Overview

overview

6

Static

static

1

BootstrapperNew.exe

windows11-21h2-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    360s
  • max time network
    361s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    16/04/2026, 12:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    BootstrapperNew.exe
  • Size 8.3MB
  • Sample260416-pb7phahs9t
  • SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwaredefense_evasiondiscoveryspywaretrojan

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Suspicious use of NtSetInformationThreadHideFromDebugger 21 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 9 IoCs
  • Loads dropped DLL 9 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

    defense_evasion
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
    defense_evasiontrojan
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 8 IoCs
  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 38 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 28 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe
    "C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"
    1⤵
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2472
    • C:\Users\Admin\AppData\Local\Solara\Solara.exe
      "C:\Users\Admin\AppData\Local\Solara\Solara.exe" --bootstrapperPath "C:\Users\Admin\AppData\Local\Temp" --bootstrapperExe "C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks whether UAC is enabled
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1164
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=1164.4604.10666938044497878370
        3⤵
        • Drops file in Windows directory
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of WriteProcessMemory
        PID:2276
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ff859adb078,0x7ff859adb084,0x7ff859adb090
          4⤵
            PID:2660
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1704,i,6377239550428137764,3698620192096498487,262144 --variations-seed-version --mojo-platform-channel-handle=1700 /prefetch:2
            4⤵
              PID:1536
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2020,i,6377239550428137764,3698620192096498487,262144 --variations-seed-version --mojo-platform-channel-handle=2024 /prefetch:11
              4⤵
                PID:5028
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2296,i,6377239550428137764,3698620192096498487,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:13
                4⤵
                  PID:3964
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3604,i,6377239550428137764,3698620192096498487,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
                  4⤵
                    PID:4888
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4076,i,6377239550428137764,3698620192096498487,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:14
                    4⤵
                      PID:5124
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4488,i,6377239550428137764,3698620192096498487,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:14
                      4⤵
                        PID:5744
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4752,i,6377239550428137764,3698620192096498487,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:14
                        4⤵
                          PID:3100
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4304,i,6377239550428137764,3698620192096498487,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:10
                          4⤵
                            PID:5644
                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4104,i,6377239550428137764,3698620192096498487,262144 --variations-seed-version --mojo-platform-channel-handle=4016 /prefetch:14
                            4⤵
                              PID:3060
                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=3924,i,6377239550428137764,3698620192096498487,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:14
                              4⤵
                                PID:5824
                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4748,i,6377239550428137764,3698620192096498487,262144 --variations-seed-version --mojo-platform-channel-handle=4060 /prefetch:14
                                4⤵
                                  PID:5512
                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView" --webview-exe-name=Solara.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2168,i,6377239550428137764,3698620192096498487,262144 --variations-seed-version --mojo-platform-channel-handle=4596 /prefetch:14
                                  4⤵
                                    PID:5340
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe"
                              1⤵
                              • Drops file in Windows directory
                              • Enumerates system info in registry
                              • Modifies data under HKEY_USERS
                              • Modifies registry class
                              • Suspicious behavior: EnumeratesProcesses
                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                              • Suspicious use of AdjustPrivilegeToken
                              • Suspicious use of FindShellTrayWindow
                              • Suspicious use of SendNotifyMessage
                              • Suspicious use of WriteProcessMemory
                              PID:3180
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff85f68c728,0x7ff85f68c734,0x7ff85f68c740
                                2⤵
                                  PID:4152
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1588,i,9709539132669712973,4981573741170556148,262144 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1872 /prefetch:2
                                  2⤵
                                    PID:1668
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1456,i,17809090138505655584,2159789519646182658,524288 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2256 /prefetch:11
                                    2⤵
                                    • Downloads MZ/PE file
                                    • System Time Discovery
                                    PID:2932
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2336,i,18254916914169528718,13228289069743483557,524288 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2368 /prefetch:13
                                    2⤵
                                      PID:4120
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,4741264204164274614,15608966162012890138,2097152 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3268 /prefetch:1
                                      2⤵
                                        PID:4908
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3284,i,15503493140802518180,4714740349310007375,2097152 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3484 /prefetch:1
                                        2⤵
                                          PID:3616
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4208,i,5411600624870228898,12711887580379673288,2097152 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3224 /prefetch:9
                                          2⤵
                                            PID:808
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4564,i,17812283908712641637,16066631747429697095,2097152 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4684 /prefetch:1
