88564234b9eeb2f0fe2cc5d03f617a97eb4802f126bdd21aa223c3c87c02531c

Analysis

user interaction
yes
max time kernel
204s
max time network
204s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/04/2026, 12:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Monaco/fileaccess/node_modules/merge-descriptors/index.js
Size 1KB
Sample260415-p382msht2s
SHA256 88564234b9eeb2f0fe2cc5d03f617a97eb4802f126bdd21aa223c3c87c02531c
MD5 b4d3859e603602c87a45682862055af0
SHA1 e95cb1c14d70be457eba2ce61b2f4e90a13b21b1
SHA512 b17bb8c8b652f27d8037ed60f28b0d19a68e77bcc45d1e2be7dd304c942f6e85570e9720011f983fb8783d670eb66c0c3174d5fd90690b2aa79c2b402adcd00a
TLSH
T1F2211045BDD8F06206D285F4B86DF507F648C1AB2239FAD1B3D58BE41E401A149E0CE6
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery execution

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4012	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134207311850956319"	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2023547815-1162023398-1465618254-1000_Classes\Local Settings	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe
Token: SeShutdownPrivilege	4384	chrome.exe
Token: SeCreatePagefilePrivilege	4384	chrome.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe
4384	chrome.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4384 wrote to memory of 2428	4384	chrome.exe	90
PID 4384 wrote to memory of 1636	4384	chrome.exe	92
PID 4384 wrote to memory of 4012	4384	chrome.exe	91
PID 4384 wrote to memory of 1636	4384	chrome.exe	92
PID 4384 wrote to memory of 1128	4384	chrome.exe	93
PID 4384 wrote to memory of 1128	4384	chrome.exe	93
PID 4384 wrote to memory of 4016	4384	chrome.exe	95
PID 4384 wrote to memory of 4016	4384	chrome.exe	95
PID 4384 wrote to memory of 3280	4384	chrome.exe	96
PID 4384 wrote to memory of 3280	4384	chrome.exe	96
PID 4384 wrote to memory of 3184	4384	chrome.exe	97
PID 4384 wrote to memory of 3184	4384	chrome.exe	97
PID 4384 wrote to memory of 3128	4384	chrome.exe	98
PID 4384 wrote to memory of 3128	4384	chrome.exe	98
PID 4384 wrote to memory of 2952	4384	chrome.exe	100
PID 4384 wrote to memory of 2972	4384	chrome.exe	104
PID 4384 wrote to memory of 2972	4384	chrome.exe	104
PID 4384 wrote to memory of 4816	4384	chrome.exe	105
PID 4384 wrote to memory of 4816	4384	chrome.exe	105
PID 4384 wrote to memory of 4172	4384	chrome.exe	106
PID 4384 wrote to memory of 4172	4384	chrome.exe	106
PID 4384 wrote to memory of 1928	4384	chrome.exe	107
PID 4384 wrote to memory of 1928	4384	chrome.exe	107
PID 4384 wrote to memory of 3288	4384	chrome.exe	110
PID 4384 wrote to memory of 3288	4384	chrome.exe	110
PID 4384 wrote to memory of 524	4384	chrome.exe	111
PID 4384 wrote to memory of 3504	4384	chrome.exe	112
PID 4384 wrote to memory of 3908	4384	chrome.exe	113
PID 4384 wrote to memory of 4860	4384	chrome.exe	125
PID 4384 wrote to memory of 4860	4384	chrome.exe	125
PID 4384 wrote to memory of 5004	4384	chrome.exe	126
PID 4384 wrote to memory of 5004	4384	chrome.exe	126
PID 4384 wrote to memory of 4664	4384	chrome.exe	127
PID 4384 wrote to memory of 4664	4384	chrome.exe	127
PID 4384 wrote to memory of 4968	4384	chrome.exe	128

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Monaco\fileaccess\node_modules\merge-descriptors\index.js
1⤵
PID:4000

