Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    73s
  • max time network
    198s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/03/2024, 20:30

General

  • Target

    vlc-3.0.20-win32.exe

  • Size

    40.9MB

  • MD5

    173d4315cdd33e8a8aba8d0322554def

  • SHA1

    512092bbadfadd550f5bb5bcbe95eb107b342d29

  • SHA256

    e197583514fa600f24a3b88cf6b24102c5c09dc39bad6ac9626bd55f23ff9def

  • SHA512

    6b4174171188a1564bf9c0021f0a394671b16d8a81c398aabaad2435b0ae5b37acc4bd5942e96af871bd0a6f9edf93d396c36f59c1648647bf4763533644af83

  • SSDEEP

    786432:lwDuqKzop24fg049AN1rlQZRAqKVZK8phpGEAVExpSOO5bBTkfkIl/:lsuqKzop24fZiATxwAqOHWEXSOGBTa

Score
4/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 46 IoCs
  • Suspicious use of FindShellTrayWindow 37 IoCs
  • Suspicious use of SendNotifyMessage 34 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\vlc-3.0.20-win32.exe
    "C:\Users\Admin\AppData\Local\Temp\vlc-3.0.20-win32.exe"
    1⤵
    • Drops file in Program Files directory
    • Loads dropped DLL
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    PID:2380
    • C:\Program Files (x86)\VideoLAN\VLC\vlc-cache-gen.exe
      "C:\Program Files (x86)\VideoLAN\VLC\vlc-cache-gen.exe" C:\Program Files (x86)\VideoLAN\VLC\plugins
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2852
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe" "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe"
      2⤵
        PID:2596
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Enumerates system info in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:796
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6ed9758,0x7fef6ed9768,0x7fef6ed9778
        2⤵
          PID:1716
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1160 --field-trial-handle=1276,i,12451143865783412843,11595238991887308674,131072 /prefetch:2
          2⤵
            PID:2028
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1492 --field-trial-handle=1276,i,12451143865783412843,11595238991887308674,131072 /prefetch:8
            2⤵
              PID:1300
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1572 --field-trial-handle=1276,i,12451143865783412843,11595238991887308674,131072 /prefetch:8
              2⤵
                PID:844
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2176 --field-trial-handle=1276,i,12451143865783412843,11595238991887308674,131072 /prefetch:1
                2⤵
                  PID:2072
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2184 --field-trial-handle=1276,i,12451143865783412843,11595238991887308674,131072 /prefetch:1
                  2⤵
                    PID:2128
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2412 --field-trial-handle=1276,i,12451143865783412843,11595238991887308674,131072 /prefetch:2
                    2⤵
                      PID:2012
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=2496 --field-trial-handle=1276,i,12451143865783412843,11595238991887308674,131072 /prefetch:2
                      2⤵
                        PID:768
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=3380 --field-trial-handle=1276,i,12451143865783412843,11595238991887308674,131072 /prefetch:1
                        2⤵
                          PID:1148
                      • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                        "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                        1⤵
                          PID:1332
                        • C:\Windows\explorer.exe
                          C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
                          1⤵
                            PID:2536
                            • C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
                              "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe"
                              2⤵
                              • Executes dropped EXE
                              • Suspicious behavior: AddClipboardFormatListener
                              • Suspicious behavior: GetForegroundWindowSpam
                              • Suspicious use of FindShellTrayWindow
                              • Suspicious use of SendNotifyMessage
                              • Suspicious use of SetWindowsHookEx
                              PID:1964
                          • C:\Windows\system32\taskmgr.exe
                            "C:\Windows\system32\taskmgr.exe" /4
                            1⤵
                              PID:1296
                            • C:\Windows\explorer.exe
                              "C:\Windows\explorer.exe"
                              1⤵
                                PID:2892
                              • C:\Windows\system32\AUDIODG.EXE
                                C:\Windows\system32\AUDIODG.EXE 0x52c
                                1⤵
                                  PID:3012

                                Network

                                MITRE ATT&CK Enterprise v15

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                • C:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll

                                  Filesize

                                  1.3MB

                                  MD5

                                  bea3d79e7821ac9506c48b37bcf217a0

                                  SHA1

                                  3a0e71c02fe50f6f6fd36c349281ae2db9927fea

                                  SHA256

                                  9bae46a43b5b4b68213beafcb5674f97f84aa89e4988079f0efb20d0c076de9d

                                  SHA512

                                  6e1a5a059bf474b1624f2ad541d20640eb7f033358f1e0e22cd45d62cb60928df2d194323ae512ff51bace71c04ba877c0131b4df69332cc45f20b113dc3f6dc

                                • C:\Program Files (x86)\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo

                                  Filesize

                                  831KB

                                  MD5

                                  bbe76d1ac5f20a0bf6ba7cdb3624b1e2

                                  SHA1

                                  c78ae9b700ba77e8f69a1bd8c17656f843f4e551

                                  SHA256

                                  25bf0fe95a0e02257958699d9e7ee99984c17d5b027b5d10f4246932abc5defb

                                  SHA512

                                  85786fdde4b693eb8bebb1c52706b0ad11bcc0279742321d08e158cf98dcf789659592e0335fae0c9b8ba529884d8d9c7e7e4a6cde6979d590700cd4cc5cc1fd

