Analysis

  • max time kernel
    1797s
  • max time network
    1717s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-06-2024 15:13

General

  • Target

    SolaraBootstrapper.exe

  • Size

    798KB

  • MD5

    baa81d6b98890ac06befe560d00be992

  • SHA1

    b69769c15af3ff85ca16a4ee579ea7fd959179e9

  • SHA256

    ec710ba066a78e3faf19b9d9a589ace5540a6a31551dc977b533e7d67352f87b

  • SHA512

    ded06cff210a201a53670ab55078c4edfcc0c4137af04b1ad3966b69464ec717957508b341d5f5fef485679bdd841017c420a14217d9480181a03fcd9aaad7f1

  • SSDEEP

    12288:PZZmz3HwnXFZ9RgoOojAojAbJaTGLLvlguxD:3mz3Hi9tOojAojAbdLL

Malware Config

Signatures

  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
  • Downloads MZ/PE file
  • Checks BIOS information in registry 2 TTPs 2 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 17 IoCs
  • Themida packer 18 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Blocklisted process makes network request 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 13 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 21 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 5 IoCs
  • Modifies registry class 30 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe
    "C:\Users\Admin\AppData\Local\Temp\SolaraBootstrapper.exe"
    1⤵
    • Checks computer location settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3984
    • C:\Windows\SysWOW64\msiexec.exe
      "msiexec" /i "C:\Users\Admin\AppData\Local\Temp\node-v18.16.0-x64.msi" /qn
      2⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:2268
    • C:\Users\Admin\AppData\Local\Temp\vc_redist.x64.exe
      "C:\Users\Admin\AppData\Local\Temp\vc_redist.x64.exe" /install /quiet /norestart
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:1400
      • C:\Windows\Temp\{A8B35493-9ECD-476F-B6A8-19AC51847589}\.cr\vc_redist.x64.exe
        "C:\Windows\Temp\{A8B35493-9ECD-476F-B6A8-19AC51847589}\.cr\vc_redist.x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\vc_redist.x64.exe" -burn.filehandle.attached=540 -burn.filehandle.self=548 /install /quiet /norestart
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:740
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/pizzaboxer/bloxstrap/releases/download/v2.5.4/Bloxstrap-v2.5.4.exe
      2⤵
      • Enumerates system info in registry
      • NTFS ADS
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:3384
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe702846f8,0x7ffe70284708,0x7ffe70284718
        3⤵
          PID:4636
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1952 /prefetch:2
          3⤵
            PID:2152
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 /prefetch:3
            3⤵
            • Suspicious behavior: EnumeratesProcesses
            PID:3908
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2536 /prefetch:8
            3⤵
              PID:1940
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3368 /prefetch:1
              3⤵
                PID:4284
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
                3⤵
                  PID:4356
                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4124 /prefetch:8
                  3⤵
                    PID:4228
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4124 /prefetch:8
                    3⤵
                    • Suspicious behavior: EnumeratesProcesses
                    PID:924
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
                    3⤵
                      PID:4048
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1
                      3⤵
                        PID:740
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=4016 /prefetch:8
                        3⤵
                          PID:3368
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
                          3⤵
                            PID:2664
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6080 /prefetch:8
                            3⤵
                              PID:4364
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6228 /prefetch:1
                              3⤵
                                PID:824
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1
                                3⤵
                                  PID:3204
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,10312499638790310756,2947953835830092168,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5004 /prefetch:2
                                  3⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:4512
                              • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe
                                "C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe"
                                2⤵
                                • Identifies VirtualBox via ACPI registry values (likely anti-VM)
                                • Checks BIOS information in registry
                                • Executes dropped EXE
                                • Loads dropped DLL
                                • Checks whether UAC is enabled
                                • Suspicious use of NtSetInformationThreadHideFromDebugger
                                PID:4832
                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4832.5432.14819864415304188255
                                  3⤵
                                  • Drops file in Program Files directory
                                  • Enumerates system info in registry
                                  • Modifies data under HKEY_USERS
                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                  PID:5496
                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=125.0.6422.142 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=125.0.2535.92 --initial-client-data=0x160,0x164,0x168,0x15c,0x138,0x7ffe6c954ef8,0x7ffe6c954f04,0x7ffe6c954f10
                                    4⤵
                                      PID:5552
                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1736,i,6666176866057788555,7534271505209743362,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1700 /prefetch:2
                                      4⤵
                                        PID:5804
                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --field-trial-handle=2016,i,6666176866057788555,7534271505209743362,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:3
                                        4⤵
                                          PID:5836
                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --field-trial-handle=2300,i,6666176866057788555,7534271505209743362,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:8
                                          4⤵
                                            PID:5952
                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3596,i,6666176866057788555,7534271505209743362,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
                                            4⤵
                                              PID:2080
                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --field-trial-handle=2228,i,6666176866057788555,7534271505209743362,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4080 /prefetch:8
                                              4⤵
                                                PID:628
                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --field-trial-handle=4080,i,6666176866057788555,7534271505209743362,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:8
                                                4⤵
                                                  PID:1640
                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2104,i,6666176866057788555,7534271505209743362,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:8
                                                  4⤵
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  PID:3572
                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --field-trial-handle=4764,i,6666176866057788555,7534271505209743362,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
                                                  4⤵
                                                    PID:1420
                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --field-trial-handle=4184,i,6666176866057788555,7534271505209743362,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2172 /prefetch:8
                                                    4⤵
                                                      PID:3840
                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --field-trial-handle=4156,i,6666176866057788555,7534271505209743362,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
                                                      4⤵
                                                        PID:3320
                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --field-trial-handle=2232,i,6666176866057788555,7534271505209743362,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:8
                                                        4⤵
                                                          PID:1480
                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --field-trial-handle=752,i,6666176866057788555,7534271505209743362,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:8
                                                          4⤵
                                                            PID:1516
                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --field-trial-handle=4436,i,6666176866057788555,7534271505209743362,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:8
                                                            4⤵
                                                              PID:5444
                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe
                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.92\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView" --webview-exe-name=cd57e4c171d6e8f5ea8b8f824a6a7316.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --field-trial-handle=4696,i,6666176866057788555,7534271505209743362,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:8
                                                              4⤵
                                                                PID:2816
                                                        • C:\Windows\system32\msiexec.exe
                                                          C:\Windows\system32\msiexec.exe /V
                                                          1⤵
                                                          • Blocklisted process makes network request
                                                          • Enumerates connected drives
                                                          • Drops file in Program Files directory
                                                          • Drops file in Windows directory
                                                          • Modifies data under HKEY_USERS
                                                          • Modifies registry class
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          • Suspicious use of AdjustPrivilegeToken
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:2964
                                                          • C:\Windows\System32\MsiExec.exe
                                                            C:\Windows\System32\MsiExec.exe -Embedding D4EAEB59ABE2F82BED57AD491F3D519D
                                                            2⤵
                                                            • Loads dropped DLL
                                                            PID:3524
                                                          • C:\Windows\syswow64\MsiExec.exe
                                                            C:\Windows\syswow64\MsiExec.exe -Embedding CA88530173CF3FB81C21F70804160DF5
                                                            2⤵
                                                            • Loads dropped DLL
                                                            PID:668
                                                          • C:\Windows\syswow64\MsiExec.exe
                                                            C:\Windows\syswow64\MsiExec.exe -Embedding 0FD3D3BC0E6D9234D6F72D64EB3C9E5A E Global\MSI0000
                                                            2⤵
                                                            • Loads dropped DLL
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:3168
                                                            • C:\Windows\SysWOW64\wevtutil.exe
                                                              "wevtutil.exe" im "C:\Program Files\nodejs\node_etw_provider.man"
                                                              3⤵
                                                              • Suspicious use of AdjustPrivilegeToken
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:4404
                                                              • C:\Windows\System32\wevtutil.exe
                                                                "wevtutil.exe" im "C:\Program Files\nodejs\node_etw_provider.man" /fromwow64
                                                                4⤵
                                                                • Suspicious use of AdjustPrivilegeToken
                                                                PID:4668
                                                        • C:\Windows\System32\CompPkgSrv.exe
                                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                          1⤵
                                                            PID:2244
                                                          • C:\Windows\System32\CompPkgSrv.exe
                                                            C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                            1⤵
                                                              PID:1988

                                                            Network

                                                            MITRE ATT&CK Enterprise v15

                                                            Replay Monitor

                                                            Loading Replay Monitor...

