12ed531931660ba680dec8f32ad8a3364d973e
                        • MD5 SHA1 SHA512 SSDEEP

                        pt-BR.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\pt-BR.pak
                        • Size 137KB
                        • SHA256 c17ed07165ec47de5acdfa7e4783af4b417843e5f232e9f38ce02138c8bd1742
                        • MD5 SHA1 SHA512 SSDEEP

                        pt-PT.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\pt-PT.pak
                        • Size 138KB
                        • SHA256 e2e84e23275190865c685e0712530245e35dc63ff82c4e854068494192917f3e
                        • MD5 SHA1 SHA512 SSDEEP

                        ro.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ro.pak
                        • Size 141KB
                        • SHA256 b9fee8754a5307751f197d1968dd02e163dba30f09a36c72f88b63b4ee5bcd26
                        • MD5 SHA1 SHA512 SSDEEP

                        ru.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ru.pak
                        • Size 225KB
                        • SHA256 3906f069e6e2a3a0235826e9382624e7a4cfba309f00bbd0963ff0c9f2c179fa
                        • MD5 SHA1 SHA512 SSDEEP

                        sk.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\sk.pak
                        • Size 146KB
                        • SHA256 e6509f7a6c6b9912f2875c7efa34434ab9562df3cdcaf0546b6370d594ca46fb
                        • MD5 SHA1 SHA512 SSDEEP

                        sl.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\sl.pak
                        • Size 139KB
                        • SHA256 ef205cf8911a96d772711675e75bc8df5866ce0d9d44ebb110bc07e4f340ff65
                        • MD5 SHA1 SHA512 SSDEEP

                        sr.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\sr.pak
                        • Size 213KB
                        • SHA256 c3b5c6965affb7f30dcdb5fdb485767e83f3b5d694865a677783c64e3b84934d
                        • MD5 SHA1 SHA512 SSDEEP

                        sv.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\sv.pak
                        • Size 127KB
                        • SHA256 080ce56662a0a32a4164ba88f9c5081d7c43dc1908412368a70e789e1adcbf66
                        • MD5 SHA1 SHA512 SSDEEP

                        sw.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\sw.pak
                        • Size 133KB
                        • SHA256 8c58adbff7d672154c6f399ea29b549005460d80679e1f6cf997d95732857c30
                        • MD5 SHA1 SHA512 SSDEEP

                        ta.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ta.pak
                        • Size 335KB
                        • SHA256 5cabdecd2a89bd97782c13d9f5b24550ea00b28750cdb26a7843af7e75e34b22
                        • MD5 SHA1 SHA512 SSDEEP

                        te.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\te.pak
                        • Size 312KB
                        • SHA256 9889b8d2e5f5fc5ed199831954af7b05028ec7a68f448b19ba74d91b97c223d6
                        • MD5 SHA1 SHA512 SSDEEP

                        th.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\th.pak
                        • Size 265KB
                        • SHA256 c666359fc9fa137f6d7f868ccef01dac8701b457bb6bb51fcd581185d4bc8780
                        • MD5 SHA1 SHA512 SSDEEP

                        tr.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\tr.pak
                        • Size 135KB
                        • SHA256 84f08423fc516988761517511d36bf5d3428866965addbf3ef4399a80f8278e8
                        • MD5 SHA1 SHA512 SSDEEP

                        uk.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\uk.pak
                        • Size 227KB
                        • SHA256 d1e07ac8b6a6ce53f06c66241d44407f98a1940259883e143a574f28a2ac170f
                        • MD5 SHA1 SHA512 SSDEEP

                        ur.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\ur.pak
                        • Size 199KB
                        • SHA256 34d46d28af3012bb84767a418957f12d877789b88a13ea29b047c7926abafb41
                        • MD5 SHA1 SHA512 SSDEEP