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fff07c3c728,0x7fff07c3c734,0x7fff07c3c740
  2⤵
  PID:2428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2000,i,16329233546689841804,16881812860639511646,524288 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2188 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,228196014873353029,9777206288900728420,262144 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:1636
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2428,i,10682985391409824025,9307786000366905370,524288 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:1128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,16359677632243604426,7956321800666463618,2097152 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3288,i,16975773263642447814,560586347128299677,2097152 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:3280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4472,i,11995109143167844176,1339598385543217203,2097152 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4496 /prefetch:2
  2⤵
  PID:3184
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4736,i,1510031378989783033,936598465186891,2097152 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:3128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5552,i,6922410710082669131,9956988294203553706,524288 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5496 /prefetch:8
  2⤵
  PID:2952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5812,i,16159108431594469089,16791508808747240766,2097152 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5904,i,6165660696827947091,3181427849945850208,2097152 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4864 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3308,i,10864862362667501200,9426318010611363574,2097152 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:4172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3332,i,1447221792171835841,1938637772589795807,2097152 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3456,i,14332279258588533937,908096125956436969,2097152 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6112,i,4341169783946891298,11793531220481281728,524288 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6120,i,17990227474860903798,16205697552949600976,524288 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3356 /prefetch:8
  2⤵
  PID:3504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6100,i,3669395692175874279,8527913594799906948,524288 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  PID:3908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3464,i,1558923495509011669,14302839990861888536,2097152 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3448,i,14191344950296608646,8820010927790992714,2097152 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=4512,i,5009599431672093085,3998778975894158099,2097152 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6416,i,13549833831194874721,13931235028254425703,524288 --field-trial-handle=2092,i,11566567240559297672,1642718379725839115,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6384 /prefetch:8
  2⤵
  PID:4968

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4848

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3548

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2304

C:\Users\Admin\Desktop\New folder\Bootstapper.exe
"C:\Users\Admin\Desktop\New folder\Bootstapper.exe"
1⤵
PID:2468

C:\Users\Admin\Desktop\New folder\Bootstapper.exe
"C:\Users\Admin\Desktop\New folder\Bootstapper.exe"
1⤵
PID:2496