                                                            Downloads

                                                            • C:\Config.Msi\e573ec1.rbs
                                                              Filesize

                                                              1.0MB

                                                              MD5

                                                              4652d2b325fab775d812ce28dd331273

                                                              SHA1

                                                              bee5ac45a47ae2686d4509efbe10e0320291e0c5

                                                              SHA256

                                                              49ffadda87311aedadbf4996f20eb1d754b9f1098a1123c8d6114a05fc340204

                                                              SHA512

                                                              538c54fd01733d703f36ded0dfe0cc69439c2cff7c461fd9a1147b4c119ae54b987fe84521a04967ecc02d7e2396f1db27bb2b4f71bb1afbe67d03cfc11256f3

                                                            • C:\Program Files\chrome_Unpacker_BeginUnzipping5496_1006041906\hyph-as.hyb
                                                              Filesize

                                                              703B

                                                              MD5

                                                              8961fdd3db036dd43002659a4e4a7365

                                                              SHA1

                                                              7b2fa321d50d5417e6c8d48145e86d15b7ff8321

                                                              SHA256

                                                              c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe

                                                              SHA512

                                                              531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92

                                                            • C:\Program Files\chrome_Unpacker_BeginUnzipping5496_1006041906\hyph-hi.hyb
                                                              Filesize

                                                              687B

                                                              MD5

                                                              0807cf29fc4c5d7d87c1689eb2e0baaa

                                                              SHA1

                                                              d0914fb069469d47a36d339ca70164253fccf022

                                                              SHA256

                                                              f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42

                                                              SHA512

                                                              5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3

                                                            • C:\Program Files\chrome_Unpacker_BeginUnzipping5496_1006041906\hyph-nb.hyb
                                                              Filesize

                                                              141KB

                                                              MD5

                                                              677edd1a17d50f0bd11783f58725d0e7

                                                              SHA1

                                                              98fedc5862c78f3b03daed1ff9efbe5e31c205ee

                                                              SHA256

                                                              c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0

                                                              SHA512

                                                              c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff

                                                            • C:\Program Files\chrome_Unpacker_BeginUnzipping5496_1006041906\manifest.json
                                                              Filesize

                                                              179B

                                                              MD5

                                                              273755bb7d5cc315c91f47cab6d88db9

                                                              SHA1

                                                              c933c95cc07b91294c65016d76b5fa0fa25b323b

                                                              SHA256

                                                              0e22719a850c49b3fba3f23f69c8ff785ce3dee233030ed1ad6e6563c75a9902

                                                              SHA512

                                                              0e375846a5b10cc29b7846b20a5a9193ea55ff802f668336519ff275fb3d179d8d6654fe1d410764992b85a309a3e001cede2f4acdec697957eb71bdeb234bd8

                                                            • C:\Program Files\chrome_Unpacker_BeginUnzipping5496_1148811374\manifest.json
                                                              Filesize

                                                              43B

                                                              MD5

                                                              55cf847309615667a4165f3796268958

                                                              SHA1

                                                              097d7d123cb0658c6de187e42c653ad7d5bbf527

                                                              SHA256

                                                              54f5c87c918f69861d93ed21544aac7d38645d10a890fc5b903730eb16d9a877

                                                              SHA512

                                                              53c71b860711561015c09c5000804f3713651ba2db57ccf434aebee07c56e5a162bdf317ce8de55926e34899812b42c994c3ce50870487bfa1803033db9452b7

                                                            • C:\Program Files\chrome_Unpacker_BeginUnzipping5496_1258492134\manifest.json
                                                              Filesize

                                                              102B

                                                              MD5

                                                              8062e1b9705b274fd46fcd2dd53efc81

                                                              SHA1

                                                              61912082d21780e22403555a43408c9a6cafc59a

                                                              SHA256

                                                              2f0e67d8b541936adc77ac9766c15a98e9b5de67477905b38624765e447fcd35

                                                              SHA512

                                                              98609cf9b126c7c2ad29a6ec92f617659d35251d5f6e226fff78fd9f660f7984e4c188e890495ab05ae6cf3fbe9bf712c81d814fbd94d9f62cf4ff13bbd9521a

                                                            • C:\Program Files\chrome_Unpacker_BeginUnzipping5496_1436047923\manifest.json
                                                              Filesize

                                                              76B

                                                              MD5

                                                              ba25fcf816a017558d3434583e9746b8

                                                              SHA1

                                                              be05c87f7adf6b21273a4e94b3592618b6a4a624

                                                              SHA256

                                                              0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11

                                                              SHA512

                                                              3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f

                                                            • C:\Program Files\chrome_Unpacker_BeginUnzipping5496_1446020047\manifest.json
                                                              Filesize

                                                              132B

                                                              MD5

                                                              e2e0e30a5061d2e813d389d776cd8ffd

                                                              SHA1

                                                              90913c06260b62534b42c0e28bac3082cdacd19c

                                                              SHA256

                                                              7f8c92b4e9da2afa5a089e37797036d18e61e4f02a4885b7887c0b98d464259f

                                                              SHA512

                                                              000727f5052c846e39c62ae90032db500708e5fec5af24b8cc1f3a9d4102bc7b9be025176f01722a7c72b5e8bf85b0084cab0ebeb00fde03928c4e22869c98cd

                                                            • C:\Program Files\chrome_Unpacker_BeginUnzipping5496_1608757518\manifest.fingerprint
                                                              Filesize

                                                              66B

                                                              MD5

                                                              0c9218609241dbaa26eba66d5aaf08ab

                                                              SHA1

                                                              31f1437c07241e5f075268212c11a566ceb514ec

                                                              SHA256

                                                              52493422ac4c18918dc91ef5c4d0e50c130ea3aa99915fa542b890a79ea94f2b

                                                              SHA512

                                                              5d25a1fb8d9e902647673975f13d7ca11e1f00f3c19449973d6b466d333198768e777b8cae5becef5c66c9a0c0ef320a65116b5070c66e3b9844461bb0ffa47f

                                                            • C:\Program Files\chrome_Unpacker_BeginUnzipping5496_1608757518\manifest.json
                                                              Filesize

                                                              134B

                                                              MD5

                                                              58d3ca1189df439d0538a75912496bcf

                                                              SHA1

                                                              99af5b6a006a6929cc08744d1b54e3623fec2f36

                                                              SHA256

                                                              a946db31a6a985bdb64ea9f403294b479571ca3c22215742bdc26ea1cf123437

                                                              SHA512

                                                              afd7f140e89472d4827156ec1c48da488b0d06daaa737351c7bec6bc12edfc4443460c4ac169287350934ca66fb2f883347ed8084c62caf9f883a736243194a2

                                                            • C:\Program Files\chrome_Unpacker_BeginUnzipping5496_1788620475\manifest.json
                                                              Filesize

                                                              79B

                                                              MD5

                                                              9f334804d984c140e3eb9644171ce6de

                                                              SHA1

                                                              3f24cca85f25517e9ee9cc6bfcee4f10169f5376

                                                              SHA256

                                                              4fe9e95540546ad31adbe93bc4780aeb381acc9c769422a8f8aec9a1a5376c79

                                                              SHA512

                                                              dec0efd18a63abf3368ccd0122d4d461b68c92c20961416c22f28c5b9d85d8f06779436b1b992e315fe649557f65e51512a74e7642a5a5dcbba9a69c6317ef8d

                                                            • C:\Program Files\chrome_Unpacker_BeginUnzipping5496_627649428\manifest.json
                                                              Filesize

                                                              116B

                                                              MD5

                                                              178174a0125d4ff3ed5211426f1ea113

                                                              SHA1

                                                              26f72c5a2f65c767c4edb04d8da62bdadc02e809

                                                              SHA256

                                                              64986dfeefa8855069e799b28e5523b35c9efcf2ea152a2b03461471c218da1f

                                                              SHA512

                                                              c0d1d9555f4cd7e9a4b0ee5fc1b069782638ba1680d18ba9c83f796746086b6afdf1400c80b7f586422c3a2a73e51bd04fb250e2db818ef723cb4f7a8b3b15a2

                                                            • C:\Program Files\nodejs\node_etw_provider.man
                                                              Filesize

                                                              10KB

                                                              MD5

                                                              1d51e18a7247f47245b0751f16119498

                                                              SHA1

                                                              78f5d95dd07c0fcee43c6d4feab12d802d194d95

                                                              SHA256

                                                              1975aa34c1050b8364491394cebf6e668e2337c3107712e3eeca311262c7c46f

                                                              SHA512

                                                              1eccbe4ddae3d941b36616a202e5bd1b21d8e181810430a1c390513060ae9e3f12cd23f5b66ae0630fd6496b3139e2cc313381b5506465040e5a7a3543444e76

                                                            • C:\Program Files\nodejs\node_etw_provider.man
                                                              Filesize

                                                              8KB

                                                              MD5

                                                              d3bc164e23e694c644e0b1ce3e3f9910

                                                              SHA1

                                                              1849f8b1326111b5d4d93febc2bafb3856e601bb

                                                              SHA256

                                                              1185aaa5af804c6bc6925f5202e68bb2254016509847cd382a015907440d86b4

                                                              SHA512

                                                              91ebff613f4c35c625bb9b450726167fb77b035666ed635acf75ca992c4846d952655a2513b4ecb8ca6f19640d57555f2a4af3538b676c3bd2ea1094c4992854

                                                            • C:\Program Files\nodejs\node_modules\npm\node_modules\@npmcli\arborist\LICENSE.md
                                                              Filesize

                                                              818B

                                                              MD5

                                                              2916d8b51a5cc0a350d64389bc07aef6

                                                              SHA1

                                                              c9d5ac416c1dd7945651bee712dbed4d158d09e1

                                                              SHA256

                                                              733dcbf5b1c95dc765b76db969b998ce0cbb26f01be2e55e7bccd6c7af29cb04

                                                              SHA512

                                                              508c5d1842968c478e6b42b94e04e0b53a342dfaf52d55882fdcfe02c98186e9701983ab5e9726259fba8336282e20126c70d04fc57964027586a40e96c56b74

                                                            • C:\Program Files\nodejs\node_modules\npm\node_modules\aggregate-error\license
                                                              Filesize

                                                              1KB

                                                              MD5

                                                              5ad87d95c13094fa67f25442ff521efd

                                                              SHA1

                                                              01f1438a98e1b796e05a74131e6bb9d66c9e8542

                                                              SHA256

                                                              67292c32894c8ac99db06ffa1cb8e9a5171ef988120723ebe673bf76712260ec

                                                              SHA512

                                                              7187720ccd335a10c9698f8493d6caa2d404e7b21731009de5f0da51ad5b9604645fbf4bc640aa94513b9eb372aa6a31df2467198989234bc2afbce87f76fbc3

                                                            • C:\Program Files\nodejs\node_modules\npm\node_modules\bin-links\LICENSE
                                                              Filesize

                                                              754B

                                                              MD5

                                                              d2cf52aa43e18fdc87562d4c1303f46a

                                                              SHA1

                                                              58fb4a65fffb438630351e7cafd322579817e5e1

                                                              SHA256

                                                              45e433413760dc3ae8169be5ed9c2c77adc31ad4d1bc5a28939576df240f29a0

                                                              SHA512

                                                              54e33d7998b5e9ba76b2c852b4d0493ebb1b1ee3db777c97e6606655325ff66124a0c0857ca4d62de96350dbaee8d20604ec22b0edc17b472086da4babbbcb16