                        vi.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\vi.pak
                        • Size 161KB
                        • SHA256 4c4e69af3d7f7012e3cb19ba386fc69edd0c87ccd9be326dd6db902401d123f3
                        • MD5 SHA1 SHA512 SSDEEP

                        zh-CN.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\zh-CN.pak
                        • Size 116KB
                        • SHA256 bf3fb791392d8044c2cb3552cc974d95adbfc1548eac617c9d2a981505fb89e1
                        • MD5 SHA1 SHA512 SSDEEP

                        zh-TW.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\locales\zh-TW.pak
                        • Size 115KB
                        • SHA256 2a674d423322d1772e97a627f1e291efba5f12b7efd0f174cdc99d1b1b376988
                        • MD5 SHA1 SHA512 SSDEEP

                        msvcp140.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\msvcp140.dll
                        • Size 335KB
                        • SHA256 f2ad53034e473e7473f31c9e54b4f54d1ad3b3ae02d8afc32eef39f03b03b9cb
                        • MD5 SHA1 SHA512 SSDEEP

                        msvcp140_1.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\msvcp140_1.dll
                        • Size 30KB
                        • SHA256 5e627fac479f72363075824423d74d0a5d100bb69377f2a8c0942e12099af700
                        • MD5 SHA1 SHA512 SSDEEP

                        msvcp140_2.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\msvcp140_2.dll
                        • Size 201KB
                        • SHA256 aa965bc8429994c97bc2498ed8051a4101f7987a376924b105de5f7915e42a48
                        • MD5 SHA1 SHA512 SSDEEP

                        resources.pak

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\resources.pak
                        • Size 232KB
                        • SHA256 6ad9ebae9b81a882bd84a47ded58e2d29ddbbfeb1ef848d2412e52ac24030c9b
                        • MD5 SHA1 SHA512 SSDEEP

                        app-update.yml

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\resources\app-update.yml
                        • Size 94B
                        • SHA256 54f8faa0210764d255e9e3e812c7eba670e3b4b88892f44719ce76d19c96d728
                        • MD5 SHA1 SHA512

                        app.asar

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\resources\app.asar
                        • Size 747KB
                        • SHA256 b00f8077ec00065aa084b06d274583b86c1f0a7a2a046457846fdd890c970b01
                        • MD5 SHA1 SHA512 SSDEEP

                        elevate.exe

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\resources\elevate.exe
                        • Size 105KB
                        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
                        • MD5 SHA1 SHA512 SSDEEP

                        snapshot_blob.bin

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\snapshot_blob.bin
                        • Size 265KB
                        • SHA256 9eadd4d59c2b135e32f3e8766d4feda642c903e51aa1ace5e0e5786f2579aa78
                        • MD5 SHA1 SHA512 SSDEEP

                        v8_context_snapshot.bin

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\v8_context_snapshot.bin
                        • Size 219KB
                        • SHA256 f55787d23172bbdd24ffbefb4f70df9105579ff3d84392aeb2dba6feab578fe9
                        • MD5 SHA1 SHA512 SSDEEP

                        vccorlib140.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\vccorlib140.dll
                        • Size 316KB
                        • SHA256 e1c210936bb4e8328879b7701374e51a05bf76e5dea8f2ddddafa25f03a820f1
                        • MD5 SHA1 SHA512 SSDEEP

                        vcruntime140.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\vcruntime140.dll
                        • Size 83KB
                        • SHA256 2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c
                        • MD5 SHA1 SHA512 SSDEEP

                        vk_swiftshader.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\vk_swiftshader.dll
                        • Size 293KB
                        • SHA256 d43d7e1b3272b5f8389f0640fd82b246af7c2c4b6ec4853862c812309d73e30b
                        • MD5 SHA1 SHA512 SSDEEP

                        vk_swiftshader_icd.json

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\vk_swiftshader_icd.json
                        • Size 106B
                        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                        • MD5 SHA1 SHA512