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll

                                  Filesize

                                  479KB

                                  MD5

                                  2232e11aa81f0b37516a2024f2b373e1

                                  SHA1

                                  aa8571040bd94878c72d27452a3e1ccb214e7323

                                  SHA256

                                  fb559dbac4f68a43193eafe6d15fc3b15a78f899ca8de6a8ebe17a6536a30581

                                  SHA512

                                  58d8f171cb6c820b98e8e5caa3c4b78baeaaacb6644e627467115c534ecd62f779b1c662a5c3c4252afbfb7a952df9d0d59e4dc0e64799f2859ec3fd9876ecd2

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll

                                  Filesize

                                  226KB

                                  MD5

                                  fd922eaee9e944538e363323c9abb74f

                                  SHA1

                                  ba704aad496032d79593ceceecce4e73cbbac9a1

                                  SHA256

                                  de2305c2de9d8ef5aedf5a8e826c554908f7a554ed190b36be297b7b440bf666

                                  SHA512

                                  d22375987a4b0452ddee9edd1dd63aae2ee266c7cc9d0a0a2729db0edbc3abf5e028c62c498b9935151954e33ae3f9e8d116979741e6d04f4a15cfbca748e5d4

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdcp_plugin.dll

                                  Filesize

                                  174KB

                                  MD5

                                  76609c5574ebd27be35cf4664636f10a

                                  SHA1

                                  b6965f9522c871511a80c0520aa937e32e7efd7a

                                  SHA256

                                  1ef5715dac783be3d79c9d968806773b30144d06f7b5fe74f0f790616c5fbdb6

                                  SHA512

                                  12f6897ec8495068a858ca48835f084cce52280df300e357928c7e559f15a4f96b25666cd7d9123f5d07e83a8d24d5e61a63aec3a804bb1cb6b4d34e2c93cb2c

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll

                                  Filesize

                                  102KB

                                  MD5

                                  183f842a9fd9cb606dc2a613aa38ddfe

                                  SHA1

                                  65b75e9dd0e3a407dfce93afaede8634b428dea2

                                  SHA256

                                  b4ebafb1eda7a05b63dbaeba60535bcda234964ece38bbb5a49b15cc7824f80a

                                  SHA512

                                  9e06389bf98c3bcc6b6acfcdca5dba6724f8571281979a065c8caee67db96ab196895c556d53dd35b67580f8583c65f0a041b531e37191e63572bf6e87011906

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll

                                  Filesize

                                  104KB

                                  MD5

                                  7bc95ffbb53f8cce3af20bc7e3503066

                                  SHA1

                                  0cca766209efa7210ff255d32035c192984cafd8

                                  SHA256

                                  b3c04656eca5453aa1b5c66c9710e5b78b0e8d47797817ba22db4363b16d2050

                                  SHA512

                                  39a8abdd588249cf40f1220bb9c811b6a6667e8de81205075950a7e811d38aab94b4d4092ce6bc3395f5acc232bea0d07393368703a323fdf6d3e4869560da70

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll

                                  Filesize

                                  114KB

                                  MD5

                                  44b56956e3c86ec37cafdb29d7596449

                                  SHA1

                                  46984c0be568e975ef142a4c9841b60850560d71

                                  SHA256

                                  f33e92a339d9d4b2fab10eef9f58643ebe3076dfe3c48c5b8f8a7d29bdf1cc02

                                  SHA512

                                  74bda9fc17163aba93b7ba7eadb7efe2db73d1d431311c1162fd99e5070c0de46a3a0dbe7240ecc867785fbf8bd4a5c0287a5329cecfcad7142e03efb656829b

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll

                                  Filesize

                                  89KB

                                  MD5

                                  fdeb8585b6d242703f87b5d3465953c3

                                  SHA1

                                  8334f7c7b3f1109c46b4353ab1ee81ad4710f2b7

                                  SHA256

                                  fe3c9c71bb34a3faa290cfad4704367f9bd769d817f0edd2fc04841b52e4e18b

                                  SHA512

                                  e113f64bd3e4bf93d505105da80fc31d807d1a52b2ad70dbf495cf525dc738dcb258c309113bd466c9727c83c0bdf207560f5ebe45df5527203442a66d72942f

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libftp_plugin.dll

                                  Filesize

                                  120KB

                                  MD5

                                  46d258c6e84b0088c6db32e470c59e4a

                                  SHA1

                                  f073081fa7f33f4608a88408bf4d37b7722d2b85

                                  SHA256

                                  77e5ae3690bfb29385ff80f69acc0e1b949844b962c589abc68e36c970ea151c

                                  SHA512

                                  6789cd2edddd0a05f06a768180a1ccfe0c115a77c5ab4392709370aaf921fd4563a7a9879d32b543f711d8606cd4e47aad95328a27827c6441f7a2d02e2371d3

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libhttps_plugin.dll

                                  Filesize

                                  91KB

                                  MD5

                                  1f3e0ab9ef7b5dc753ec38d7bbe4022e

                                  SHA1

                                  b432ae5c8ec8108fe2ca4a298bfa9d22719c609b

                                  SHA256

                                  866744f254d5973fc0474f60a3c1f4401b33d0e5a29ab9b0cfdc527f045da12a

                                  SHA512

                                  fdfdda69fd7713b80a03bcbfc890a23347fba7ee7b5411feb07e249e4241c308c813ad7c02dd42ed739505b20860e37be9fa16d634462a755d0af9157f7b8a76