                                            2⤵
                                              PID:4992
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5396,i,16630347363954447617,12895265752772525740,524288 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5404 /prefetch:14
                                              2⤵
                                                PID:3988
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5452,i,6740660867301130793,7559231944712855534,524288 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5660 /prefetch:14
                                                2⤵
                                                  PID:1136
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5748,i,14535813549638644471,2016114922442400049,524288 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5720 /prefetch:14
                                                  2⤵
                                                    PID:4848
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5692,i,7625181972982935740,7862801446138111570,524288 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5416 /prefetch:14
                                                    2⤵
                                                      PID:3980
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5816,i,8155630201612799901,34535758410162269,2097152 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5820 /prefetch:1
                                                      2⤵
                                                        PID:5048
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3272,i,9414696758482142984,2096494344792091614,524288 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3640 /prefetch:12
                                                        2⤵
                                                          PID:1632
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5760,i,5101739338890249649,1321491432209486736,2097152 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5768 /prefetch:1
                                                          2⤵
                                                            PID:4976
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5996,i,12838223472427079600,6230574934600860950,524288 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6000 /prefetch:14
                                                            2⤵
                                                            • Modifies registry class
                                                            PID:6112
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=3208,i,15171077165811096031,9173657036721184333,2097152 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3532 /prefetch:1
                                                            2⤵
                                                              PID:6056
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6140,i,16342058728345792493,1077858532054016412,524288 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4280 /prefetch:14
                                                              2⤵
                                                              • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                              • NTFS ADS
                                                              PID:5580
                                                            • C:\Users\Admin\Downloads\RobloxPlayerInstaller-C6TTPW24QK.exe
                                                              "C:\Users\Admin\Downloads\RobloxPlayerInstaller-C6TTPW24QK.exe"
                                                              2⤵
                                                              • Drops file in Program Files directory
                                                              • Executes dropped EXE
                                                              • Checks whether UAC is enabled
                                                              • System Location Discovery: System Language Discovery
                                                              • Enumerates system info in registry
                                                              • Modifies Internet Explorer settings
                                                              • Modifies registry class
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:5896
                                                              • C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe
                                                                "C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe" -personalizedToken C6TTPW24QK --deeplink https://www.roblox.com/games/17625359962/RIVALS -app -installerLaunchTimeEpochMs 0 -clientLaunchTimeEpochMs 0 -isInstallerLaunch 5896
                                                                3⤵
                                                                • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                PID:912
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5888,i,14102469152389921387,8422249611651315121,262144 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4356 /prefetch:10
                                                              2⤵
                                                                PID:3412
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4624,i,1412361899064718148,17913378538531720163,524288 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5948 /prefetch:14
                                                                2⤵
                                                                  PID:5260
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6812,i,13806554921296754590,7435450086966927239,2097152 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6832 /prefetch:1
                                                                  2⤵
                                                                    PID:2060
                                                                  • C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe
                                                                    "C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe" roblox-player:1+launchmode:play+gameinfo:rYJQkiZ05b7HFj-3C8BW5yBXx-kQn7xK5JvHs9xvLmmfjLuOtVHQ_WiK3pzmkFKmr6ZftrPAaTEnKAMqHEwbdFR3ab4T2Qjsg7VqlJvjBZZvPHL8Sirzs1hnXwXIV2COYtWgfSFcni4ZaAlZ0yWdJntXDvPm_dGmKb6473fNYmXsy-cnnQXv_Z-2OJdQWKWY6JHC3Bohm1g9EO8Slz3WqXecJdYEOkOP1uGIPkbIoPxOlmDG9PbjLWUpuyZJAOqCB59wC7p8IL2I8ZWX4fzgyo0sIZJDKmzzfr5P-kPz4nqo68yTO6cMft0hSTGWz50Q7S8mqD9bFL00NcwsMjJE6sEcJUAvnfYZLfGpPkX8M0OtI0mk4jMhqiQ6JBIYNb_wre5oyCypNAuhgXWiV1nHRQmkyONFXuiuRRhcpITvxYRn6jzYR2ZZXLubnGQvIh7ebqffjq6OC3nLR0rXtVYyXOmu9ji_GfBlUTYBURjSS2UQToTerZqVQv_mJk_UJE4xjGTydEGu07r2mX3s-1XkgCh2tzifxAGD_sZClPMlIjQ+launchtime:1776341644449+placelauncherurl:https%3A%2F%2Fwww.roblox.com%2FGame%2FPlaceLauncher.ashx%3Frequest%3DRequestGame%26browserTrackerId%3D1776341482234004%26placeId%3D14113053169%26isPlayTogetherGame%3Dfalse%26referredByPlayerId%3D0%26joinAttemptId%3Da22f5156-0ab8-4a51-8eaf-cc423ec14af3%26joinAttemptOrigin%3DPlayButton+browsertrackerid:1776341482234004+robloxLocale:en_us+gameLocale:en_us+channel:zenablesessionmanagereventbasedsystraystatectrl2+LaunchExp:InApp
                                                                    2⤵
                                                                    • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    PID:2300