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 42127ba07491940b96233c18c5c261636307d35d8260a29c5b7133278aaf0ed4
MD5 de50c30571e9ef14708da810a8bf2ac8
SHA1 767038fbc8815b6c9736ea4e7486d24b78580de2
SHA512 b9a4ed040c83b652c1b6fa71b655ca61aaba4e8f7c5619b3e75bda879379e70d397f2f2a68ea03149f7f0b4b7556beb019b02e761d3ccaf6e3b5795e7af27121
TLSH
T170E02BAAC825AC3718F91758A064574EFA1253262B50884B3F3CC10D8FB4637428AC9C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Size 264B
SHA256 c007277767e43e0d71934f15567f6c5db0a390dc8252a17dfaa67e0947abf409
MD5 4b99973df3012af7f4a799166eb7df35
SHA1 62acbd7bfcf9e6e3838160d6720e44248d0823df
SHA512 76bd9e484d4436967da823b4960da0068e7ae11f907258816073a0acd420fe20262e3450d4a9a7c62e58afefae9cc85ab72eb796b48f3043bcf4ca099bb4153b
TLSH
T1C8D0C919F5D1E001CB550531511E1B54663BA9E9C8171B4FB6C80965BC47DB57681351
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 1af1cf418b546a7f6d761b167a800314a3e068a51dce5c93219b96620b573225
MD5 fcb3d744f8b38b930d99a07bb298e184
SHA1 fabcf183964d96f8f127c9d5141716abe842ebc3
SHA512 9858c2fed49fe72be3f422028829b55d4bfa6179edc39d6cbf33024dca12646277c0b11732a0480c37599c76475ac7a045621c534263635188f290bf6b783bce
TLSH
T14FD0A918F8C2E000CB110430800E0FA03B3AAEE9C8270A0FB2C8083AB88BDB17AC1342
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 42d79f444bc31a120592a2b043de28acb2e5e4c751c828b5a8a1c2b37bcef537
MD5 88af7919b2cb9678cd691af36a1f2824
SHA1 4c7ddd66d9e60e76d1d4ca46d2f06aa5bc896462
SHA512 605a09d69d7ec3104a9ba8e0826f5fe4e9a92c39db59d63086ac4813b8ba66ae247bce5591265c54125cad2fe56c66bef4128e210f44a5e07075c0f718b2a46c
SSDEEP 3:MsEllllkEthXllkl2zEDH+/l:/M/xT02zsH+
TLSH
T1FA4402046BD04C05C9002034412183600370DC510512974B24E504236CD69810D00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 26ab629f4c209601918ed4337ece2f899eef52326e87bc66125378fa85126d98
MD5 6b66e0e1083f199666e969a04dafa1a7
SHA1 5f0e47e0cf87303fa8af02341fe81dc31c458470
SHA512 dcf8ae02fcb933b0bca57459d03621b920960835d8704d744512a16354dd8962e5bdece873d094dda1dc65940d447b0b67a1f140f5fa73f97a3942af9fa0e2c5
SSDEEP 192:DI2JKJ9JJJuJrhaIa4amG1E6fh1qpFqoxPp8g1+PeuPQ1rMNUm:DI2JiLJJuJrhaIaRni6fh1qpMoxxz1+9
TLSH
T1CBE18CF793E4862DC91166F0E7147E2BCE2D0928035C3C66C9D8AF4F97E6871E24164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 acf36ea833d4809192eff8153206e59097eab1c7a30f87fc4c8a994a4c75bfb9
MD5 02bb73e7c76dd81a112531f9c8965a5c
SHA1 cf8f74069a89a3fab5e10059a12ab4c988e30007
SHA512 0acddee0c080f4bcc5ff37352d69d31a02b1f2e56daa068ab061ebd5b78c9150289ac487423131b62cc951064d36bb4e67c42201e17f724a4a0ce87b6d91dba0
TLSH
T177017BE7E7BB756750BC59771D407C4928BAA871114164E8CFAA852CB4C44EB2F01453
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 89f24a67330b09f970c3f97699ba94a959af262e09025fb020e2e0e5c3473225
MD5 8851f7397d66a0694761272f801ec9aa
SHA1 dfce27a0d910791e391512bcd9009161a0ef3de9
SHA512 05771f0e6aab4706894aefa1940d5402dc0f436cfd206ed2c8312aba426e3d166a55a73bcb351ec30e011d77d284e71a042a42f8f5328e18ef1683dde56567b8
SSDEEP 192:1RkiB/YrskEg4pv7ZpIpAPRp2I9wHsb+WNnhJ0JTMj75M8VyIsnAUgtaJ:1RkiFM1GpEUXXOwL0xy5MY8
TLSH
T16242E92DBA19793B6CD7C319FD217B1BEBF5106124952E88E6FC8A2C14E75CC211B41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 08cd1554f2518faac81950a3d6252626112ec95aa251c84e408bd4f94b57715e
MD5 e6a46f2d2894730b32428a13b4be69ab
SHA1 5312b93caf8d040194fa4366bceba48ad39c9641
SHA512 a5fa2b27cead639ef57eb74db6d1f5467d1e3162ee031423737d74d357846b9baf49bea00bd69a526d0c3ab1a10f4b681b05b2627eb6eee90da432b3955dec6e
SSDEEP 192:1RkiB/YrskEg4Tv7ZpIpBPRpRWrB9wHsb+WNnhJLwHeRTMjh5M8VyIsnAUgraJ:1RkiFM1GrEPXIOwLSep+5MYe
TLSH
T16452D82EB919693BACD7C319F8217B1BEBF5106125952E88E7FCCA2C14E76CD211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 7c5166a3a9a30a48d27969ce4239aefbf9482519e2a650efc35315a6678c940a
MD5 7ca9c47c7632b64d281e17f9051b6895
SHA1 68ce6dbbd709afac171892f8676c85d3a82885e8
SHA512 9e15c4df26b3c942d61fb8800e5bdb9e1090a83e249a502e739185e43659a797b4f4cc000ee085423f68356ea07caddd9b2dedfd3b185ad55aa341e7aaad0bf8
SSDEEP 192:1RkiR/YrskEgOTv7ZpIpBPRpRW47HB9wHsb+WNjumjhJLwHTuWSp2oGTMjh5M8VK:1RkiVM1krEPXHOw6ySqpp2ok+5MYe
TLSH
T15B62D82EB5186D7BACD7C329F821BB1BEBF6106155912E88E7FC8A1C14E76CD210741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 41b77dd086c085853fe07d6f6e51fb98d9e4404827a79e508fd84cb1aad558d5
MD5 55c1d3a25b1412f806bc9aa1410b8134
SHA1 be38ea699e0e3d50bc80e33ff9137a134405b9ee