                                                            • C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmhook\LICENSE.md
                                                              Filesize

                                                              771B

                                                              MD5

                                                              e9dc66f98e5f7ff720bf603fff36ebc5

                                                              SHA1

                                                              f2b428eead844c4bf39ca0d0cf61f6b10aeeb93b

                                                              SHA256

                                                              b49c8d25a8b57fa92b2902d09c4b8a809157ee32fc10d17b7dbb43c4a8038f79

                                                              SHA512

                                                              8027d65e1556511c884cb80d3c1b846fc9d321f3f83002664ad3805c4dee8e6b0eaf1db81c459153977bdbde9e760b0184ba6572f68d78c37bff617646bcfc3b

                                                            • C:\Program Files\nodejs\node_modules\npm\node_modules\libnpmorg\LICENSE
                                                              Filesize

                                                              730B

                                                              MD5

                                                              072ac9ab0c4667f8f876becedfe10ee0

                                                              SHA1

                                                              0227492dcdc7fb8de1d14f9d3421c333230cf8fe

                                                              SHA256

                                                              2ef361317adeda98117f14c5110182c28eae233af1f7050c83d4396961d14013

                                                              SHA512

                                                              f38fd6506bd9795bb27d31f1ce38b08c9e6f1689c34fca90e9e1d5194fa064d1f34a9c51d15941506ebbbcd6d4193055e9664892521b7e39ebcd61c3b6f25013

                                                            • C:\Program Files\nodejs\node_modules\npm\node_modules\minipass-pipeline\node_modules\minipass\package.json
                                                              Filesize

                                                              1KB

                                                              MD5

                                                              d116a360376e31950428ed26eae9ffd4

                                                              SHA1

                                                              192b8e06fb4e1f97e5c5c7bf62a9bff7704c198b

                                                              SHA256

                                                              c3052bd85910be313e38ad355528d527b565e70ef15a784db3279649eee2ded5

                                                              SHA512

                                                              5221c7648f4299234a4637c47d3f1eb5e147014704913bc6fdad91b9b6a6ccc109bced63376b82b046bb5cad708464c76fb452365b76dbf53161914acf8fb11a

                                                            • C:\Program Files\nodejs\node_modules\npm\node_modules\minizlib\node_modules\minipass\LICENSE
                                                              Filesize

                                                              802B

                                                              MD5

                                                              d7c8fab641cd22d2cd30d2999cc77040

                                                              SHA1

                                                              d293601583b1454ad5415260e4378217d569538e

                                                              SHA256

                                                              04400db77d925de5b0264f6db5b44fe6f8b94f9419ad3473caaa8065c525c0be

                                                              SHA512

                                                              278ff929904be0c19ee5fb836f205e3e5b3e7cec3d26dd42bbf1e7e0ca891bf9c42d2b28fce3741ae92e4a924baf7490c7c6c59284127081015a82e2653e0764

                                                            • C:\Program Files\nodejs\node_modules\npm\node_modules\minizlib\node_modules\minipass\index.js
                                                              Filesize

                                                              16KB

                                                              MD5

                                                              bc0c0eeede037aa152345ab1f9774e92

                                                              SHA1

                                                              56e0f71900f0ef8294e46757ec14c0c11ed31d4e

                                                              SHA256

                                                              7a395802fbe01bb3dc8d09586e0864f255874bf897378e546444fbaec29f54c5

                                                              SHA512

                                                              5f31251825554bf9ed99eda282fa1973fcec4a078796a10757f4fb5592f2783c4ebdd00bdf0d7ed30f82f54a7668446a372039e9d4589db52a75060ca82186b3

                                                            • C:\Program Files\nodejs\node_modules\npm\node_modules\nopt\LICENSE
                                                              Filesize

                                                              780B

                                                              MD5

                                                              b020de8f88eacc104c21d6e6cacc636d

                                                              SHA1

                                                              20b35e641e3a5ea25f012e13d69fab37e3d68d6b

                                                              SHA256

                                                              3f24d692d165989cd9a00fe35ca15a2bc6859e3361fa42aa20babd435f2e4706

                                                              SHA512

                                                              4220617e29dd755ad592295bc074d6bc14d44a1feeed5101129669f3ecf0e34eaa4c7c96bbc83da7352631fa262baab45d4a370dad7dabec52b66f1720c28e38

                                                            • C:\Program Files\nodejs\node_modules\npm\node_modules\promise-all-reject-late\LICENSE
                                                              Filesize

                                                              763B

                                                              MD5

                                                              7428aa9f83c500c4a434f8848ee23851

                                                              SHA1

                                                              166b3e1c1b7d7cb7b070108876492529f546219f

                                                              SHA256

                                                              1fccd0ad2e7e0e31ddfadeaf0660d7318947b425324645aa85afd7227cab52d7

                                                              SHA512

                                                              c7f01de85f0660560206784cdf159b2bdc5f1bc87131f5a8edf384eba47a113005491520b0a25d3cc425985b5def7b189e18ff76d7d562c434dc5d8c82e90cce

                                                            • C:\Program Files\nodejs\node_modules\npm\node_modules\tar\node_modules\fs-minipass\node_modules\minipass\index.d.ts
                                                              Filesize

                                                              4KB

                                                              MD5

                                                              f0bd53316e08991d94586331f9c11d97

                                                              SHA1

                                                              f5a7a6dc0da46c3e077764cfb3e928c4a75d383e

                                                              SHA256

                                                              dd3eda3596af30eda88b4c6c2156d3af6e7fa221f39c46e492c5e9fb697e2fef

                                                              SHA512

                                                              fd6affbaed67d09cf45478f38e92b8ca6c27650a232cbbeaff36e4f7554fb731ae44cf732378641312e98221539e3d8fabe80a7814e4f425026202de44eb5839

                                                            • C:\Program Files\nodejs\node_modules\npm\node_modules\treeverse\LICENSE
                                                              Filesize

                                                              771B

                                                              MD5

                                                              1d7c74bcd1904d125f6aff37749dc069

                                                              SHA1

                                                              21e6dfe0fffc2f3ec97594aa261929a3ea9cf2ab

                                                              SHA256

                                                              24b8d53712087b867030d18f2bd6d1a72c78f9fb4dee0ce025374da25e4443b9

                                                              SHA512

                                                              b5ac03addd29ba82fc05eea8d8d09e0f2fa9814d0dd619c2f7b209a67d95b538c3c2ff70408641ef3704f6a14e710e56f4bf57c2bb3f8957ba164f28ee591778

                                                            • C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Node.js\Node.js documentation.url
                                                              Filesize

                                                              168B

                                                              MD5

                                                              db7dbbc86e432573e54dedbcc02cb4a1

                                                              SHA1

                                                              cff9cfb98cff2d86b35dc680b405e8036bbbda47

                                                              SHA256

                                                              7cf8a9c96f9016132be81fd89f9573566b7dc70244a28eb59d573c2fdba1def9

                                                              SHA512

                                                              8f35f2e7dac250c66b209acecab836d3ecf244857b81bacebc214f0956ec108585990f23ff3f741678e371b0bee78dd50029d0af257a3bb6ab3b43df1e39f2ec

                                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                              Filesize

                                                              152B

                                                              MD5

                                                              b704c9ca0493bd4548ac9c69dc4a4f27

                                                              SHA1

                                                              a3e5e54e630dabe55ca18a798d9f5681e0620ba7

                                                              SHA256

                                                              2ebd5229b9dc642afba36a27c7ac12d90196b1c50985c37e94f4c17474e15411

                                                              SHA512

                                                              69c8116fb542b344a8c55e2658078bd3e0d3564b1e4c889b072dbc99d2b070dacbc4394dedbc22a4968a8cf9448e71f69ec71ded018c1bacc0e195b3b3072d32

                                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                              Filesize

                                                              152B

                                                              MD5

                                                              477462b6ad8eaaf8d38f5e3a4daf17b0

                                                              SHA1

                                                              86174e670c44767c08a39cc2a53c09c318326201

                                                              SHA256

                                                              e6bbd4933b9baa1df4bb633319174de07db176ec215e71c8568d27c5c577184d

                                                              SHA512

                                                              a0acc2ef7fd0fcf413572eeb94d1e38aa6a682195cc03d6eaaaa0bc9e5f4b2c0033da0b835f4617aebc52069d0a10b52fc31ed53c2fe7943a480b55b7481dd4e

                                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                              Filesize

                                                              265B

                                                              MD5

                                                              ee77ee0ddce6df6a4cf39b6d19ea6b4c

                                                              SHA1

                                                              d5407a3c365266b7a794e647bc17ed9e06b4389f

                                                              SHA256

                                                              79a078c39145a1dc1c27c15f05bb7a39bdaf7aec14fd85a2dcfd36b95a3f5b36

                                                              SHA512

                                                              1841689b05aab9ba73ac48bb390c148e92d218b07da6b89bbec900bcb84055fe2080115545933d495f6e8f2506497af930fbab1c68cf65ff080f2d5a61b30eeb

                                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                              Filesize

                                                              111B

                                                              MD5

                                                              807419ca9a4734feaf8d8563a003b048

                                                              SHA1

                                                              a723c7d60a65886ffa068711f1e900ccc85922a6

                                                              SHA256

                                                              aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

                                                              SHA512

                                                              f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

                                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                              Filesize