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=4344,i,8456690858994634363,15009928220026796506,2097152 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5892 /prefetch:1
                                                                    2⤵
                                                                      PID:1744
                                                                    • C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe
                                                                      "C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe" roblox-player:1+launchmode:play+gameinfo:Ys1EcDqVg3bcnH7tPxQ3kAD8DeeMkhEn5HFZfqGZnBUXMK9RSGfQ4NVVHT7zelEd8PxzqP3tc_3BspT0FobnyeDRDAQu3aO6664oPodsNh1HkNnz-3Ao6YqmIDnw5eYLXUc8S_UHs1vg6aHvSj178Zp7dDTxD9KlkbqLkxpebVMgapRyh3y7eIwYkPRu68J0r452vNMooxZQkMU-qAJaXV9Lan1U6oBMu2I5tMXq28f-LxZgKFMQn5y-3_NFnO5HsyG52N-NUr5Uu7jY_Z-AOluDbTJFiHRv_nrBSUQajeT_BE1lWn1lK9xzheNGcNk9va1XnW4XI5CnT_tnAg7MVhaXl8j1LY3FS_P-kzxKuI9dSZJ0CcsnzDOsK1U2om5M0My5NaFSgL3W0r1kqXPou3dHC3H7W-B5M7QBcVDjmmYq62UOQHbd6TERzotzO2ZB1DOEyBrgzVzMnuZL-VOrfFd_W-ZCgvHGvtJRnLGVfCiXiy_XSfBNQ6llzRKpxHaLwn_IIH_4Bhof9PNSnbSjCOjqijxVmvwXI4udYQBvjt4+launchtime:1776341685789+placelauncherurl:https%3A%2F%2Fwww.roblox.com%2FGame%2FPlaceLauncher.ashx%3Frequest%3DRequestGame%26browserTrackerId%3D1776341482234004%26placeId%3D14113053169%26isPlayTogetherGame%3Dfalse%26referredByPlayerId%3D0%26joinAttemptId%3D5e1444be-253c-49b1-a509-2406c312b55f%26joinAttemptOrigin%3DPlayButton+browsertrackerid:1776341482234004+robloxLocale:en_us+gameLocale:en_us+channel:zenablesessionmanagereventbasedsystraystatectrl2+LaunchExp:InApp
                                                                      2⤵
                                                                      • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:5852
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=7092,i,7458408683786688179,5657134448545770664,2097152 --field-trial-handle=1876,i,10502047604272177117,11640778810798887843,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=6956 /prefetch:1
                                                                      2⤵
                                                                        PID:5776
                                                                      • C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe
                                                                        "C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe" roblox-player:1+launchmode:play+gameinfo:kYg-ApVJ22CfoHDEQvDuCLmSILXdN5VKMD-rcgYBR5ZIrMqkd6M-hWDeyssv8w4NSCn_ZiW5UNjcGaRVN-OeIBJsLbU9IK35iGaJWAL86a22q8EH1MZXK0L9B8N-Mi7Xo8DcI7Qm3CXKwSD5pwO24lKPq_ItaRkhDhDkr0yaWBTzGfzphtorAIXo-w4zNnN8PwKRc0SZW4j8_gjz5H2QtVtsVF6XH1XoojaCcLHnHZEcsuAXtxyoUAt68D4KR1NJmqGEqtkL8rIrYzeXJvf5jgsZntLu0cr_TOsD76elis5TW7CNjuckB-EsLldWN9k5vrITC5FpRRe2nkMequSWVjsmUCzjijMaA6hvJzoSh2yIF-d20MVA6kZTWU0W0ZvTSSRmp8A5B9qRawnP7zeH2-c-4dzcpvXxOG3U9J8Gs8Z2KECZ82bAB9cyET6huP71Z7bWupjYvhBj4aD011oJtNGtfHa7udcMqubzIcd7hXQdrM7IbzHMoPB5X7HFwYPV8ksk-gV9ixfEzGgEHBrPdxbwBX7pnswL2cQV-9jyFYw+launchtime:1776341736185+placelauncherurl:https%3A%2F%2Fwww.roblox.com%2FGame%2FPlaceLauncher.ashx%3Frequest%3DRequestGame%26browserTrackerId%3D1776341482234004%26placeId%3D14113053169%26isPlayTogetherGame%3Dfalse%26referredByPlayerId%3D0%26joinAttemptId%3D9ada9dbd-1914-424f-b07b-81f9dfc827c8%26joinAttemptOrigin%3DPlayButton+browsertrackerid:1776341482234004+robloxLocale:en_us+gameLocale:en_us+channel:zenablesessionmanagereventbasedsystraystatectrl2+LaunchExp:InApp
                                                                        2⤵
                                                                        • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:5244
                                                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                      1⤵
                                                                        PID:2228
                                                                      • C:\Windows\system32\svchost.exe
                                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                        1⤵
                                                                          PID:4108
                                                                        • C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe
                                                                          "C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe"
                                                                          1⤵
                                                                          • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          PID:1128
                                                                        • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
                                                                          "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
                                                                          1⤵
                                                                          • Modifies registry class
                                                                          • Suspicious use of SetWindowsHookEx
                                                                          PID:1468
                                                                        • C:\Windows\System32\rundll32.exe
                                                                          C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                          1⤵
                                                                            PID:2836
                                                                          • C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe
                                                                            "C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe"
                                                                            1⤵
                                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            PID:4564
                                                                          • C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe
                                                                            "C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.exe"
                                                                            1⤵
                                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            PID:1684
                                                                          • C:\Windows\SysWOW64\DllHost.exe
                                                                            C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
                                                                            1⤵
                                                                            • System Location Discovery: System Language Discovery
                                                                            PID:1792
                                                                          • C:\Windows\system32\rundll32.exe
                                                                            "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,Control_RunDLL C:\Windows\System32\srchadmin.dll ,
                                                                            1⤵
                                                                              PID:988