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll

                                  Filesize

                                  65KB

                                  MD5

                                  d025277f30bb47b715f84097a611c962

                                  SHA1

                                  91884f2c38a7450ba2329990d662bc0e347ffbbf

                                  SHA256

                                  9b2b41062291a4ce25c0ca89d462e5096760c7274165d9de0cc9a5cded0bb9ca

                                  SHA512

                                  ea78971a8e08ad4e840763e5c29267e2b5d7ee25e8368bc60e3a1a19ca6746fe4d84228ca35a8104f38b84d97cb184fe6890b708243c9a83e6153ee99d66f61a

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\access\liblive555_plugin.dll

                                  Filesize

                                  97KB

                                  MD5

                                  0bee2e1f2748eac27a43648767e20b94

                                  SHA1

                                  f5b028763f2132cac2581c943b97c992ec2de129

                                  SHA256

                                  8e3ef546a2cf451ac612427575fc7528ddc48de69d677365ed8059c4a4e43768

                                  SHA512

                                  8f50679545eecc081559689448ac22f70f7f83d51947575e02110258beb785dce7c02f944c358999a768eac06078f7d294ba77603405a54e49d7b18cd4f9eb03

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libnfs_plugin.dll

                                  Filesize

                                  110KB

                                  MD5

                                  0b458b9176d258ed6aa082cb2cc1fd75

                                  SHA1

                                  c2b69f0c84c267d2418d3d1b8ef906d084ed527e

                                  SHA256

                                  1fea71360208f1fe15d9407c44b36512f5ec769603ebf621e6f1ac2a1277950e

                                  SHA512

                                  6f0441759722db00a7cb118529412919cfe22126e15ccd75dbbdcb9dfe014da00af66dd97d282823b5004a3aee97c1a4e17ff609ddc7c8ef489727610bb9e7d0

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\access\librist_plugin.dll

                                  Filesize

                                  82KB

                                  MD5

                                  6091ee43fc64a0990e429159b83459f8

                                  SHA1

                                  8e4c3a73b3b8c0320496620fab04d01ada32c4df

                                  SHA256

                                  16760c2d00c4ceb4479e72ec274dddccbaffcbafc238bb2a9a91770e40bdcec5

                                  SHA512

                                  22bdb00bba894cb646056ecdcc6261a85a35a1dbc7fe660ce940c3f2aa16a3ac5d575cc72ea1af1fc3cfdbd9b118ed052c53bb6d25313d2046a94e80c492a5f9

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll

                                  Filesize

                                  126KB

                                  MD5

                                  beb490a858587380a6a5b6f6ef448bb4

                                  SHA1

                                  602316af3ec54e7eb1929b315f38e0599869ffa7

                                  SHA256

                                  03a980a87cd54383724a67d3f718406efcacd76caf08c276286b21d9a74b49c8

                                  SHA512

                                  5f71f88cc935330c886805f7d87cfa4a9786a7b684206a0363410303fafecd65129cb04d616bfaa6ea2a4f2f6af96484926d629b72c678ba98f7c2a1c8f26139

                                • C:\Program Files (x86)\VideoLAN\VLC\plugins\plugins.dat.2852

                                  Filesize

                                  307KB

                                  MD5

                                  f77262ca89f304d3402cdf776be953ec

                                  SHA1

                                  b167419a8f449e7e6a63bb4043d3d11b5dc3daa5

                                  SHA256

                                  38cf4711f6df422d71aab9b5f6e944cdbb4b97ed7b27a05d537ec2c5c8c6c8cb

                                  SHA512

                                  38b727cd970d3fe419c3250f68cdb9e3403dfd9ef70871682c5e24a20ff4c7f74600500ee5176a56ffa4b48bcd7e11ddf0a65ae3b056a1e049e6b8f762f766d1

                                • C:\Program Files (x86)\VideoLAN\VLC\uninstall.log

                                  Filesize

                                  21KB

                                  MD5

                                  2919ed2afc1c36b6df363cf0076c6eed

                                  SHA1

                                  85ebade8abc5af3737c07a68316b20232a97769f

                                  SHA256

                                  8d5516220abb5309d96f0344425d8606758bfe2ebb60dd946f84ba20683a97ca

                                  SHA512

                                  978a9aa5f285357250e7cf3792432a3b66ddb7dd95437d13846f66211aa0da572f59fab6518daea95c6eee022ff2eb80653343d5f410100c6d452569cf9b9df1

                                • C:\Program Files (x86)\VideoLAN\VLC\vlc.exe

                                  Filesize

                                  869KB

                                  MD5

                                  83528acb269e0f5284c8e203afc0e5b6

                                  SHA1

                                  2a9126dcd9371e1495341a0fd31e34072df07cfa

                                  SHA256

                                  e31f1c75991168db146b71b926d7cd01f23a5222ea99929518178360bc05bcb3

                                  SHA512

                                  e04adb83981e94a3d831abffaae49aa9aa66361d83cf550c6b01408d83c077f881b4653970e874c4cffc967e7e46ff7348f140efef8f1ecfd59610efaaae433c