                                                              6KB

                                                              MD5

                                                              40b5e315b3e982ca2fde6e6150d6d013

                                                              SHA1

                                                              28367cbdd341b234052fd7a289b430e4205c7de1

                                                              SHA256

                                                              49815d1be86c1c5351a70e5ce34958537a1544415e9459ee3bea604ff1ee2fce

                                                              SHA512

                                                              780f64a6fa4ff167409465041a92445532891ba59935f1753d1215e52663cb61f4743059d54555d1617d1ae83c557d3184674e147e0f58130dfd66ae84915368

                                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                              Filesize

                                                              6KB

                                                              MD5

                                                              18d746cfb9cdb599fb97a24ca6aa8b27

                                                              SHA1

                                                              19efcc833ffb23e1f24b961092c363057aa58407

                                                              SHA256

                                                              0bb428283461f36f4c124da0317e4aa36ccd54126ce961c826d362ea2512f03a

                                                              SHA512

                                                              609ff178c7ff0c7ca0f36e2b1addc1604115446fcbf592eb53c42cf5d2d4664dfc595dd1063962610ef11c11ae620d961cd1d0fdf1e62bc29728232a9c32c939

                                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
                                                              Filesize

                                                              16B

                                                              MD5

                                                              46295cac801e5d4857d09837238a6394

                                                              SHA1

                                                              44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                              SHA256

                                                              0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                              SHA512

                                                              8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
                                                              Filesize

                                                              16B

                                                              MD5

                                                              206702161f94c5cd39fadd03f4014d98

                                                              SHA1

                                                              bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                                              SHA256

                                                              1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                                              SHA512

                                                              0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                              Filesize

                                                              11KB

                                                              MD5

                                                              0e4207d7a76bab99efb5957cd89ec350

                                                              SHA1

                                                              bdfcd0c8311332720bb8f2146d087eceb573b802

                                                              SHA256

                                                              a520da8c161ad84011ff1e14a2bcce20b941bf7e54e281ab89f96f2e43207a43

                                                              SHA512

                                                              4a6e25993aae421451320480b049724b48af029a463162dfa284d04c966e6ab7fa8249b80edbb73ff6932b6897f15b47b18ea247378b71e47e676f9424aabfe0

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Microsoft.Web.WebView2.Core.dll
                                                              Filesize

                                                              488KB

                                                              MD5

                                                              851fee9a41856b588847cf8272645f58

                                                              SHA1

                                                              ee185a1ff257c86eb19d30a191bf0695d5ac72a1

                                                              SHA256

                                                              5e7faee6b8230ca3b97ce9542b914db3abbbd1cb14fd95a39497aaad4c1094ca

                                                              SHA512

                                                              cf5c70984cf33e12cf57116da1f282a5bd6433c570831c185253d13463b0b9a0b9387d4d1bf4dddab3292a5d9ba96d66b6812e9d7ebc5eb35cb96eea2741348f

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Microsoft.Web.WebView2.WinForms.dll
                                                              Filesize

                                                              37KB

                                                              MD5

                                                              4cf94ffa50fd9bdc0bb93cceaede0629

                                                              SHA1

                                                              3e30eca720f4c2a708ec53fd7f1ba9e778b4f95f

                                                              SHA256

                                                              50b2e46c99076f6fa9c33e0a98f0fe3a2809a7c647bb509066e58f4c7685d7e6

                                                              SHA512

                                                              dc400518ef2f68920d90f1ce66fbb8f4dde2294e0efeecd3d9329aa7a66e1ab53487b120e13e15f227ea51784f90208c72d7fbfa9330d9b71dd9a1a727d11f98

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Microsoft.Web.WebView2.Wpf.dll
                                                              Filesize

                                                              43KB

                                                              MD5

                                                              34ec990ed346ec6a4f14841b12280c20

                                                              SHA1

                                                              6587164274a1ae7f47bdb9d71d066b83241576f0

                                                              SHA256

                                                              1e987b22cd011e4396a0805c73539586b67df172df75e3dded16a77d31850409

                                                              SHA512

                                                              b565015ca4b11b79ecbc8127f1fd40c986948050f1caefdd371d34ed2136af0aabf100863dc6fd16d67e3751d44ee13835ea9bf981ac0238165749c4987d1ae0

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\get-intrinsic\.nycrc
                                                              Filesize

                                                              139B

                                                              MD5

                                                              d0104f79f0b4f03bbcd3b287fa04cf8c

                                                              SHA1

                                                              54f9d7adf8943cb07f821435bb269eb4ba40ccc2

                                                              SHA256

                                                              997785c50b0773e5e18bf15550fbf57823c634fefe623cd37b3c83696402ad0a

                                                              SHA512

                                                              daf9b5445cfc02397f398adfa0258f2489b70699dfec6ca7e5b85afe5671fdcabe59edee332f718f5e5778feb1e301778dffe93bb28c1c0914f669659bad39c6

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\has-proto\.eslintrc
                                                              Filesize

                                                              43B

                                                              MD5

                                                              c28b0fe9be6e306cc2ad30fe00e3db10

                                                              SHA1

                                                              af79c81bd61c9a937fca18425dd84cdf8317c8b9

                                                              SHA256

                                                              0694050195fc694c5846b0a2a66b437ac775da988f0a779c55fb892597f7f641

                                                              SHA512

                                                              e3eca17804522ffa4f41e836e76e397a310a20e8261a38115b67e8b644444153039d04198fb470f45be2997d2c7a72b15bd4771a02c741b3cbc072ea6ef432e9

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\hasown\.nycrc
                                                              Filesize

                                                              216B

                                                              MD5

                                                              c2ab942102236f987048d0d84d73d960

                                                              SHA1

                                                              95462172699187ac02eaec6074024b26e6d71cff

                                                              SHA256

                                                              948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a

                                                              SHA512

                                                              e36b20c16ceeb090750f3865efc8d7fd983ae4e8b41c30cc3865d2fd4925bf5902627e1f1ed46c0ff2453f076ef9de34be899ef57754b29cd158440071318479

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Monaco\fileaccess\node_modules\vary\LICENSE
                                                              Filesize

                                                              1KB

                                                              MD5

                                                              13babc4f212ce635d68da544339c962b

                                                              SHA1

                                                              4881ad2ec8eb2470a7049421047c6d076f48f1de

                                                              SHA256

                                                              bd47ce7b88c7759630d1e2b9fcfa170a0f1fde522be09e13fb1581a79d090400

                                                              SHA512

                                                              40e30174433408e0e2ed46d24373b12def47f545d9183b7bce28d4ddd8c8bb528075c7f20e118f37661db9f1bba358999d81a14425eb3e0a4a20865dfcb53182

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\WebView2Loader.dll
                                                              Filesize

                                                              133KB

                                                              MD5

                                                              a0bd0d1a66e7c7f1d97aedecdafb933f

                                                              SHA1

                                                              dd109ac34beb8289030e4ec0a026297b793f64a3

                                                              SHA256

                                                              79d7e45f8631e8d2541d01bfb5a49a3a090be72b3d465389a2d684680fee2e36

                                                              SHA512

                                                              2a50ae5c7234a44b29f82ebc2e3cfed37bf69294eb00b2dc8905c61259975b2f3a059c67aeab862f002752454d195f7191d9b82b056f6ef22d6e1b0bb3673d50

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\Wpf.Ui.dll
                                                              Filesize

                                                              5.2MB

                                                              MD5

                                                              aead90ab96e2853f59be27c4ec1e4853

                                                              SHA1

                                                              43cdedde26488d3209e17efff9a51e1f944eb35f

                                                              SHA256

                                                              46cfbe804b29c500ebc0b39372e64c4c8b4f7a8e9b220b5f26a9adf42fcb2aed

                                                              SHA512

                                                              f5044f2ee63906287460b9adabfcf3c93c60b51c86549e33474c4d7f81c4f86cd03cd611df94de31804c53006977874b8deb67c4bf9ea1c2b70c459b3a44b38d

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\bin\path.txt
                                                              Filesize

                                                              34B

                                                              MD5

                                                              0e2184f1c7464b6617329fb18f107b4f

                                                              SHA1

                                                              6f22f98471e33c9db10d6f6f1728e98852e25b8f

                                                              SHA256

                                                              dbf5f44e1b84a298dbbcad3c31a617d2f6cfa08eb5d16e05a5c28726c574d4eb

                                                              SHA512

                                                              8e745c0215d52e15702551f29efb882a5eba97b5f279ccc29293b1a9b1b8661bf71b548569f9a99fa35c35a15d1b6b288d3c381c1292418c36dc89e2fa0b3a37

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.dll
                                                              Filesize

                                                              4.1MB

                                                              MD5

                                                              c2bde3ba169916206ef61ce2af29abd5

                                                              SHA1

                                                              9ea8cc423fdd68280988d94f2eac468e445d34f8

                                                              SHA256

                                                              2099337afdfc49b325763e2e741253aac15c195e0010039a625459e8ea1ac526

                                                              SHA512

                                                              442e5935be20dd345fb9940113a7db2e06649eb36fc79a4b7128e3054c8a27a34c62b826397b2d46810ea32f3b2d8367bb375b7996019fcbc2d400dff5f21ca0

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe
                                                              Filesize

                                                              86KB

                                                              MD5

                                                              d213a75b1956398e4c36bcc2f93339bf

                                                              SHA1

                                                              6a2739cc0e67f5593c744fbcbc8f00f12eef9954

                                                              SHA256

                                                              ece75d080f94df4b3699389021337b1536cfed229d1325f09b03f0b0d6d85ab4

                                                              SHA512

                                                              d32ddaf4c6f8f8df6c390d683e6c039f3b0d8f35f68f690b28bf88b17caedf0e11abd3aeb2e46238d0cd0a91b2db095cca0782b4e27f04453ea4cb6db38f4dd7

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.8\protocols.json
                                                              Filesize