                                                                            Network

                                                                                  MITRE ATT&CK Enterprise v16

                                                                                  Replay Monitor

                                                                                  Loading Replay Monitor...

                                                                                  Downloads

                                                                                  RobloxStudioInstaller.exe
                                                                                  • Path C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe
                                                                                  • Size 9.5MB
                                                                                  • SHA256 bbf413a40c8aa3bfdf44167f12f40b12f7bf5428925ee5e628416601a4064ae4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  RobloxPlayerBeta.dll
                                                                                  • Path C:\Program Files (x86)\Roblox\Versions\version-9d412f44a6fe4081\RobloxPlayerBeta.dll
                                                                                  • Size 15.5MB
                                                                                  • SHA256 80e1c990de61dc21b61a9c3f978236bfe1266cd0cc09af4673f9d73d91b3d8c3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  54C62B182F5BF07FA8427C07B0A3AAF8_4DBBCB40FA282C06F1543D887F4F4DCC
                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\54C62B182F5BF07FA8427C07B0A3AAF8_4DBBCB40FA282C06F1543D887F4F4DCC
                                                                                  • Size 719B
                                                                                  • SHA256 ad2361fb0fae8524c070ae1b3b197249c7a7406ffb880346f02639a74dedfea1
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  A71F9E6AF1EDB5F61A1EABEAC6EE27B2_D62B1A6E7A25E8AED631F57A5AAB219E
                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A71F9E6AF1EDB5F61A1EABEAC6EE27B2_D62B1A6E7A25E8AED631F57A5AAB219E
                                                                                  • Size 727B
                                                                                  • SHA256 ac75c11e257962f1febf17feb5b77d69efcb418d9afbeffb4ee43fceed51db4d
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  54C62B182F5BF07FA8427C07B0A3AAF8_4DBBCB40FA282C06F1543D887F4F4DCC
                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\54C62B182F5BF07FA8427C07B0A3AAF8_4DBBCB40FA282C06F1543D887F4F4DCC
                                                                                  • Size 446B
                                                                                  • SHA256 87198943981c57b74535e9da2bba26f89d391f8849c9b865aa44ae9b5d9f2753
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  A71F9E6AF1EDB5F61A1EABEAC6EE27B2_D62B1A6E7A25E8AED631F57A5AAB219E
                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A71F9E6AF1EDB5F61A1EABEAC6EE27B2_D62B1A6E7A25E8AED631F57A5AAB219E
                                                                                  • Size 478B
                                                                                  • SHA256 de44021d7916c5c96126c6c7cf886771b1b83ec4d3e6b214880635a62be8a645
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  ah5nw3xd.newcfg
                                                                                  • Path C:\Users\Admin\AppData\Local\CMD_Softworks\Solara.exe_Url_53xuh3ye2sv3irjmmisjyux5zs5ykbiy\1.0.0.0\ah5nw3xd.newcfg
                                                                                  • Size 935B
                                                                                  • SHA256 0f751771f2088db72f3fb00851208fff1e57de56d5cfd53154576e57ea16ca39
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  user.config
                                                                                  • Path C:\Users\Admin\AppData\Local\CMD_Softworks\Solara.exe_Url_53xuh3ye2sv3irjmmisjyux5zs5ykbiy\1.0.0.0\user.config
                                                                                  • Size 815B
                                                                                  • SHA256 8c07ca027ee07a4a9ab98b17facadd032986912853b38e11840414114d53a395
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  BookmarkMergedSurfaceOrdering
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                  • Size 6B
                                                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  BrowsingTopicsState
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                  • Size 414B
                                                                                  • SHA256 18426f06a8ab8ee7904fa59a77f2cd2b8b65912f4a4cc430e11ceeb9ded5c46d
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  f_00002b
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b
                                                                                  • Size 16KB
                                                                                  • SHA256 cf2bf37125d54249e45235e756a2a4e6bb7b3f5558124d8e5c5f2e8383e36f2a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  f_00002e
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e
                                                                                  • Size 93KB
                                                                                  • SHA256 56c043c090648039c10cf78b12210a8b843f3173f592bbd5962119e5de7b7faf
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  f_000030
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030
                                                                                  • Size 18KB
                                                                                  • SHA256 6a3104c204263fcaa1f8174ace2dca41f00ed46522bfd9e23173d85a188445b7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  f_000031
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000031
                                                                                  • Size 18KB
                                                                                  • SHA256 b153ac5c3c17bc58055f489169524bd6dfd94a0589b0831401ed66a3e5d11af7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  f_000138
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000138
                                                                                  • Size 51KB
                                                                                  • SHA256 bbc4044fe46acd7ab69d8a4e3db46e7e3ca713b05fa8ecb096ebe9e133bba760
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  the-real-index
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                  • Size 4KB
                                                                                  • SHA256 ab694d351a3919997ab0ef05c5b230b190a45320da6c12140cf75ecf4746a64a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  the-real-index
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                  • Size 5KB
                                                                                  • SHA256 f49ed4b3afcd066317efbcaa45dea781fc8492b8d553da20d0dcc70e1b7554ff
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  000003.log
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\000003.log
                                                                                  • Size 45KB
                                                                                  • SHA256 707618192a5f7751819feb376479413083b718631876930fb92ac520c7b36169
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  LOG
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG
                                                                                  • Size 387B
                                                                                  • SHA256 a5cc6ee0009613c58b8705fadc3d2411c2d12dcc7aa39d6b4d0a37f2e967c034
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  LOG
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG
                                                                                  • Size 387B
                                                                                  • SHA256 de04abc01c0ddf4e5c5d74d61140889af00c643db8c006f41482527b9d6e68bd
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  LOG
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG
                                                                                  • Size 387B
                                                                                  • SHA256 3d757399f7702f5112dc60a927eb9a4bd40e84494ef0edf5fe477b606d72bf5b
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  LOG.old
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
                                                                                  • Size 387B
                                                                                  • SHA256 8c101357460582cdab4bb21443137762be97cced16a12d412e9689bf97520b20