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

                                  Filesize

                                  264KB

                                  MD5

                                  f50f89a0a91564d0b8a211f8921aa7de

                                  SHA1

                                  112403a17dd69d5b9018b8cede023cb3b54eab7d

                                  SHA256

                                  b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                  SHA512

                                  bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  4KB

                                  MD5

                                  0f21dde459959492c89a106c0bba5f7e

                                  SHA1

                                  a7d78558b27ea8dd2bd11f199e388ca7e339e332

                                  SHA256

                                  4cfd05d571cf0ecaff7b332bc1e6607eeef96af48a00401236a2e4629a9162c7

                                  SHA512

                                  2bffc68c2fa71cf5fbd5cf1df6f58e346e6e0578331659587ddd1011d429d87968de42c1fe9ec8a95f9fdb78e3cfbbd67b01cc9970ebe0f74feafb86e7e07ffc

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                  Filesize

                                  4KB

                                  MD5

                                  c323f6d2bff1856992ab08a2986e35a2

                                  SHA1

                                  50bff9b918a74c3092b7e10b40d317fd318f96d4

                                  SHA256

                                  ac7030491b8879647ea60c5e0365c8f38a00e375d814057a890d82f1f6d8ee20

                                  SHA512

                                  0c8d03cac226daf96d4654e83b74119503166e5dcb483df1ba7cbbf20b65d9bb137e4544e8454208f8d40d2ba03b3d11139be6f0c9f62b92203b1f7056a2b3c3

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp

                                  Filesize

                                  16B

                                  MD5

                                  18e723571b00fb1694a3bad6c78e4054

                                  SHA1

                                  afcc0ef32d46fe59e0483f9a3c891d3034d12f32

                                  SHA256

                                  8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

                                  SHA512

                                  43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

                                • \Program Files (x86)\VideoLAN\VLC\libvlc.dll

                                  Filesize

                                  177KB

                                  MD5

                                  f41655d8921d87b166e8eefc9ac22e43

                                  SHA1

                                  311082836beb88abc0594378c2938d4814a54962

                                  SHA256

                                  971959d423c31a9fc414f5e8040dace63254a39e894b544e9f4d551d5321705b

                                  SHA512

                                  4f892b037cd7528d8a6aa628394af283fbacd4bf23b7d42f798ce6f47c3ac28ebe349ee4cc54ca7ce15dba5d2f7207c89b47001162381509230a7b5b3c1435fa

                                • \Program Files (x86)\VideoLAN\VLC\libvlccore.dll

                                  Filesize

                                  961KB

                                  MD5

                                  7e386d70dc31ff5836a47d12a3cecdbe

                                  SHA1

                                  e93c71b9af53d5d58ad5bad70bff4f45d37fc62b

                                  SHA256

                                  b4238b25c7e5f74b254dfa1276ea363f765c37de12e8b6e6de3a86e58e9cdfc7

                                  SHA512

                                  c10e15d992825cbca339d4e8431b632bc32a371a65a47856ea8358cdd96196a2dd824ad9a8531525bd6788c058ebf323b397ea443df24b267a008aab5fb2c250

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll

                                  Filesize

                                  38KB

                                  MD5

                                  f0c961035875b3d7aec37ff28a1dc979

                                  SHA1

                                  891c7c5cedb3ac4c8e44a00af6a75de9a07d762c

                                  SHA256

                                  d90430f2bd6bbe07b8c6ae43b4a7792a8de50b3572b4a4c64ef120e485b9da74

                                  SHA512

                                  529cf586cae4cd28dcfd103427db0c5ebb167336e0fa864ef7bd5898861a17edede91ef1ca5ece258a6707bd6e63ef6f05f6c9fe5b2191b91c89ddbb541b396a

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll

                                  Filesize

                                  70KB

                                  MD5

                                  e1cb6698a0916eae8244bbace81b7b1f

                                  SHA1

                                  d5f7cc3b05e3ee43ded9722ea2d7015b7fdae674

                                  SHA256

                                  226d7a298daf8b71282d9392442b7070f2ea7999c27a6fd0dc7878f36cf35457

                                  SHA512

                                  d1bbaa84476b1c63ab12db328d36dac897a5fe2a7acb6fcc4647dff888f5dc31df4d11e6883c11446e5af4ce36852fccfc47329a93ce0ac8491b2f7d7bdd4b3d

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll

                                  Filesize

                                  102KB

                                  MD5

                                  5cef533b45c7000ec3b35a6ec6ffd33e

                                  SHA1

                                  1bfef0e820fd00b9cddf979ec4ef9e8cce29fc3b

                                  SHA256

                                  cdebc1fc36c9c16da565fbec602b7ee28e00cf7523c47e986ede6d05600d332c

                                  SHA512

                                  3d98d29fd8593f51e55398398351371fb0a3c5d480bcf8c2333adcb40914ac70b116ff0b82e5d25b464bc75e47b82a0b5737ac900bb375dff5767f1263938eec

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll

                                  Filesize

                                  138KB

                                  MD5

                                  4eb9fd39c86b9a51128ea75ac58bb47f

                                  SHA1

                                  73b23588b12c1f06d913171daaeb388d19719e89

                                  SHA256

                                  b7b6b75bbbaa5f32dd37bef0e2a9d004afc582bce0901a2294f562bbe8b4b560

                                  SHA512

                                  615863a93cc8ce06a6a916dbb9dcabb339a056f7f6f10c9c8f1195a32ef39c70f804a61a09ed7503c9f75183a011d32ae09f022b998863735a0c2b0f08cd137a