                                                              3KB

                                                              MD5

                                                              6bbb18bb210b0af189f5d76a65f7ad80

                                                              SHA1

                                                              87b804075e78af64293611a637504273fadfe718

                                                              SHA256

                                                              01594d510a1bbc016897ec89402553eca423dfdc8b82bafbc5653bf0c976f57c

                                                              SHA512

                                                              4788edcfa3911c3bb2be8fc447166c330e8ac389f74e8c44e13238ead2fa45c8538aee325bd0d1cc40d91ad47dea1aa94a92148a62983144fdecff2130ee120d

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Crashpad\settings.dat
                                                              Filesize

                                                              280B

                                                              MD5

                                                              f49a215a15d06e4a02a0e074a9420248

                                                              SHA1

                                                              d495f65d1cf3cd1c243efc0e212e6a98ed029119

                                                              SHA256

                                                              f0c716b462a859f052f467ac1619fb5183935eed372e17290d85fae3038d15ef

                                                              SHA512

                                                              4c29d4c94da389c33debe683029f42b77d7b64f04c48f484b816d389494cd01f47ead5f5c968c42cc0d54f6856c80ebe1b5b751f04c6d2f80c2c11534db50336

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Crashpad\settings.dat
                                                              Filesize

                                                              280B

                                                              MD5

                                                              936d9730d984c3af4a2397deb76a2a9c

                                                              SHA1

                                                              9497265f03c3998c803f12cc84d599a50ba90d33

                                                              SHA256

                                                              85e8e020ed45d647d14fd345387068d18169cf29aa0608ce29b5ac56864d7f0d

                                                              SHA512

                                                              4970513defe0c898ee9a9478c674ea76b7c769cf3b4f063f229f61ede6e3757eb7251f42edfc543ddaa84513e16ff324fceb9d2b96596c5bd6e6d22b1c585c9f

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Crashpad\throttle_store.dat
                                                              Filesize

                                                              20B

                                                              MD5

                                                              9e4e94633b73f4a7680240a0ffd6cd2c

                                                              SHA1

                                                              e68e02453ce22736169a56fdb59043d33668368f

                                                              SHA256

                                                              41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304

                                                              SHA512

                                                              193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_0
                                                              Filesize

                                                              8KB

                                                              MD5

                                                              cf89d16bb9107c631daabf0c0ee58efb

                                                              SHA1

                                                              3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                                                              SHA256

                                                              d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                                                              SHA512

                                                              8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_1
                                                              Filesize

                                                              264KB

                                                              MD5

                                                              d0d388f3865d0523e451d6ba0be34cc4

                                                              SHA1

                                                              8571c6a52aacc2747c048e3419e5657b74612995

                                                              SHA256

                                                              902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b

                                                              SHA512

                                                              376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_2
                                                              Filesize

                                                              8KB

                                                              MD5

                                                              0962291d6d367570bee5454721c17e11

                                                              SHA1

                                                              59d10a893ef321a706a9255176761366115bedcb

                                                              SHA256

                                                              ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                                                              SHA512

                                                              f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_3
                                                              Filesize

                                                              8KB

                                                              MD5

                                                              41876349cb12d6db992f1309f22df3f0

                                                              SHA1

                                                              5cf26b3420fc0302cd0a71e8d029739b8765be27

                                                              SHA256

                                                              e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                                                              SHA512

                                                              e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Default\Network\Network Persistent State
                                                              Filesize

                                                              1KB

                                                              MD5

                                                              d85ba8a192a38b7c33f335bd11c09006

                                                              SHA1

                                                              a93ebed6a3e674623be898c6e82f629ef7060e82

                                                              SHA256

                                                              aa76184c883943f54a172e19285c4246acbde08e80094a9331f6df10890e8728

                                                              SHA512

                                                              dd745e45e0d0bc2314f8200df6d5afc8753fbfed68cafec5ab64f87f442e8701dfaf5713702c097512a2280172fd3fe0a0a077b4dc3f2a8d0daabb7489564042

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Default\Network\Network Persistent State~RFe58e059.TMP
                                                              Filesize

                                                              59B

                                                              MD5

                                                              2800881c775077e1c4b6e06bf4676de4

                                                              SHA1

                                                              2873631068c8b3b9495638c865915be822442c8b

                                                              SHA256

                                                              226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

                                                              SHA512

                                                              e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                                                              Filesize

                                                              2B

                                                              MD5

                                                              d751713988987e9331980363e24189ce

                                                              SHA1

                                                              97d170e1550eee4afc0af065b78cda302a97674c

                                                              SHA256

                                                              4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                                              SHA512

                                                              b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Default\Preferences
                                                              Filesize

                                                              6KB

                                                              MD5

                                                              24ce50cdc1f5d7a36ee34e85d3b7e3b8

                                                              SHA1

                                                              189b3941a11d19c53d34a1ac25048925f1671be7

                                                              SHA256

                                                              4c84834d4e35e708f3b4cd304db283bb89a9b45ad99f58b505cd9b9bacc359f2

                                                              SHA512

                                                              4e9212606caf72b5175ce833f7604ef75b9e3a42520ac7a58f567e8a4a11bf735639cb62ae55483a3646e1df1f30c8f8efd70d92a7675cf25de35686f4aadf5b

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
                                                              Filesize

                                                              41B

                                                              MD5

                                                              5af87dfd673ba2115e2fcf5cfdb727ab

                                                              SHA1

                                                              d5b5bbf396dc291274584ef71f444f420b6056f1

                                                              SHA256

                                                              f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                                              SHA512

                                                              de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Default\ded9204c-9df1-45da-b27a-de66058fa827.tmp
                                                              Filesize

                                                              6KB

                                                              MD5

                                                              1b48d31c9b27fa422371697764380d70

                                                              SHA1

                                                              0ac202cd7f44bb46c85f65e90d8989b0d236872c

                                                              SHA256

                                                              c54817c27a96908285f22db6703ff33876bb39ddb59e8bbe8568cb6ff74df11f

                                                              SHA512

                                                              152b4fc0413651886ab3535c22d7f3d5e6ecc7647a5dc1f47f5e62b47c7bcf5706a61b30d58e19e634f350c530e35620ccbb68bf964c119af74358955151a206

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Local State
                                                              Filesize

                                                              2KB

                                                              MD5

                                                              cf90ce45100965420fac7a82b2ee95b8

                                                              SHA1

                                                              dc233c73e177d83ca5953afdae39db380b35ec64

                                                              SHA256

                                                              8ce9a87089afe44f84eaf7a96c819cddd0dce87fc727f0d603ce9fd10b3f5ede

                                                              SHA512

                                                              b5bb62a96a2d7b0055ef2c98a442687d4e88ab96603967fa88ddcd5d31e1d88025956eb4dfa394ce958684d0b5873638fc601e0c1b579d9d4036da56b7a1b5a2

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Local State
                                                              Filesize

                                                              3KB

                                                              MD5

                                                              faea2d5cd43834be69ec4629c4456e95

                                                              SHA1

                                                              1df0466c5aaefebb099c3983ba3588b230cb1835

                                                              SHA256

                                                              7f18083372b5df98065d6c860cac1e70f71442b66d60c4017dc4d32aa2731eeb

                                                              SHA512

                                                              10b9dece0f52134d1874c86cbadfbaf56bb8ea40b8fda06c136f83e1642544fc5e37b95a390ac606c7aa58332a029f59b4caae5e43f9de9881de24fa43d24083

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Local State
                                                              Filesize

                                                              16KB

                                                              MD5

                                                              085e1ddb6faac30fe4c40363750e5b42

                                                              SHA1

                                                              f5536600065a90c393f4b03bd33c4bfe6175f3a4

                                                              SHA256

                                                              f61a34b32598adb2a91c2c5f781223bd4d193f816d1ed780d54478d4053bea3f

                                                              SHA512

                                                              f5a8da8a544164ca4b2b3a0d705695aaa96f10e81c8a5ecd30cff61805113e93bfc1dfc379532b68f19e2d9e30ccf4783e4bb35be021600417bdd5496db604a2

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Local State
                                                              Filesize

                                                              18KB

                                                              MD5

                                                              6bf5a5ea303d50f7713895f236c89f1c

                                                              SHA1

                                                              a6c5ea1c4a41e0fa738546b391112c0980f07775

                                                              SHA256

                                                              2c4ed10fe093845fcf635a7779b71567270c3dc9909dc40c48090dd3734ce45a

                                                              SHA512

                                                              59e4be62a5b111c4cd21daebe8ff2a4765a08fef31c92fce49ba529555b9de46fe2960afa2a6fe086498af61210212108b840caa24217e1f46c92211f4be52ab

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Local State~RFe57caf1.TMP
                                                              Filesize

                                                              1KB

                                                              MD5

                                                              0e878d974c4fd299b3ed85384fe72f4a

                                                              SHA1

                                                              00fb284752635027375bdaa7f79acb6d4872f416

                                                              SHA256

                                                              8d30fff39e1465bfa9ec5a5cd394ffd3f16c82b323b928586884bced1e178b07

                                                              SHA512

                                                              8ac020e48433ef29f8f4e952fd868dcec4f3dbaab4f328050a8b2a25cc5a2090aa71f8c56fe3e9509fdae1ca616df246ad3fe2d02c9d19703a583b8c0b36ee4e

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\PKIMetadata\13.0.0.0\crs.pb
                                                              Filesize

                                                              278KB

                                                              MD5

                                                              981a9155cad975103b6a26acef33a866

                                                              SHA1

                                                              1965290a94d172c4def1ac7199736c26dccca33e

                                                              SHA256

                                                              971393390616fbe53c63865274a40a0b4a8e731c529664275bdc764f09a28e2d

                                                              SHA512

                                                              2d75ce25cb3a78f69f90fbd23f6e5c9f1a6ed92025f83ce0ab3e0320b64130d586fc2cd960f763e1ab2c82d35ef9650ebd7ff2a42a928a293e0e7428cc669119

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\PKIMetadata\13.0.0.0\kp_pinslist.pb
                                                              Filesize