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  LOG.old
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old
                                                                                  • Size 510B
                                                                                  • SHA256 b14c72668fe0698e32793bd7695a70236b9ab5d544f9b5e169dbb3243a5e0c13
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  MANIFEST-000001
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                  • Size 23B
                                                                                  • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  12267a04-a01d-49df-bc99-dc2f9a99ac7a.tmp
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\12267a04-a01d-49df-bc99-dc2f9a99ac7a.tmp
                                                                                  • Size 2B
                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  Network Persistent State
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                  • Size 12KB
                                                                                  • SHA256 2b9754630c958a5cb0715739847229f49953c8746daf01ec71eed272b13b9f3a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Network Persistent State
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                  • Size 13KB
                                                                                  • SHA256 1024373ac67a0f67e873e20c48b08c6460796717a2ccccc077f8b0ab6cbde40a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Network Persistent State
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                  • Size 7KB
                                                                                  • SHA256 28f066517cb4bb1c6e8d8e2b91c759430d106cf60958a0f305aa0b78f7edb15e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                  • Size 14KB
                                                                                  • SHA256 f8a11e3ec88a2f66da0c012cce76b34d0443e32275833ab2e61c1a8b59a6d728
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                  • Size 14KB
                                                                                  • SHA256 576d7dab4786aba093e886bd9c105b51413cea4a186f6353ea27693fd0f79081
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                  • Size 14KB
                                                                                  • SHA256 b9af8ba4b33718b582c712e52f451402a1b72834230f42e1c0b466e3103c1cf0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                  • Size 12KB
                                                                                  • SHA256 929101efb69e4e8c4c6dd66d9c759bb0ce9e7fc2ef81af8c8b7125ee53f9d084
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                  • Size 14KB
                                                                                  • SHA256 11c443d610345e7f702b7ed01278c0627a2330d8d6c4fc140165e8fdb046a21a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                  • Size 14KB
                                                                                  • SHA256 0fe4d4b7d797fb885297d852729cc3fa969d57484ad1a3e74f0a7b8571b5af63
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                  • Size 14KB
                                                                                  • SHA256 b89e6bde45adc8ec3f824278a6feab88263c74f91c5a6939f3fa120e96bfaec2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                  • Size 13KB
                                                                                  • SHA256 e4bdcaba9ec2fe1ec66dcc129945ba9a6084be2048f2b2287aefaf0ae9702bb1
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                  • Size 14KB
                                                                                  • SHA256 2c3abb6425dfdc6e6a77a5a0b489848ce010d4c5267f0ca05b32a082072692b5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Secure Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                  • Size 17KB
                                                                                  • SHA256 5ab444414a02d4891c7cbb4db3735bec720facb3265bdedc915a68f6beef1cd9
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  the-real-index
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                  • Size 120B
                                                                                  • SHA256 5d32f8a50af401b76911ce9e58b872c63b682b89c9f236b8af51695780639cc9
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  the-real-index~RFe58dc13.TMP
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58dc13.TMP
                                                                                  • Size 96B
                                                                                  • SHA256 dd8fc2a426f3378527b7c5b6e971302d66f8d0acddc0354a0412265a6be78667
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                  • Size 194KB
                                                                                  • SHA256 512ca4419800cfb095ba63b3ab42723cdf6f4ec76c61ad2ed1f5fde61d848405
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                  • Size 195KB
                                                                                  • SHA256 9da54db02dcf33ea335dccdaea241355db26b5eb5c8918fc5f148f2ed4f33e20
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                  • Size 194KB
                                                                                  • SHA256 dbda1ebce1b4b94492fe2278b804bc43c77dce77bf87763fd3bd7af3a3a53086
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                  • Size 195KB
                                                                                  • SHA256 39b4ceca0b72a720de82ad6db10c99b59a412c1bc071c1faa7c6f4f54659e475
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                  • Size 90KB
                                                                                  • SHA256 dacd6bda18afa78883df844f8c3f874d3e9540e788e13e9d482909729f6433e0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  SearchHoverUnifiedTileModelCache.dat
                                                                                  • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
                                                                                  • Size 20KB
                                                                                  • SHA256 26d33032ce9877ec833629fafede3bc487067baf5322364c0e2779696b7ea390
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  protocols.json
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                  • Size 3KB
                                                                                  • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  crl-set
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                  • Size 22KB
                                                                                  • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  settings.dat
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Crashpad\settings.dat
                                                                                  • Size 280B
                                                                                  • SHA256 10fb4a09e7e00f2152e9daa1c04ca5c24dbd4517da8733806b3c900266ed9253
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  settings.dat
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Crashpad\settings.dat
                                                                                  • Size 280B
                                                                                  • SHA256 146338bcf18b26064048ffae3fb90ab3c673718387a7e75fb21a90be2551ef4b
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  throttle_store.dat
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Crashpad\throttle_store.dat
                                                                                  • Size 20B
                                                                                  • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  the-real-index
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                  • Size 192B
                                                                                  • SHA256 bb24b883112032710aa73f9218da4cc131c8aaba2f3a083f62d5b77ff2191dd4
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  the-real-index
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                                                                  • Size 48B
                                                                                  • SHA256 3363e573d92b24172f9eb635e22aebe9f64ac7526a72cbe8596bea2014ce790a
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  data_0
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\DawnWebGPUCache\data_0
                                                                                  • Size 8KB
                                                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                  Submit Download