                        vulkan-1.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\7z-out\vulkan-1.dll
                        • Size 198KB
                        • SHA256 85f0a8327bfa1b8ee64fb4b7179c0e49dc8885673619c29fbd8b08f7ccf45e24
                        • MD5 SHA1 SHA512 SSDEEP

                        SpiderBanner.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\SpiderBanner.dll
                        • Size 9KB
                        • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
                        • MD5 SHA1 SHA512 SSDEEP

                        StdUtils.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\StdUtils.dll
                        • Size 100KB
                        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                        • MD5 SHA1 SHA512 SSDEEP

                        System.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\System.dll
                        • Size 12KB
                        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                        • MD5 SHA1 SHA512 SSDEEP

                        WinShell.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\WinShell.dll
                        • Size 3KB
                        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                        • MD5 SHA1 SHA512

                        nsExec.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\nsExec.dll
                        • Size 6KB
                        • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                        • MD5 SHA1 SHA512 SSDEEP

                        nsis7z.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\nsis7z.dll
                        • Size 424KB
                        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                        • MD5 SHA1 SHA512 SSDEEP

                        nsis7z.dll

                        • Path C:\Users\Admin\AppData\Local\Temp\nsd6802.tmp\nsis7z.dll
                        • Size 161KB
                        • SHA256 4d3445162352bd926d731051d3244e350ea3b30c4bd79e10e37a8174b6e1e026
                        • MD5 SHA1 SHA512 SSDEEP

                        default.dic

                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                        • Size 2B
                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                        • MD5 SHA1 SHA512

                        2223800b-a61b-434a-a673-60b54acbfbbf.tmp

                        • Path C:\Users\Admin\AppData\Roaming\gdlauncher_next\2223800b-a61b-434a-a673-60b54acbfbbf.tmp
                        • Size 57B
                        • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
                        • MD5 SHA1 SHA512

                        CURRENT

                        • Path C:\Users\Admin\AppData\Roaming\gdlauncher_next\IndexedDB\file__0.indexeddb.leveldb\CURRENT
                        • Size 16B
                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                        • MD5 SHA1 SHA512

                        Network Persistent State

                        • Path C:\Users\Admin\AppData\Roaming\gdlauncher_next\Network\Network Persistent State
                        • Size 1KB
                        • SHA256 1f534933c0dd6c5499fec3c12efa1799a7ef1c571fcfc6015e4063d1ba792e4e
                        • MD5 SHA1 SHA512

                        Network Persistent State~RFe58a5c1.TMP

                        • Path C:\Users\Admin\AppData\Roaming\gdlauncher_next\Network\Network Persistent State~RFe58a5c1.TMP
                        • Size 59B
                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                        • MD5 SHA1 SHA512

                        memory/2636-953-0x0000019315410000-0x0000019315411000-memory.dmp

                        memory/2636-952-0x0000019315410000-0x0000019315411000-memory.dmp

                        memory/2636-954-0x0000019315410000-0x0000019315411000-memory.dmp

                        memory/2636-964-0x0000019315410000-0x0000019315411000-memory.dmp

                        memory/2636-963-0x0000019315410000-0x0000019315411000-memory.dmp

                        memory/2636-962-0x0000019315410000-0x0000019315411000-memory.dmp

                        memory/2636-961-0x0000019315410000-0x0000019315411000-memory.dmp

                        memory/2636-960-0x0000019315410000-0x0000019315411000-memory.dmp

                        memory/2636-959-0x0000019315410000-0x0000019315411000-memory.dmp

                        memory/2636-958-0x0000019315410000-0x0000019315411000-memory.dmp

                        memory/3544-938-0x00000198CC230000-0x00000198CC2DC000-memory.dmp

                        memory/3544-937-0x00000198CC230000-0x00000198CC2DC000-memory.dmp

                        memory/3544-649-0x00007FFD26BC0000-0x00007FFD26BC1000-memory.dmp