                                                              11KB

                                                              MD5

                                                              d43d041e531dc757a69a90cb657ef437

                                                              SHA1

                                                              09138b427565bc276cfd3ba9f59b0c8bad78e91d

                                                              SHA256

                                                              9431360a5534ad2f8eddde157cce39704b99da035fcb6d2cca11220700b11ccb

                                                              SHA512

                                                              476a98122059b9cc19492b7ae557c61381842c8c347f85c686e0a493bfd0e8707ce3491b690e7978b3fb7d7d2a4daa2767e4a590398a50562519bf32e8d12ec6

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.52\Filtering Rules
                                                              Filesize

                                                              1.8MB

                                                              MD5

                                                              a97ea939d1b6d363d1a41c4ab55b9ecb

                                                              SHA1

                                                              3669e6477eddf2521e874269769b69b042620332

                                                              SHA256

                                                              97115a369f33b66a7ffcfb3d67c935c1e7a24fc723bb8380ad01971c447cfa9f

                                                              SHA512

                                                              399cb37e5790effcd4d62b9b09f706c4fb19eb2ab220f1089698f1e1c6f1efdd2f55d9f4c6d58ddbcc64d7a7cf689ab0dbbfae52ce96d5baa53c43775e018279

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.52\LICENSE
                                                              Filesize

                                                              24KB

                                                              MD5

                                                              aad9405766b20014ab3beb08b99536de

                                                              SHA1

                                                              486a379bdfeecdc99ed3f4617f35ae65babe9d47

                                                              SHA256

                                                              ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d

                                                              SHA512

                                                              bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Mu\Advertising
                                                              Filesize

                                                              24KB

                                                              MD5

                                                              131857baba78228374284295fcab3d66

                                                              SHA1

                                                              180e53e0f9f08745f28207d1f7b394455cf41543

                                                              SHA256

                                                              b1666e1b3d0b31e147dc047e0e1c528939a53b419c6be4c8278ee30a0a2dbd49

                                                              SHA512

                                                              c84c3794af8a3a80bb8415f18d003db502e8cb1d04b555f1a7eef8977c9f24e188ae28fc4d3223b52eab4046342b2f8fd0d7461130f3636609214a7b57f49cb4

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Mu\Analytics
                                                              Filesize

                                                              4KB

                                                              MD5

                                                              da298eacf42b8fd3bf54b5030976159b

                                                              SHA1

                                                              a976f4f5e2d81f80dc0e8a10595190f35e9d324b

                                                              SHA256

                                                              3abd2e1010e8824f200878942e0850d6e2620a2f0f15b87d32e2451fdda962ec

                                                              SHA512

                                                              5bf24c2df7cc12c91d1fb47802dbac283244c1010baa68bfae9eb5eb8ee25758156bb1e21f6cc3f55e7d71e5c330888ffd41469b2630eb86237c9970d7ede75e

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Mu\CompatExceptions
                                                              Filesize

                                                              689B

                                                              MD5

                                                              108de320dc5348d3b6af1f06a4374407

                                                              SHA1

                                                              90aa226d3c9d50cf4435ecdd2b8b0086d8edeb8b

                                                              SHA256

                                                              5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53

                                                              SHA512

                                                              70f30c45e20b7cddd0cba6476af9338975cec8e40b8b19603af5fa859a34c6eb2138957daaa263633fe65213e2186402d05d9d29ad53e8f311335555116314c2

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Mu\Content
                                                              Filesize

                                                              6KB

                                                              MD5

                                                              97ea4c3bfaadcb4b176e18f536d8b925

                                                              SHA1

                                                              61f2eae05bf91d437da7a46a85cbaa13d5a7c7af

                                                              SHA256

                                                              72ec1479e9cc7f90cf969178451717966c844889b715dff05d745915904b9554

                                                              SHA512

                                                              5a82729fd2dce487d5f6ac0c34c077228bee5db55bf871d300fcbbd2333b1ee988d5f20ef4d8915d601bd9774e6fa782c8580edca24a100363c0cdce06e5503f

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Mu\Cryptomining
                                                              Filesize

                                                              1KB

                                                              MD5

                                                              16779f9f388a6dbefdcaa33c25db08f6

                                                              SHA1

                                                              d0bfd4788f04251f4f2ac42be198fb717e0046ae

                                                              SHA256

                                                              75ad2a4d85c1314632e3ac0679169ba92ef0a0f612f73a80fdd0bc186095b639

                                                              SHA512

                                                              abd55eff87b4445694b3119176007f71cf71c277f20ea6c4dcadfb027fdce78f7afbcf7a397bd61bd2fa4bc452e03087a9e0e8b9cc5092ec2a631c1ebb00ee25

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Mu\Entities
                                                              Filesize

                                                              68KB

                                                              MD5

                                                              571c13809cc4efaff6e0b650858b9744

                                                              SHA1

                                                              83e82a841f1565ad3c395cbc83cb5b0a1e83e132

                                                              SHA256

                                                              ab204851f39da725b5a73b040519c2e6aaf52cb7a537c75802cb25248d02ec1b

                                                              SHA512

                                                              93ff4625866abf7cd96324528df2f56ecb358235ff7e63438ac37460aeb406a5fb97084e104610bb1d7c2e8693cabedc6239b95449e9abb90252a353038cb2a2

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Mu\Fingerprinting
                                                              Filesize

                                                              1KB

                                                              MD5

                                                              b46196ad79c9ef6ddacc36b790350ca9

                                                              SHA1

                                                              3df9069231c232fe8571a4772eb832fbbe376c23

                                                              SHA256

                                                              a918dd0015bcd511782ea6f00eed35f77456944981de7fd268471f1d62c7eaa3

                                                              SHA512

                                                              61d6da8ee2ca07edc5d230bdcbc5302a2c6e3a9823e95ccfd3896d2e09a0027fece76f2c1ea54e8a8c4fa0e3cf885b35f3ff2e6208bf1d2a2757f2cbcdf01039

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Mu\LICENSE
                                                              Filesize

                                                              34KB

                                                              MD5

                                                              d32239bcb673463ab874e80d47fae504

                                                              SHA1

                                                              8624bcdae55baeef00cd11d5dfcfa60f68710a02

                                                              SHA256

                                                              8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903

                                                              SHA512

                                                              7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Mu\Other
                                                              Filesize

                                                              34B

                                                              MD5

                                                              cd0395742b85e2b669eaec1d5f15b65b

                                                              SHA1

                                                              43c81d1c62fc7ff94f9364639c9a46a0747d122e

                                                              SHA256

                                                              2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707

                                                              SHA512

                                                              4df2ce734e2f7bc5f02bb7845ea801b57dcf649565dd94b1b71f578b453ba0a17c61ccee73e7cff8f23cdd6aa37e55be5cb15f4767ff88a9a06de3623604fbf0

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Mu\Social
                                                              Filesize

                                                              355B

                                                              MD5

                                                              4c817c4cb035841975c6738aa05742d9

                                                              SHA1

                                                              1d89da38b339cd9a1aadfc824ed8667018817d4e

                                                              SHA256

                                                              4358939a5a0b4d51335bf8f4adb43de2114b54f3596f9e9aacbdb3e52bef67e6

                                                              SHA512

                                                              fa8e1e8aa00bf83f16643bf6a22c63649402efe70f13cd289f51a6c1172f504fedd7b63fc595fb867ecb9d235b8a0ea032b03d861ebb145f0f6a7d5629df8486

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Mu\TransparentAdvertisers
                                                              Filesize

                                                              105B

                                                              MD5

                                                              57d5a3548911886de2f3bd3172e808ed

                                                              SHA1

                                                              ca932af3b25f245ce931fbc6cf10299e5fbe35a7

                                                              SHA256

                                                              d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c

                                                              SHA512

                                                              933194509d305b2a60b38c149ba1d74e142ef15647242b287844d263006d33ffa38b6ea263c89cb821a9277d41f0cfda95a0eda830f3a5ef8df5ba80d3bbc818

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Sigma\Advertising
                                                              Filesize

                                                              2KB

                                                              MD5

                                                              326ddffc1f869b14073a979c0a34d34d

                                                              SHA1

                                                              df08e9d94ad0fad7cc7d2d815ee7d8b82ec26e63

                                                              SHA256

                                                              d4201efd37aec4552e7aa560a943b4a8d10d08af19895e6a70991577609146fb

                                                              SHA512

                                                              3822e64ca9cf23e50484afcc2222594b4b2c7cd8c4e411f557abea851ae7cbd57f10424c0c9d8b0b6a5435d6f28f3b124c5bc457a239f0a2f0caf433b01da83f

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Sigma\Analytics
                                                              Filesize

                                                              432B

                                                              MD5

                                                              01f1f3c305218510ccd9aaa42aee9850

                                                              SHA1

                                                              fbf3e681409d9fb4d36cba1f865b5995de79118c

                                                              SHA256

                                                              62d7286cd7f74bdfda830ee5a48bce735ee3661bda8ceac9903b5627cbd0b620

                                                              SHA512

                                                              e5b665e981f702a4a211d0569bb0bc42e3c29b76b3f75aaf8dc173f16f18f7c443f5cf0ccf1550df3aa2b151e607969c2c90ab1a6e7a910dfeb83854cea4e690

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Sigma\Content
                                                              Filesize

                                                              48B

                                                              MD5

                                                              7b0b4a9aafc18cf64f4d4daf365d2d8d

                                                              SHA1

                                                              e9ed1ecbec6cccfefe00f9718c93db3d66851494

                                                              SHA256

                                                              0b55eb3f97535752d3c1ef6cebe614b9b67dddfcfd3c709b84c6ecad6d105d43

                                                              SHA512

                                                              a579069b026ed2aaef0bd18c3573c77bfb5e0e989c37c64243b12ee4e59635aaa9d9c9746f82dcc16ca85f091ec4372c63e294c25e48dfffbed299567149c4e2