                                                                                  data_1
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\DawnWebGPUCache\data_1
                                                                                  • Size 264KB
                                                                                  • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                  Submit Download

                                                                                  data_2
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\DawnWebGPUCache\data_2
                                                                                  • Size 8KB
                                                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                  Submit Download

                                                                                  data_3
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\DawnWebGPUCache\data_3
                                                                                  • Size 8KB
                                                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                  Submit Download

                                                                                  MANIFEST-000001
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
                                                                                  • Size 41B
                                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  Network Persistent State
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Network\Network Persistent State
                                                                                  • Size 1KB
                                                                                  • SHA256 f5b7181de13874b4b999621c8f72cea2cd42cabb3b0fc5c6e46130c5cc88628d
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  Network Persistent State~RFe59e739.TMP
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Network\Network Persistent State~RFe59e739.TMP
                                                                                  • Size 59B
                                                                                  • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Preferences
                                                                                  • Size 7KB
                                                                                  • SHA256 1cf9164fc8d2d831a0fc575fe486a23d1bd7d03d623754e95e51b64da26cd14a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Preferences
                                                                                  • Size 6KB
                                                                                  • SHA256 744cacf4f0f112d352821a3cb8eca36b3119dada3c6d54723b0a7c8ae75353a4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Preferences~RFe597035.TMP
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Preferences~RFe597035.TMP
                                                                                  • Size 6KB
                                                                                  • SHA256 d9a3f8ddaf0691e6da09f468d3dcee5ed0966d7d0abac1cc74c37e5772079237
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  CURRENT
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Default\Site Characteristics Database\CURRENT
                                                                                  • Size 16B
                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State
                                                                                  • Size 1KB
                                                                                  • SHA256 5425b519150efba95298600da6d12b1fa0c138281aaef0838058cd2b4f9c7514
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State
                                                                                  • Size 2KB
                                                                                  • SHA256 0d572ca664147b4f74482a84a36cf51245048eb486af7b7811ae1b8645a193dc
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State
                                                                                  • Size 15KB
                                                                                  • SHA256 e36d16f829b4bb438bc4367b9a4eff99d200a5264fbd3b527097d338b96aee03
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State
                                                                                  • Size 3KB
                                                                                  • SHA256 9fdf28920f25ca736ac02370821e86f6f9052580973575852ead2433df90313e
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  Local State~RFe58d210.TMP
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\Local State~RFe58d210.TMP
                                                                                  • Size 1KB
                                                                                  • SHA256 e89618513bd5356ba454cfc9264a675eeeb70f420151f143198e890096991e9e
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  crs.pb
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\PKIMetadata\29.0.0.0\crs.pb
                                                                                  • Size 251KB
                                                                                  • SHA256 576d77d3085ff9156298e60dee868364cabab7911edf6f9a4d3ad5f351d5059f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  ct_config.pb
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\PKIMetadata\29.0.0.0\ct_config.pb
                                                                                  • Size 16KB
                                                                                  • SHA256 dfc86083d2fa2463f12d1d096db6084c860cb8bfddc3d2cf8e818f65353241d6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  kp_pinslist.pb
                                                                                  • Path C:\Users\Admin\AppData\Local\SolaraWebView2\EBWebView\PKIMetadata\29.0.0.0\kp_pinslist.pb
                                                                                  • Size 10KB
                                                                                  • SHA256 9314218dc6642ea1980d504ec45e23aa2b4e7775ef13f7c7121271dbd60b1df4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Microsoft.Web.WebView2.Core.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\Microsoft.Web.WebView2.Core.dll
                                                                                  • Size 634KB
                                                                                  • SHA256 2b999d1775004e98b32f281f4518f3952df650970748527ef5b54fa9979d6c9c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Microsoft.Web.WebView2.Wpf.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\Microsoft.Web.WebView2.Wpf.dll
                                                                                  • Size 80KB
                                                                                  • SHA256 6d329162b460515a849c693518ff626a1a3363e79d549cfd6822e5601f24603e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  index.html
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\Monaco\index.html
                                                                                  • Size 14KB
                                                                                  • SHA256 e0f556c791d604813a2552e4dd5af9779875563561c5bc5824b4c0bd51313ba3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lua.js
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\Monaco\vs\basic-languages\lua\lua.js
                                                                                  • Size 5KB
                                                                                  • SHA256 fc2d6fb52a524a56cd8ac53bfe4bad733f246e76dc73cbec4c61be32d282ac42
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  editor.main.css
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\Monaco\vs\editor\editor.main.css
                                                                                  • Size 171KB
                                                                                  • SHA256 fb2cbf2ee64286bc010a6c6fe6a81c6c292c145a2f584d0240c674f56e3015b0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  editor.main.js
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\Monaco\vs\editor\editor.main.js
                                                                                  • Size 2.0MB
                                                                                  • SHA256 93d28520c07fbca09e20886087f28797bb7bd0e6cf77400153aab5ae67e3ce18
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  editor.main.nls.js
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\Monaco\vs\editor\editor.main.nls.js
                                                                                  • Size 31KB
                                                                                  • SHA256 fdd9d64ce5284373d1541528d15e2aa8aa3a4adc11b51b3d71d3a3953f8bcc48