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll

                                  Filesize

                                  418KB

                                  MD5

                                  a8530c33ea8c95a75e0c9730bc347050

                                  SHA1

                                  7404c7da58ccdd528f702dcef7057f3b8585a0db

                                  SHA256

                                  9c924babcc3927f0651ad7719f628aadbd16cf77f8d173f91ee90a5f13a81951

                                  SHA512

                                  1db71893881ba52667afb8307c9774c7bc8e1fac12e53c3cc2eb1b5d5f133bd5203be748699a443e6175528cf6bc2bc4c24e503487330d487d1954bad4889611

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_wasapi_plugin.dll

                                  Filesize

                                  54KB

                                  MD5

                                  c564c051e5109d0d34c97432cf958b06

                                  SHA1

                                  f2d7e125369fe32c0be868d4ad5ad8bfc962e53a

                                  SHA256

                                  7a231c2ed75a03036b99adb3087ced4d0c77c99eaf6eb8ea0e153dc041d74446

                                  SHA512

                                  7451ea33bff7fe7ce46f24d1a134263875baf542fc1372157c3544ec66f8d8a4d3b24ab47053f9a7673cdb92459e1b5550c3ff1d5795e474310dab1ed4ae7c59

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libattachment_plugin.dll

                                  Filesize

                                  35KB

                                  MD5

                                  28c7c81869771a13e9a7069c7ee865ab

                                  SHA1

                                  bf397850f87eb4e773c25a3830c11be1f8cefeb8

                                  SHA256

                                  f78940b749252db094180e37334f356f0ece1b1b510f7d998ef962ce8e71d3cc

                                  SHA512

                                  5ebd5bbe4bb36a2be24c82a216c05bf545419c909e6e2203094feaf9f5167691e5b83ee7ab0c5e43629abfb9e2c29327355731fbd6106de1f7df77f730171b86

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll

                                  Filesize

                                  202KB

                                  MD5

                                  57afe29e95494191dceaac997f9a956c

                                  SHA1

                                  c22730f72e7b5d29d611d7cd7c5f5f4cddd713bc

                                  SHA256

                                  7ac2d5e28e97d4227855fe16f512a76e1374aa1ddae470a68e53b256f1e8391a

                                  SHA512

                                  d9303371bdc03f08d9e33c51a149a1afce71269f7798d9f0293f1fdd26f369646c07861644281d9467a6c8f061e25f8615ee12c4501d523f23918b00c1461eab

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libdcp_plugin.dll

                                  Filesize

                                  120KB

                                  MD5

                                  1976c7fadaefb0e64613f98665768a97

                                  SHA1

                                  463c93b4aae8981996129d30cb5e5eea538d04dc

                                  SHA256

                                  073828b1936071d33a8a4f42a44ce7a9e7e4dcb61ea6d1438f114299104360a9

                                  SHA512

                                  f3d6062748a44ce4f8915ef4cea45fe0b4d5717bcb29908b3189dfcf4bbb832b72231a4f7142f4b31de608028f59628a79968ba5b9a177b64e24b69d7bd66da1

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll

                                  Filesize

                                  126KB

                                  MD5

                                  3b941d9ad1abfdafd0b9b7ea80549160

                                  SHA1

                                  c4b9fa04fb85af1ddc7da13e50e6323d551c3869

                                  SHA256

                                  654f77646a5aa5d62ed6c11a40979764bae199ea3627c7a3e31f24a1f9d277e4

                                  SHA512

                                  3a266523cc0a1e3575e443321c9d1d709d4bab17136f1a1427ea3b57de42a8da1acd34ff37d3181b83e4d37cf66cbb8b20fdafa12bdd9133e43809ab742185ea

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll

                                  Filesize

                                  127KB

                                  MD5

                                  c99c0503db407035dba58fa9a1d58a00

                                  SHA1

                                  86c7ab90f04e0693d265e7456c2cf0c3ff7c13f9

                                  SHA256

                                  facdab4feb0b597547abf078b2e0a9ab9bd437260511b465739ce8876c8050b0

                                  SHA512

                                  92c4ff7d4fec308d4f998526555cb58ca1192e2ca0d2beff77531dfbd8545017b6a7880e852e2a5dee097eb13f247fc796429e57662b521020f68fa505563fb7

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll

                                  Filesize

                                  128KB

                                  MD5

                                  aa22e7ddbcbf3628f90cc5eaf1eaefc7

                                  SHA1

                                  22eb020379742175736ddb0e0e08ed252395d45b

                                  SHA256

                                  2e0269c81c824fd03fb88238a971947848db3711ad469fae799ffb9960365746

                                  SHA512

                                  16f1eca52cb003da608ac77cb147d27655b7e0cbf32ffc68b114a486a8d50a546c09de33938dfb3eeb7d894129102370854ec040e98b34b4f6c0fb5d813b1890

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll

                                  Filesize

                                  128KB

                                  MD5

                                  64e2cf230e1bb6e68c7e3d1121c180dc

                                  SHA1

                                  3b86658a4b1e2760d8809f62b4dcd5bc92a678f0

                                  SHA256

                                  2561197a7898645e0a73320aac214e0b0758415f713cb05f66e88af4b8c44ae9

                                  SHA512

                                  1f5ba5ea6cd75bc0bb789407f85151f654cbd2d40652610dcc87aa71f1e6eb07bf42dddac5a7936cc0afc173a961663374eb86dd6a9d0250687c417ea47da4db