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Sigma\Cryptomining
                                                              Filesize

                                                              32B

                                                              MD5

                                                              4ec1eda0e8a06238ff5bf88569964d59

                                                              SHA1

                                                              a2e78944fcac34d89385487ccbbfa4d8f078d612

                                                              SHA256

                                                              696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5

                                                              SHA512

                                                              c9b1ed7b61f26d94d7f5eded2d42d40f3e4300eee2319fe28e04b25cdb6dd92daf67828bff453bf5fc8d7b6ceb58cab319fc0daac9b0050e27a89efe74d2734e

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Sigma\Entities
                                                              Filesize

                                                              42KB

                                                              MD5

                                                              f446eb7054a356d9e803420c8ec41256

                                                              SHA1

                                                              98a1606a2ba882106177307ae11ec76cfb1a07ee

                                                              SHA256

                                                              4dc67d4b882621a93ffdb21a198a48a0bc491148c91208cf440af5f0de3ef640

                                                              SHA512

                                                              3cc3a521b297e4f48ed4ba29866a5ade380c9f0c06d85bea4140e24b05c6762d645df3d03d0a7058383b559baa3ae34ad3ed2b06017e91a061632862911a823b

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Sigma\Fingerprinting
                                                              Filesize

                                                              172B

                                                              MD5

                                                              3852430540e0356d1ba68f31be011533

                                                              SHA1

                                                              d3f622450bcf0ced36d9d9c0aad630ebccfcb7ff

                                                              SHA256

                                                              f1f413704c32a28a31a646f60cad36cc2da793e143f70eee72ae56f736df8054

                                                              SHA512

                                                              7a4faa493c141ea88d6cd933dfc0b50ef6d25983323db2b931c7512e039859d60c4935e56b771264ca72b45c035b1962ad8680d616eaaf04fbc5a6e0b674e435

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Sigma\LICENSE
                                                              Filesize

                                                              66B

                                                              MD5

                                                              5b7baf861a48c045d997992424b5877b

                                                              SHA1

                                                              2b2bd9a13afe49748abf39faf9eb29ed658f066e

                                                              SHA256

                                                              44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51

                                                              SHA512

                                                              4820b41aa5ff4d934a583e1f0b93b1512631102bb2dfdb74792a2f0dcf9907da7680c02a5ddd2492a1e6d58cdada3453d9e38bb8deab6ce831ff36a7f8de016c

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Sigma\Other
                                                              Filesize

                                                              91B

                                                              MD5

                                                              09cedaa60eab8c7d7644d81cf792fe76

                                                              SHA1

                                                              e68e199c88ea96fcb94b720f300f7098b65d1858

                                                              SHA256

                                                              c8505ea2fe1b8f81a1225e4214ad07d8d310705be26b3000d7df8234e0d1f975

                                                              SHA512

                                                              564f8e5c85208adabb4b10763084b800022bb6d6d74874102e2f49cc8f17899ce18570af1f462aa592a911e49086a2d1c2d750b601eedd2f61d1731689a0a403

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Sigma\Social
                                                              Filesize

                                                              3KB

                                                              MD5

                                                              318801ce3611c0d25c65b809dd9b5b3c

                                                              SHA1

                                                              b9d07f2aa9da1d83180dc24459093e20fe9cf1d8

                                                              SHA256

                                                              2458da5d79b393459520e1319937cfc39caadbc2294f175659fae5df804e1d03

                                                              SHA512

                                                              7daff0253da90f35bf00141b53d39c7cadacf451a7ecf1667c4ca6e8aed59a0c4a6b44ddc2afffa690e12c2134eddb9f46f72e4317ce99c307d9e524a5fd1103

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\Sigma\Staging
                                                              Filesize

                                                              16KB

                                                              MD5

                                                              39bdf35ac4557a2d2a4efdeeb038723e

                                                              SHA1

                                                              9703ca8af3432b851cb5054036de32f8ba7b083f

                                                              SHA256

                                                              04441a10b0b1deee7996e298949ac3b029bd7c24257faf910fe14f9996ba12ae

                                                              SHA512

                                                              732337f7b955e6acaf1e3aaa3395bc44c80197d204bd3cbb3e201b6177af6153cc9d7b22ad0e90b36796f92b0022806c32ac763eaec733b234503890900bf284

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\Trust Protection Lists\1.0.0.26\manifest.fingerprint
                                                              Filesize

                                                              66B

                                                              MD5

                                                              fc8af1e27127535b4eea55c8c2285865

                                                              SHA1

                                                              dc9fb2a8fe358f84f4f2749460ef15507e7ecb07

                                                              SHA256

                                                              c76f988dee6149c0c21f7f657688a7fcaa20b0dc83881efe14d58d9be3f5236b

                                                              SHA512

                                                              ec847bd27383c37cd67d9204e5dc55256ca0303c0d7696558de650b569ef8f9eb747603180ae6561f884bbe6eb519a23c18fa4a646c43d58799f01744c2b9de3

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\TrustTokenKeyCommitments\2024.6.12.1\keys.json
                                                              Filesize

                                                              6KB

                                                              MD5

                                                              2d4de461500a8828a8f9f788973c891b

                                                              SHA1

                                                              044b9052a3e463dde9d8d8a3fdb56085fcc4c6f6

                                                              SHA256

                                                              53a6e5dc368a54486f7580bdefeef06cd8c940f4e697343d774a59f679422320

                                                              SHA512

                                                              4a21c8baa20d899f45a0b6e545bf3d6d07b2421c5e5ccb547a8554734b8a51457a953c67afb9897a0baaf3e6d3c69d05e9f698b590b0f522d1a6d8e6109c2011

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\cd57e4c171d6e8f5ea8b8f824a6a7316.exe.WebView2\EBWebView\a68a932b-f068-4b2b-b825-50d22de9f2a6.tmp
                                                              Filesize

                                                              1KB

                                                              MD5

                                                              dc86cb04c438db0ef3b90169d365ebe6

                                                              SHA1

                                                              19a2c66160c2b60d7743419fde053af91797f305

                                                              SHA256

                                                              c64a2cdbc73a519befd305625777c33222ebec429c2728dcb5ddc7716f2f1b82

                                                              SHA512

                                                              9861f412b93ac692384dd8850a3047ab02e92037726bbee2ebe67e473f7b4bbfc13578c6e8d18f2bd9fd6151d9f37ed377e02efb59bf20d70d6c46cbd390abcf

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\libcurl.dll
                                                              Filesize

                                                              522KB

                                                              MD5

                                                              e31f5136d91bad0fcbce053aac798a30

                                                              SHA1

                                                              ee785d2546aec4803bcae08cdebfd5d168c42337

                                                              SHA256

                                                              ee94e2201870536522047e6d7fe7b903a63cd2e13e20c8fffc86d0e95361e671

                                                              SHA512

                                                              a1543eb1d10d25efb44f9eaa0673c82bfac5173055d04c0f3be4792984635a7c774df57a8e289f840627754a4e595b855d299070d469e0f1e637c3f35274abe6

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\vcruntime140.dll
                                                              Filesize

                                                              99KB

                                                              MD5

                                                              7a2b8cfcd543f6e4ebca43162b67d610

                                                              SHA1

                                                              c1c45a326249bf0ccd2be2fbd412f1a62fb67024

                                                              SHA256

                                                              7d7ca28235fba5603a7f40514a552ac7efaa67a5d5792bb06273916aa8565c5f

                                                              SHA512

                                                              e38304fb9c5af855c1134f542adf72cde159fab64385533eafa5bb6e374f19b5a29c0cb5516fc5da5c0b5ac47c2f6420792e0ac8ddff11e749832a7b7f3eb5c8

                                                            • C:\Users\Admin\AppData\Local\Temp\Solara.Dir\zlib1.dll
                                                              Filesize

                                                              113KB

                                                              MD5

                                                              75365924730b0b2c1a6ee9028ef07685

                                                              SHA1

                                                              a10687c37deb2ce5422140b541a64ac15534250f

                                                              SHA256

                                                              945e7f5d09938b7769a4e68f4ef01406e5af9f40db952cba05ddb3431dd1911b

                                                              SHA512

                                                              c1e31c18903e657203ae847c9af601b1eb38efa95cb5fa7c1b75f84a2cba9023d08f1315c9bb2d59b53256dfdb3bac89930252138475491b21749471adc129a1

                                                            • C:\Users\Admin\AppData\Local\Temp\node-v18.16.0-x64.msi
                                                              Filesize

                                                              30.1MB

                                                              MD5

                                                              0e4e9aa41d24221b29b19ba96c1a64d0

                                                              SHA1

                                                              231ade3d5a586c0eb4441c8dbfe9007dc26b2872

                                                              SHA256

                                                              5bfb6f3ab89e198539408f7e0e8ec0b0bd5efe8898573ec05b381228efb45a5d

                                                              SHA512

                                                              e6f27aecead72dffecbeaad46ebdf4b1fd3dbcddd1f6076ba183b654e4e32d30f7af1236bf2e04459186e993356fe2041840671be73612c8afed985c2c608913

                                                            • C:\Users\Admin\AppData\Local\Temp\vc_redist.x64.exe
                                                              Filesize

                                                              24.1MB

                                                              MD5

                                                              e091e9e5ede4161b45b880ccd6e140b0

                                                              SHA1

                                                              1a18b960482c2a242df0e891de9e3a125e439122

                                                              SHA256

                                                              cee28f29f904524b7f645bcec3dfdfe38f8269b001144cd909f5d9232890d33b

                                                              SHA512

                                                              fa8627055bbeb641f634b56059e7b5173e7c64faaa663e050c20d01d708a64877e71cd0b974282c70cb448e877313b1cf0519cf6128c733129b045f2b961a09b