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  loader.js
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\Monaco\vs\loader.js
                                                                                  • Size 27KB
                                                                                  • SHA256 0512d9ed3e5bb3daef94aa5c16a6c3e2ee26ffed9de00d1434ffe46a027b16b9
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Newtonsoft.Json.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\Newtonsoft.Json.dll
                                                                                  • Size 695KB
                                                                                  • SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Solara.exe
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\Solara.exe
                                                                                  • Size 1.3MB
                                                                                  • SHA256 473032c443307738fa01a2dc1d636c81f7b2def5d48d0dde91b0b896230bc83b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  SolaraV3.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\SolaraV3.dll
                                                                                  • Size 14.0MB
                                                                                  • SHA256 2985aeb3707505433f1a37ca5d75ac305967e6dd8478d53fe56312d8acc7e14c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  WebView2Loader.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\WebView2Loader.dll
                                                                                  • Size 133KB
                                                                                  • SHA256 79d7e45f8631e8d2541d01bfb5a49a3a090be72b3d465389a2d684680fee2e36
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Wpf.Ui.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\Wpf.Ui.dll
                                                                                  • Size 5.7MB
                                                                                  • SHA256 0ebff5461eb1984ea852566a59f08456e48909f4ea9b7ec064a219a28ece0343
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  DEBUG.txt
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\bin\DEBUG.txt
                                                                                  • Size 345B
                                                                                  • SHA256 53de5f517b1523df941c2b840556843906356e2138854c33e47924eb46d18e82
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  DEBUG.txt
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\bin\DEBUG.txt
                                                                                  • Size 569B
                                                                                  • SHA256 921531809c56ead76c7a4d0853b007032f5c76f7463c970ad55de7b5f2935402
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  DEBUG.txt
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\bin\DEBUG.txt
                                                                                  • Size 1022B
                                                                                  • SHA256 4d63cc2b4e7f1d46c6fe9d4e23c56ca1c90c2f7715da5181b24785c387f49d1e
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  DEBUG.txt
                                                                                  • Path C:\Users\Admin\AppData\Local\Solara\bin\DEBUG.txt
                                                                                  • Size 1KB
                                                                                  • SHA256 201d0cb0041a29f5a10a18bf04b398cd1c6678371ca8ac6ab5b9a1f181bb917b
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  default.dic
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                  • Size 2B
                                                                                  • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  RobloxPlayerInstaller-C6TTPW24QK.exe
                                                                                  • Path C:\Users\Admin\Downloads\RobloxPlayerInstaller-C6TTPW24QK.exe
                                                                                  • Size 9.5MB
                                                                                  • SHA256 2979db026346f0652c943e169ab0b944829a3cf2311b97456f3a15a2d6b7e402
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  RobloxPlayerInstaller-C6TTPW24QK.exe:Zone.Identifier
                                                                                  • Path C:\Users\Admin\Downloads\RobloxPlayerInstaller-C6TTPW24QK.exe:Zone.Identifier
                                                                                  • Size 91B
                                                                                  • SHA256 7ee9c5af4ea96cdd213cd3a46acf8ef7d7a624895ae9c1c8205d881d241e6b5a
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  manifest.json
                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2276_1703188561\manifest.json
                                                                                  • Size 43B
                                                                                  • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  manifest.json
                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2276_1733697570\manifest.json
                                                                                  • Size 69B
                                                                                  • SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  manifest.fingerprint
                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2276_604048661\manifest.fingerprint
                                                                                  • Size 66B
                                                                                  • SHA256 c236a2ac7741d48e1c56980652331cb3f1f12baf937baf0b280600fbafb143e3
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  manifest.json
                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2276_604048661\manifest.json
                                                                                  • Size 135B
                                                                                  • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  manifest.json
                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2276_745079760\manifest.json
                                                                                  • Size 102B
                                                                                  • SHA256 0b11bc370854bd2e625deb04fdfc53ba444e4af63ba831f9de785b44464b59b9
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  hyph-as.hyb
                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2276_786469900\hyph-as.hyb
                                                                                  • Size 703B
                                                                                  • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  hyph-hi.hyb
                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2276_786469900\hyph-hi.hyb
                                                                                  • Size 687B
                                                                                  • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  hyph-nb.hyb
                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2276_786469900\hyph-nb.hyb
                                                                                  • Size 141KB
                                                                                  • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  manifest.json
                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2276_786469900\manifest.json
                                                                                  • Size 82B
                                                                                  • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  manifest.json
                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2276_838952519\manifest.json
                                                                                  • Size 76B
                                                                                  • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  manifest.json
                                                                                  • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2276_906161457\manifest.json
                                                                                  • Size 113B
                                                                                  • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  memory/912-2604-0x000001DD15AF0000-0x000001DD15AFC000-memory.dmp
                                                                                  Download