SHA512 42c871a18776b3a9fff1b53fb1f51f0b1ab5e60c29472335f4a7e3dc570683144019fe4228530c5616b3a7c739d52e6e35c13a0f20041da4cbe648431b1d1c58
SSDEEP 192:1RkiR/YrskEgOfv7ZpIpBPRpRW47HB9wHsb+WNjumjhJLwHTuWSp2oGTMjh5M8VK:1RkiVM1k3EPXHOw6ySqpp2ok+5MYe
TLSH
T11062E92EB5186D7BACD7C315F821BB2BEBF6106165912E88E7FC8A1C14E76CD210741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 7085bd26a00ea25f436317507845db76624f1e305c5ea5c1633f0710fb2525e9
MD5 6fedf8e0cda28604a18bc21b3b3a9b01
SHA1 6e736322a4f9228617a8d1dccd80d010032b80ff
SHA512 7c43690cde2a8678a5465e416e0cead981d993013a68eccf60d0f0f8520df5a31229546fee29023f6dada5f06f5e8901b2628e5ccb2a58fa5dcaf82771739eca
SSDEEP 384:UO62joO6z7KxkXqKf/pUZNCgVLH2HfgslBr7pLuLcifKO6/XODoO6P+ErU3f6HGy:UO62oO6z7KxkXqKf/pUZNCgVLH2Hfgsr
TLSH
T18972E9676C4C9E770F94CACCD816BE4FADB5010B65D9886843FA982903D4BDB11462FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 77cb77678916fc4f530e4ec42adb9af3c1cca43271af58b5a52b531760416c5f
MD5 ad54ed0b55f431d39fdeef89cbf5966d
SHA1 4beac0b75c5a1f7992ebab45dbebf8d25d743699
SHA512 ebfda4f5a0cc5651cbf19e18feb5c2e938ee26cff8d18590c15dce5618f5c5858fd2eea83f6216609f8ccadcdfe8e3dc83d24b9536d885714cb0a787e3853025
TLSH
T15BB012508001A502C04742F4159324C831249F198705170163F1697698367D08015251
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589640.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe589640.TMP
Size 96B
SHA256 9904e75d6f8ce0b4d4a757ed5eee33b7aeae4efc9f96709d25c08dbc5d75f4c3
MD5 d1c58f31f16d8e2c0316162458d3b446
SHA1 a3dea9d7926d9327ba8d4eb83bf317be1f6626d5
SHA512 069a9241a1e1fec1ba468e7d52012cd180f8f50259f5a06a8426ea4efade1d765f37207c8414a7558b1c9daf54d0c7407ba758864109b4795f6291707781ad34
TLSH
T10AB0220AC20BB202C00203B028E088C8B330CFA0CA03220382E00A32EC2CB200832B20
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 193KB
SHA256 e34e569a1d3c8e81fe72fda808a96e0a3c414594384b84a7532d527b43d5d4e8
MD5 e207fbf82352566b18c0fe571bfd197d
SHA1 d2c506a8b5037ec1e16bf84871de1917b84bf0de
SHA512 7de42954b458bd5fe9708f2a4b117fe75db4887189fc244c3fd57bbf9b57c27d3d079d1ec63ceaeaf8c4cd18b6692e819a90eac69676275a167a30c65a106f79
SSDEEP 3072:F+sXGOM/o+BuP1gRL/9m/C47U59JZ1UK3Qw/xLANk0mUW5GmRntSFCjEEN8:FNX4/tBuNsYUfJnUKrOk0HOGm/SFyEEy
TLSH
T13614132E9E1589F6A8764E90729E24078E2343D6F3DBB58D3298678D37483941E23D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 26802c2dfadff862a5b7e0971bf160f4ea1b964380bc55d7f0b2590761031cc8
MD5 f76f5a2be7cea5024fefe4441eba5fdc
SHA1 2c0bd9e9469c7c470a785c06fd6ecbe6c52688ac
SHA512 f42557572abd73405763540fdbd576a11874dd2cd552d75a7dfc010a93972ccf6267b74586deb2b9e98b04f43775aab64e3f1681cb80b1dbf0af24c555646b9d
SSDEEP 3072:Yp+sXGOM/o+BuP1gRL/9m/C47U59JZ1UK3Qw/xLANk0mUW5GmRntSFCjEEN8:aNX4/tBuNsYUfJnUKrOk0HOGm/SFyEEy
TLSH
T1D514123EAE1689F26C765E54329E25078D335397F39FF94D31986B8832482942F27933
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 194KB
SHA256 0e16950da727bdf086c07901124f51f12aafee79e92f212911e100cca564eac4
MD5 bbc9080f218d20a4aca271118f76b829
SHA1 42211b333ad68e5ef2267eadc0b1dd1c20cf1837
SHA512 dc9aad4ab2c394ced7dbe9e1247c5eb4edfe65565bd6040a344aa35ebc89e0930a9901c2e0598e4d62ea7a95b2ef3550068956396cb9a14494a195590d6bcce9
SSDEEP 3072:S8+sXGOM/o+BuP1gRL/9m/C47U59JZ1UK3Qw/xLANk0mUW5GmRntSFCjEEN8:1NX4/tBuNsYUfJnUKrOk0HOGm/SFyEEy
TLSH
T14914123EAE1689F2AC765E50729E25078D335397F39FF54D31986B8832482942F27933
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 074a8ca78d2eef8f67e278ef64a2ed0689b7f32da5d8c86eec8ff22eb72350be
MD5 6a5eac49fb73075aec1e804d0363fa9f
SHA1 b79b55637fc0f938050b341f7447470a72ddd992
SHA512 3b401826290060cedcff200e41b7716aff62d8b5fc74aabfbbc9d326bf3cfddb07f3f9c763e0b13c85c55f2eea9e37f9b99fcfb9ee84475457aae028984a5f2c
SSDEEP 1536:YCcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YE3u:R3Qw/xLANk0mUW5GmRntSFCjEEN4
TLSH
T1EC9302BA9E174AEB957D468176AE7909CE12230D70AFA9CC315C538C21D41C92B73E73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 193KB
SHA256 4a46aee0c79ad63688efffe77aa82c3f2805e67e81e30c20e6dac236dc2cab6f
MD5 7f5a815dc9a02a54cc8c0842a265756c
SHA1 ccf5d978e30d489a9c7062c9759b523aa477f787
SHA512 bf7e85c4ba28864a103180c4401a5bc16c57bc038db58d4ca5829a3944aff368730e35e8717be26a3f0da248a3b199e8241dca93f3332bf4452aa9b1669777f2
SSDEEP 3072:R+sXGOM/o+BuP1gRL/9m/C47U59JZ1UK3Qw/xLANk0mUW5GmRntSFCjEEN8:RNX4/tBuNsYUfJnUKrOk0HOGm/SFyEEy
TLSH
T1AC14132E9E1589F6A8764E90729E24078D2343D6F3DBB58D3298678D37483942E27D33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ВооtstаррегuiхNet64.zip