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll

                                  Filesize

                                  64KB

                                  MD5

                                  08c388e8f08101b134333f5a182310f2

                                  SHA1

                                  992462c41c04d9e0e20f604b44823e48341f1bfe

                                  SHA256

                                  d952eb2658a71ce14fe9a57ce6ba1adfe200cfe68d0d06561136d2ab3354cd72

                                  SHA512

                                  dfc22c9c1161e265c7a1c24addd271a07bf36a3dee45646fe00318cd06e95366ed2ae54c0500d107a048c26e8ea5214f0d43d3e10a51babf4fcfc3b5809e2399

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libftp_plugin.dll

                                  Filesize

                                  88KB

                                  MD5

                                  365f5c28b2cbf89967d06f1ce89ec028

                                  SHA1

                                  19b8401bd987f8d4b55ecba762e061154c497fc8

                                  SHA256

                                  5a8610d71e71f5d96afde02e960c079d953ca61764c62eb39e458562782a2a41

                                  SHA512

                                  b21c66c8c082799753f648d912eeb15fbd2e4813633a067ffb8ee4ece1bcf1ceb776a1997c2772ef654af53fae986263a0987d411e17a0ac2ef98ebdec437304

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libhttp_plugin.dll

                                  Filesize

                                  70KB

                                  MD5

                                  6c707ddbf3b8676798174905486def2a

                                  SHA1

                                  a6812cbf78479c2fff2b0719e7581f79fb0591f7

                                  SHA256

                                  679045aa48f72d87ebeffa6f26740d2a43d2dc72337fb71ca8caed716d9510c3

                                  SHA512

                                  a4b18e3105dd2b1b2588ff0f298d6467510ab59e54b4b34014957d2008f1344f2f9948983ec55d7b4fee0185bdc3b861bb459dc9610406c5f653319e9925f889

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libhttps_plugin.dll

                                  Filesize

                                  88KB

                                  MD5

                                  55c39d9b5f5bf4b45816263f20d9c31a

                                  SHA1

                                  d261fecf733dff3aa0dbd01d117aa21cd7565d74

                                  SHA256

                                  d9160e6e133ac60314dcdb0a43a02751b8269a79c14601757010b1a6024f4603

                                  SHA512

                                  f82dffde6d8688b8161b561d45a3e99c98ec213722c38fa28186da205a1d346f8999baf3abb9b2d28636e3f25bddfa66c378f7865a9cdfc6717c11004c47b811

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll

                                  Filesize

                                  36KB

                                  MD5

                                  47043e9891d5c4c7bc24de11f6831e94

                                  SHA1

                                  353313c2916dd7308159c286b56f736b8a345885

                                  SHA256

                                  fc9e3f062f974b10cb3b5c3b0a1296409abc57ee778ea898b41e98cd621b7464

                                  SHA512

                                  20d302e8e4118a38baf106385c30103cea37cd6c07b6e10e7e04d0ef1eaa748a7a16ffe8392879d45fdc80cec7ef8ede4f945f48d38ab72ac0a39dcf9779325f

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libimem_plugin.dll

                                  Filesize

                                  35KB

                                  MD5

                                  e6080f123403ced303f6e6b457b97d5d

                                  SHA1

                                  d0bb18616c0095388d1a8d0febdb8321029a3928

                                  SHA256

                                  b52e503fda7bfe46017c9bd195812f54cd2b42e314557117b891edff2b420322

                                  SHA512

                                  a5eda3bb76683838394ab65801c2a29101f714b0da1c29e7f6cc46ad7236f7e87b2dcba43bdd567139a715cd439a6099be6b36294a745de4dd3c3743cc0be680

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll

                                  Filesize

                                  128KB

                                  MD5

                                  b31f36cf1bc59922f08c3e1b3b41e0ed

                                  SHA1

                                  22e8e2940c89094b76c05620f445c0385e22b36b

                                  SHA256

                                  a2c8d8a2e486bd176b5ed3d3f4f22ca8454f6f07e5efcb9ff836e3c3b3044b7d

                                  SHA512

                                  9f9a55ba8f66bfa091f0a4b9897b460b90938dda31b3bed671304664c0dd0509245f0738620ea265be0ad6f4ac76f17163e3893ea95499a43a2425872a8ff2d1

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\liblive555_plugin.dll

                                  Filesize

                                  89KB

                                  MD5

                                  f1493b4afc5c186e4993d6cdae7c8084

                                  SHA1

                                  22829943a8ab2c105e2270756b3b9721a5f805af

                                  SHA256

                                  43a3f46fcfa6ca592b17f32b5a0dfd8136759609004b732cce65fc88129471d8

                                  SHA512

                                  f7b503215902421781875d986638e569524a547c2cc26f5f6a6080f5559ad9efbe8786977d2823b00d9237c1b8f33c2c2fded8604957f005f5374cb540d2e1a5

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\libnfs_plugin.dll

                                  Filesize

                                  105KB

                                  MD5

                                  4c26c82b84373a2e7346b5b6be506235

                                  SHA1

                                  67576fa7aeb2e7c9c9544da7c32e9c47d625546d

                                  SHA256

                                  e2f78ba6a32211b5f92cbab4e1beb70834dac94e21b93937fa1869c96028d36a

                                  SHA512

                                  9ac0d6a484b199506575618f26360541065e39f7e1b5b6af5766be26c04935063ebec390c07b0e3fd7cbe42b352db09b1ef38775e34805c6f809298923ae8676