                                                                                  memory/988-3438-0x000001E340580000-0x000001E34058C000-memory.dmp
                                                                                  Download

                                                                                  memory/988-3437-0x000001E342150000-0x000001E342226000-memory.dmp
                                                                                  Download

                                                                                  memory/1128-3213-0x0000029D4B3D0000-0x0000029D4B3DC000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-562-0x00007FF8544F0000-0x00007FF8552F6000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-2852-0x000002C42E010000-0x000002C42E01F000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-564-0x000002C429A40000-0x000002C429A58000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-842-0x000002C429870000-0x000002C429882000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-841-0x000002C410E90000-0x000002C410F66000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-840-0x000002C40F830000-0x000002C40F83C000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-519-0x000002C429A70000-0x000002C429B2A000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-518-0x000002C429E80000-0x000002C42A434000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-3356-0x00007FF8544F0000-0x00007FF8552F6000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-516-0x000002C40F040000-0x000002C40F182000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-3297-0x000002C40F830000-0x000002C40F83C000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-3298-0x000002C410E90000-0x000002C410F66000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-574-0x000002C429DC0000-0x000002C429E72000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-3302-0x000002C42E010000-0x000002C42E01F000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-2336-0x00007FF8544F0000-0x00007FF8552F6000-memory.dmp
                                                                                  Download

                                                                                  memory/1164-569-0x000002C429D10000-0x000002C429DB2000-memory.dmp
                                                                                  Download

                                                                                  memory/1536-617-0x00007FF883E30000-0x00007FF883E31000-memory.dmp
                                                                                  Download

                                                                                  memory/1684-3436-0x000001A774D80000-0x000001A774D8C000-memory.dmp
                                                                                  Download

                                                                                  memory/2276-3413-0x0000027423E00000-0x00000274245AE000-memory.dmp
                                                                                  Download

                                                                                  memory/2276-843-0x0000027423E00000-0x00000274245AE000-memory.dmp
                                                                                  Download

                                                                                  memory/2300-3071-0x00000226F5DD0000-0x00000226F5DDC000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-6-0x000001D95CF40000-0x000001D95CF50000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-4-0x000001D95CF40000-0x000001D95CF50000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-1-0x000001D95CF40000-0x000001D95CF50000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-2-0x000001D95CF40000-0x000001D95CF50000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-590-0x000001D977000000-0x000001D9770D6000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-0-0x000001D95C2F0000-0x000001D95CB36000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-589-0x000001D95CF50000-0x000001D95CF5C000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-3-0x000001D95CFA0000-0x000001D95CFB0000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-5-0x000001D97B1B0000-0x000001D97B1B8000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-7-0x000001D97B790000-0x000001D97B7C8000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-8-0x000001D97B750000-0x000001D97B75E000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-98-0x000001D977B70000-0x000001D977B7A000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-97-0x000001D977BC0000-0x000001D977BD2000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-94-0x000001D977B90000-0x000001D977BB2000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-93-0x000001D91F090000-0x000001D91F142000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-17-0x000001D95CF40000-0x000001D95CF50000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-16-0x000001D97B770000-0x000001D97B782000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-15-0x000001D977000000-0x000001D9770D6000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-11-0x000001D95CF40000-0x000001D95CF50000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-14-0x000001D95CF50000-0x000001D95CF5C000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-13-0x000001D95CF40000-0x000001D95CF50000-memory.dmp
                                                                                  Download

                                                                                  memory/2472-12-0x000001D95CF40000-0x000001D95CF50000-memory.dmp
                                                                                  Download

                                                                                  memory/4564-3266-0x000001EA62F20000-0x000001EA62F2C000-memory.dmp
                                                                                  Download

                                                                                  memory/4888-717-0x00007FF883E30000-0x00007FF883E31000-memory.dmp
                                                                                  Download

                                                                                  memory/5244-3414-0x000001736D840000-0x000001736D84C000-memory.dmp
                                                                                  Download

                                                                                  memory/5644-2529-0x0000016BB0B30000-0x0000016BB0B31000-memory.dmp
                                                                                  Download

                                                                                  memory/5644-2533-0x0000016BB0B30000-0x0000016BB0B31000-memory.dmp
                                                                                  Download

                                                                                  memory/5644-2534-0x0000016BB0B30000-0x0000016BB0B31000-memory.dmp
                                                                                  Download

                                                                                  memory/5644-2528-0x0000016BB0B30000-0x0000016BB0B31000-memory.dmp
                                                                                  Download

                                                                                  memory/5644-2535-0x0000016BB0E00000-0x0000016BB15AE000-memory.dmp
                                                                                  Download

                                                                                  memory/5644-2519-0x0000016BB0B30000-0x0000016BB0B31000-memory.dmp
                                                                                  Download

                                                                                  memory/5644-2521-0x0000016BB0B30000-0x0000016BB0B31000-memory.dmp
                                                                                  Download

                                                                                  memory/5644-2532-0x0000016BB0B30000-0x0000016BB0B31000-memory.dmp
                                                                                  Download

                                                                                  memory/5644-2531-0x0000016BB0B30000-0x0000016BB0B31000-memory.dmp
                                                                                  Download

                                                                                  memory/5644-2530-0x0000016BB0B30000-0x0000016BB0B31000-memory.dmp
                                                                                  Download

                                                                                  memory/5644-2520-0x0000016BB0B30000-0x0000016BB0B31000-memory.dmp
                                                                                  Download

                                                                                  memory/5852-3202-0x0000024B117D0000-0x0000024B117DC000-memory.dmp
                                                                                  Download

                                                                                  memory/5896-2426-0x0000000004A20000-0x0000000004AFA000-memory.dmp
                                                                                  Download

                                                                                  memory/5896-2449-0x0000000004A20000-0x0000000004AFA000-memory.dmp
                                                                                  Download

                                                                                  memory/5896-2840-0x0000000004A20000-0x0000000004AFA000-memory.dmp
                                                                                  Download