Path C:\Users\Admin\Downloads\ВооtstаррегuiхNet64.zip
Size 5.3MB
SHA256 901e11082f2efd08afe63c3cdafced30585c25d0f2c0fd029abeb4eadd192c50
MD5 04109057ff9a8f9958285b85d727f242
SHA1 5b38c534d72a386bc8fba142bd38c50ad18fb1c3
SHA512 8b9ad15b1274363c0119750209c20d4a2bdde55f56d14a9a1cc4ae1667064979d9b947dcdbd5e27fe2bc14b3d7c92e8e911edfd93a50d8fda9499c670dcaed78
SSDEEP 98304:sbWfHoqqoMSYGBTSuowXm0VxZheXC4j8D/Qj/EzE0r9Q3nn6uhiBN7iJNAtHnB79:s6coMNGBH7N854Q7Ezb5OlJNsf
TLSH
T122463313E603C163E1B6D8CE6B42A67375848279AEFEB85B483CD7A464C38C54E5F1D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2304-220-0x000002B8955C0000-0x000002B89565B000-memory.dmp

Download

memory/2468-345-0x0000000140000000-0x00000001400FF000-memory.dmp

Download

memory/2468-357-0x00007FFEF8CA0000-0x00007FFEF8F49000-memory.dmp

Download

memory/4000-1-0x0000026476650000-0x000002647665C000-memory.dmp

Download

memory/4000-0-0x0000026476500000-0x000002647659B000-memory.dmp

Download