                                                            • C:\Users\Admin\Downloads\Unconfirmed 487082.crdownload
                                                              Filesize

                                                              7.6MB

                                                              MD5

                                                              dbb820772caf0003967ef0f269fbdeb1

                                                              SHA1

                                                              31992bd4977a7dfeba67537a2da6c9ca64bc304c

                                                              SHA256

                                                              b2ac1e407ed3ecd7c7faa6de929a68fb51145662cf793c40b69eb59295bba6bc

                                                              SHA512

                                                              e8ac879c7198dffb78bc6ee4ad49b5de40a5a7dbbda53d427d0a034941487d13c8bb2b8d590a1fcdd81cd6abb8f21fdfcd52924eb00c45a42ee06c1e4b3d590f

                                                            • C:\Windows\Installer\MSI4249.tmp
                                                              Filesize

                                                              122KB

                                                              MD5

                                                              9fe9b0ecaea0324ad99036a91db03ebb

                                                              SHA1

                                                              144068c64ec06fc08eadfcca0a014a44b95bb908

                                                              SHA256

                                                              e2cce64916e405976a1d0c522b44527d12b1cba19de25da62121cf5f41d184c9

                                                              SHA512

                                                              906641a73d69a841218ae90b83714a05af3537eec8ad1d761f58ac365cf005bdd74ad88f71c4437aaa126ac74fa46bcad424d17c746ab197eec2caa1bd838176

                                                            • C:\Windows\Installer\MSI42D7.tmp
                                                              Filesize

                                                              211KB

                                                              MD5

                                                              a3ae5d86ecf38db9427359ea37a5f646

                                                              SHA1

                                                              eb4cb5ff520717038adadcc5e1ef8f7c24b27a90

                                                              SHA256

                                                              c8d190d5be1efd2d52f72a72ae9dfa3940ab3faceb626405959349654fe18b74

                                                              SHA512

                                                              96ecb3bc00848eeb2836e289ef7b7b2607d30790ffd1ae0e0acfc2e14f26a991c6e728b8dc67280426e478c70231f9e13f514e52c8ce7d956c1fad0e322d98e0

                                                            • C:\Windows\Installer\MSI4932.tmp
                                                              Filesize

                                                              297KB

                                                              MD5

                                                              7a86ce1a899262dd3c1df656bff3fb2c

                                                              SHA1

                                                              33dcbe66c0dc0a16bab852ed0a6ef71c2d9e0541

                                                              SHA256

                                                              b8f2d0909d7c2934285a8be010d37c0609c7854a36562cbfcbce547f4f4c7b0c

                                                              SHA512

                                                              421e8195c47381de4b3125ab6719eec9be7acd2c97ce9247f4b70a309d32377917c9686b245864e914448fe53df2694d5ee5f327838d029989ba7acafda302ec

                                                            • C:\Windows\Temp\{26B1C079-495A-41F1-B41D-982A08E93B2E}\.ba\logo.png
                                                              Filesize

                                                              1KB

                                                              MD5

                                                              d6bd210f227442b3362493d046cea233

                                                              SHA1

                                                              ff286ac8370fc655aea0ef35e9cf0bfcb6d698de

                                                              SHA256

                                                              335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef

                                                              SHA512

                                                              464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b

                                                            • C:\Windows\Temp\{26B1C079-495A-41F1-B41D-982A08E93B2E}\.ba\wixstdba.dll
                                                              Filesize

                                                              191KB

                                                              MD5

                                                              eab9caf4277829abdf6223ec1efa0edd

                                                              SHA1

                                                              74862ecf349a9bedd32699f2a7a4e00b4727543d

                                                              SHA256

                                                              a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041

                                                              SHA512

                                                              45b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2

                                                            • C:\Windows\Temp\{A8B35493-9ECD-476F-B6A8-19AC51847589}\.cr\vc_redist.x64.exe
                                                              Filesize

                                                              634KB

                                                              MD5

                                                              cb264f7d256b42a54b2129b7a02c1ce3

                                                              SHA1

                                                              d71459e24185f70b0c8647758663b1116a898412

                                                              SHA256

                                                              d6aaee30c9b7edeac6939f78f4a55683c6358d9cc03dac487880d01f18700e83

                                                              SHA512

                                                              4f623f5d21bc216f3dd040e6d0c663a8ea37efe5d0ce5f4aeb1ef5c1f7c873e19d1abc979d3e40d4dc70e2e4f0fc9a1b114b17d9eb852ea9a41d0f84356cd7cb

                                                            • \??\pipe\LOCAL\crashpad_3384_RVWOFEQRAWCDHIWS
                                                              MD5

                                                              d41d8cd98f00b204e9800998ecf8427e

                                                              SHA1

                                                              da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                              SHA256

                                                              e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                                              SHA512

                                                              cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                                                            • memory/628-4396-0x0000022D961B0000-0x0000022D961E0000-memory.dmp
                                                              Filesize

                                                              192KB

                                                            • memory/1640-4482-0x00000288180F0000-0x0000028818120000-memory.dmp
                                                              Filesize

                                                              192KB

                                                            • memory/3572-4657-0x000001964ADD0000-0x000001964ADD1000-memory.dmp
                                                              Filesize

                                                              4KB

                                                            • memory/3572-4663-0x000001964ADD0000-0x000001964ADD1000-memory.dmp
                                                              Filesize

                                                              4KB

                                                            • memory/3572-4662-0x000001964ADD0000-0x000001964ADD1000-memory.dmp
                                                              Filesize

                                                              4KB

                                                            • memory/3572-4664-0x000001964ADD0000-0x000001964ADD1000-memory.dmp
                                                              Filesize

                                                              4KB

                                                            • memory/3572-4656-0x000001964ADD0000-0x000001964ADD1000-memory.dmp
                                                              Filesize

                                                              4KB

                                                            • memory/3572-4658-0x000001964ADD0000-0x000001964ADD1000-memory.dmp
                                                              Filesize

                                                              4KB

                                                            • memory/3984-3993-0x0000000074740000-0x0000000074EF0000-memory.dmp
                                                              Filesize

                                                              7.7MB

                                                            • memory/3984-3-0x0000000074740000-0x0000000074EF0000-memory.dmp
                                                              Filesize

                                                              7.7MB

                                                            • memory/3984-0-0x000000007474E000-0x000000007474F000-memory.dmp
                                                              Filesize

                                                              4KB

                                                            • memory/3984-2382-0x000000007474E000-0x000000007474F000-memory.dmp
                                                              Filesize

                                                              4KB

                                                            • memory/3984-2383-0x0000000074740000-0x0000000074EF0000-memory.dmp
                                                              Filesize

                                                              7.7MB

                                                            • memory/3984-2522-0x0000000006A20000-0x0000000006A32000-memory.dmp
                                                              Filesize

                                                              72KB

                                                            • memory/3984-1-0x0000000000820000-0x00000000008EE000-memory.dmp
                                                              Filesize

                                                              824KB

                                                            • memory/3984-2-0x00000000057A0000-0x0000000005D44000-memory.dmp
                                                              Filesize

                                                              5.6MB

                                                            • memory/3984-2475-0x0000000006530000-0x00000000065C2000-memory.dmp
                                                              Filesize

                                                              584KB

                                                            • memory/3984-2476-0x00000000089A0000-0x00000000089AA000-memory.dmp
                                                              Filesize

                                                              40KB

                                                            • memory/4832-4007-0x000001D5C5980000-0x000001D5C59FE000-memory.dmp
                                                              Filesize

                                                              504KB

                                                            • memory/4832-3994-0x000001D5AA700000-0x000001D5AA71A000-memory.dmp
                                                              Filesize

                                                              104KB

                                                            • memory/4832-4303-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4346-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4272-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4268-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4400-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4413-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4263-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4259-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4021-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4022-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4227-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4228-0x00007FFE69500000-0x00007FFE69524000-memory.dmp
                                                              Filesize

                                                              144KB

                                                            • memory/4832-4427-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4315-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4020-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-3998-0x000001D5C51C0000-0x000001D5C56FC000-memory.dmp
                                                              Filesize

                                                              5.2MB

                                                            • memory/4832-4003-0x000001D5C4E70000-0x000001D5C4F2A000-memory.dmp
                                                              Filesize

                                                              744KB

                                                            • memory/4832-4005-0x000001D5C4C20000-0x000001D5C4C2E000-memory.dmp
                                                              Filesize

                                                              56KB

                                                            • memory/4832-4637-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4652-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/4832-4025-0x000001D5C5950000-0x000001D5C5958000-memory.dmp
                                                              Filesize

                                                              32KB

                                                            • memory/4832-4026-0x000001D5C8CA0000-0x000001D5C8CD8000-memory.dmp
                                                              Filesize

                                                              224KB

                                                            • memory/4832-4027-0x000001D5C8C60000-0x000001D5C8C6E000-memory.dmp
                                                              Filesize

                                                              56KB

                                                            • memory/4832-4018-0x0000000180000000-0x0000000180AC0000-memory.dmp
                                                              Filesize

                                                              10.8MB

                                                            • memory/5804-4054-0x00007FFE8CBD0000-0x00007FFE8CBD1000-memory.dmp
                                                              Filesize

                                                              4KB

                                                            • memory/5804-4246-0x000001FE8C1B0000-0x000001FE8C1E0000-memory.dmp
                                                              Filesize

                                                              192KB

                                                            • memory/5952-4108-0x00007FFE8CBD0000-0x00007FFE8CBD1000-memory.dmp
                                                              Filesize

                                                              4KB

                                                            • memory/5952-4107-0x00007FFE8E860000-0x00007FFE8E861000-memory.dmp
                                                              Filesize

                                                              4KB

                                                            • memory/5952-4247-0x0000028F5A200000-0x0000028F5A230000-memory.dmp
                                                              Filesize

                                                              192KB