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\librist_plugin.dll

                                  Filesize

                                  77KB

                                  MD5

                                  8bb291c9f0beced24b82425733cc92c2

                                  SHA1

                                  3453c442bea132bfc91a7ace6e55ebfdd3cd196b

                                  SHA256

                                  a31224a727c87b53f7dc67beeedd01170689376b566c2de47583ff27b19ab5d6

                                  SHA512

                                  a7cdb53636e93a7d1a0f7ebe5d3da65d7dced85d35c3ba04e16410bd23e75166192d867c43f1796531b4150fd099048b5ef53d4590b21ef7bba6c6719dadf808

                                • \Program Files (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll

                                  Filesize

                                  65KB

                                  MD5

                                  211ad0d6bf22b08296c695d4f6ae03fe

                                  SHA1

                                  43883947a6764a5271b6090a3e33e365099906be

                                  SHA256

                                  f52d438e3a42f53d0e55a5ecc243c23eb0d6ebb750b3c919a1994955877bd9e5

                                  SHA512

                                  291637d30e99b7674342e0856ae92753feb65363c457eabf6e83367e21195aadb3055a50ca71515490d5042db05bea09241a7a41dd656fc7314e7e4490aa82ec

                                • \Program Files (x86)\VideoLAN\VLC\vlc-cache-gen.exe

                                  Filesize

                                  135KB

                                  MD5

                                  ae9ee48ba54f82ae48229b623c686ec5

                                  SHA1

                                  fdf63827078b16dd696b26efc467523085aa2fa6

                                  SHA256

                                  305f24d465293d200711f97916c06ad67d7925926e25f3d9cf97cea122485ff9

                                  SHA512

                                  2063450933e1fec82ed26fc8e20a28dc8e4d36a0a0f971df77900267b79a0f452d824e11e6718de1a1518199bbe92c262ae16f25b50c2d00c5c7af6a02ba684b

                                • \Users\Admin\AppData\Local\Temp\nst8097.tmp\LangDLL.dll

                                  Filesize

                                  7KB

                                  MD5

                                  20850d4d5416fbfd6a02e8a120f360fc

                                  SHA1

                                  ac34f3a34aaa4a21efd6a32bc93102639170e219

                                  SHA256

                                  860b409b065b747aab2a9937f02d08b6fd7309993b50d8e4b53983c8c2b56b61

                                  SHA512

                                  c8048b9ae0ced72a384c5ab781083a76b96ae08d5c8a5c7797f75a7e54e9cd9192349f185ee88c9cf0514fc8d59e37e01d88b9c8106321c0581659ebe1d1c276

                                • \Users\Admin\AppData\Local\Temp\nst8097.tmp\System.dll

                                  Filesize

                                  26KB

                                  MD5

                                  4f25d99bf1375fe5e61b037b2616695d

                                  SHA1

                                  958fad0e54df0736ddab28ff6cb93e6ed580c862

                                  SHA256

                                  803931797d95777248dee4f2a563aed51fe931d2dd28faec507c69ed0f26f647

                                  SHA512

                                  96a8446f322cd62377a93d2088c0ce06087da27ef95a391e02c505fb4eb1d00419143d67d89494c2ef6f57ae2fd7f049c86e00858d1b193ec6dde4d0fe0e3130

                                • \Users\Admin\AppData\Local\Temp\nst8097.tmp\nsDialogs.dll

                                  Filesize

                                  12KB

                                  MD5

                                  2029c44871670eec937d1a8c1e9faa21

                                  SHA1

                                  e8d53b9e8bc475cc274d80d3836b526d8dd2747a

                                  SHA256

                                  a4ae6d33f940a80e8fe34537c5cc1f8b8679c979607969320cfb750c15809ac2

                                  SHA512

                                  6f151c9818ac2f3aef6d4cabd8122c7e22ccf0b84fa5d4bcc951f8c3d00e8c270127eac1e9d93c5f4594ac90de8aff87dc6e96562f532a3d19c0da63a28654b7

                                • \Users\Admin\AppData\Local\Temp\nst8097.tmp\nsExec.dll

                                  Filesize

                                  10KB

                                  MD5

                                  dcaaa39e47a9144ae10ee67b3183f4e1

                                  SHA1

                                  2af87fcebff57411e929dd2fce767e9a1e4d98e1

                                  SHA256

                                  da30c0f57a8a412bdc0fca182702f568bd91007475d1823464658fa523a4af9f

                                  SHA512

                                  d56997d74d841d01c62b7db4150729f395b57d065a1182249483640f80720fb6dc7a457cc3a23367982f92f85e9274507d6157f698a2e22ea11266866fb1bc2c

                                • \Users\Admin\AppData\Local\Temp\nst8097.tmp\nsProcess.dll

                                  Filesize

                                  35KB

                                  MD5

                                  ac4706d0ea9f3414dd8b2e29e589c5cf

                                  SHA1

                                  4fafab750fc45c198ca20635365a88fa1ad4384b

                                  SHA256

                                  6a8f3c9c1e45947513376aa249aee8d4daab4169035c4a91818bee1ae91e5dcc

                                  SHA512

                                  779ddf055d0418b3c17de2ab9ebee442afab7507f12b0e5fc126cbc44ac652d32562add646a7a0ed43258ed101f44bfdc54899023da31a3bca3770f69ae3114c

                                • memory/1296-832-0x0000000140000000-0x00000001405E8000-memory.dmp

                                  Filesize

                                  5.9MB

                                • memory/1296-831-0x0000000140000000-0x00000001405E8000-memory.dmp

                                  Filesize

                                  5.9MB

                                • memory/1296-871-0x0000000140000000-0x00000001405E8000-memory.dmp

                                  Filesize

                                  5.9MB

                                • memory/1296-870-0x0000000140000000-0x00000001405E8000-memory.dmp

                                  Filesize

                                  5.9MB

                                • memory/1296-869-0x0000000140000000-0x00000001405E8000-memory.dmp

                                  Filesize

                                  5.9MB

                                • memory/1296-857-0x0000000140000000-0x00000001405E8000-memory.dmp

                                  Filesize

                                  5.9MB

                                • memory/1296-856-0x0000000000380000-0x0000000000381000-memory.dmp

                                  Filesize

                                  4KB

                                • memory/1296-855-0x0000000140000000-0x00000001405E8000-memory.dmp

                                  Filesize

                                  5.9MB

                                • memory/1296-854-0x0000000140000000-0x00000001405E8000-memory.dmp

                                  Filesize

                                  5.9MB

                                • memory/1296-853-0x0000000140000000-0x00000001405E8000-memory.dmp

                                  Filesize

                                  5.9MB

                                • memory/1296-834-0x0000000140000000-0x00000001405E8000-memory.dmp

                                  Filesize

                                  5.9MB

                                • memory/1296-833-0x0000000140000000-0x00000001405E8000-memory.dmp

                                  Filesize

                                  5.9MB

                                • memory/1964-851-0x0000000072BA0000-0x0000000073C21000-memory.dmp

                                  Filesize

                                  16.5MB

                                • memory/1964-818-0x0000000072BA0000-0x0000000073C21000-memory.dmp

                                  Filesize

                                  16.5MB

                                • memory/1964-819-0x00000000746F0000-0x0000000074750000-memory.dmp

                                  Filesize

                                  384KB

                                • memory/1964-810-0x00000000750D0000-0x00000000750FF000-memory.dmp

                                  Filesize

                                  188KB

                                • memory/1964-809-0x0000000000F30000-0x0000000001022000-memory.dmp

                                  Filesize

                                  968KB

                                • memory/1964-815-0x0000000074B50000-0x0000000074B64000-memory.dmp

                                  Filesize

                                  80KB

                                • memory/1964-814-0x0000000074FF0000-0x0000000074FFE000-memory.dmp

                                  Filesize

                                  56KB

                                • memory/1964-813-0x0000000074B70000-0x0000000074B83000-memory.dmp

                                  Filesize

                                  76KB

                                • memory/1964-812-0x0000000074BE0000-0x0000000074BF4000-memory.dmp

                                  Filesize

                                  80KB

                                • memory/1964-811-0x0000000074D30000-0x0000000074FC4000-memory.dmp

                                  Filesize

                                  2.6MB

                                • memory/1964-816-0x0000000074930000-0x000000007494A000-memory.dmp

                                  Filesize

                                  104KB

                                • memory/1964-817-0x0000000074920000-0x000000007492F000-memory.dmp

                                  Filesize

                                  60KB

                                • memory/2380-211-0x0000000000400000-0x0000000000481000-memory.dmp

                                  Filesize

                                  516KB

                                • memory/2380-22-0x0000000074BE0000-0x0000000074BEB000-memory.dmp

                                  Filesize

                                  44KB

                                • memory/2380-787-0x0000000074BF0000-0x0000000074BFE000-memory.dmp

                                  Filesize

                                  56KB

                                • memory/2380-788-0x0000000074BE0000-0x0000000074BEB000-memory.dmp

                                  Filesize

                                  44KB

                                • memory/2380-786-0x0000000000400000-0x0000000000481000-memory.dmp

                                  Filesize

                                  516KB

                                • memory/2380-11-0x0000000074BF0000-0x0000000074BFE000-memory.dmp

                                  Filesize

                                  56KB

                                • memory/2380-10-0x0000000000400000-0x0000000000481000-memory.dmp

                                  Filesize

                                  516KB

                                • memory/2380-21-0x0000000074BF0000-0x0000000074BFE000-memory.dmp

                                  Filesize

                                  56KB

                                • memory/2380-12-0x0000000074BE0000-0x0000000074BE9000-memory.dmp

                                  Filesize

                                  36KB

                                • memory/2380-802-0x0000000000400000-0x0000000000481000-memory.dmp

                                  Filesize

                                  516KB

                                • memory/2380-506-0x0000000000400000-0x0000000000481000-memory.dmp

                                  Filesize

                                  516KB

                                • memory/2380-20-0x0000000000400000-0x0000000000481000-memory.dmp

                                  Filesize

                                  516KB

                                • memory/2852-740-0x000000006D2F0000-0x000000006E371000-memory.dmp

                                  Filesize

                                  16.5MB

                                • memory/2852-737-0x0000000000400000-0x0000000000424000-memory.dmp

                                  Filesize

                                  144KB

                                • memory/2852-738-0x0000000074A80000-0x0000000074AAF000-memory.dmp

                                  Filesize

                                  188KB

                                • memory/2852-739-0x00000000747E0000-0x0000000074A74000-memory.dmp

                                  Filesize

                                  2.6MB

                                • memory/2852-748-0x000000006CA20000-0x000000006CB1D000-memory.dmp

                                  Filesize

                                  1012KB