Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    11/05/2026, 17:15

General

  • Target
    158.94.208.16.ps1
  • Size 10KB
  • Sample260511-vsvddsfv9t
  • SHA256 5c3f6ce7bf81df9214a7ec2c6c9b9c8292faac1eebb078a58c6ac817e6684a15
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Badlisted process makes network request 1 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Executes dropped EXE 8 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Using powershell.exe command.

  • Modifies registry key 1 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 13 IoCs

Processes

  • C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe
    powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\158.94.208.16.ps1
    1⤵
    • Badlisted process makes network request
    • Command and Scripting Interpreter: PowerShell
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:904
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Programs\nodejs\npm.cmd" install --prefix C:\Users\Admin\AppData\Local\Programs\nodejs --no-save --package-lock=false --omit=dev --no-audit --no-fund --no-progress --silent -g node-pty socket.io-client"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4600
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c CALL "C:\Users\Admin\AppData\Local\Programs\nodejs\\node.exe" "C:\Users\Admin\AppData\Local\Programs\nodejs\\node_modules\npm\bin\npm-prefix.js"
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:3992
        • C:\Users\Admin\AppData\Local\Programs\nodejs\node.exe
          "C:\Users\Admin\AppData\Local\Programs\nodejs\\node.exe" "C:\Users\Admin\AppData\Local\Programs\nodejs\\node_modules\npm\bin\npm-prefix.js"
          4⤵
          • Executes dropped EXE
          PID:1700
      • C:\Users\Admin\AppData\Local\Programs\nodejs\node.exe
        "C:\Users\Admin\AppData\Local\Programs\nodejs\\node.exe" "C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\bin\npm-cli.js" install --prefix C:\Users\Admin\AppData\Local\Programs\nodejs --no-save --package-lock=false --omit=dev --no-audit --no-fund --no-progress --silent -g node-pty socket.io-client
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:4688
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c node scripts/prebuild.js || node-gyp rebuild
          4⤵
          • Suspicious use of WriteProcessMemory
          PID:4904
          • C:\Users\Admin\AppData\Local\Programs\nodejs\node.exe
            node scripts/prebuild.js
            5⤵
            • Executes dropped EXE
            PID:3172
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c node scripts/post-install.js
          4⤵
          • Suspicious use of WriteProcessMemory
          PID:3664
          • C:\Users\Admin\AppData\Local\Programs\nodejs\node.exe
            node scripts/post-install.js
            5⤵
            • Executes dropped EXE
            PID:3152
    • C:\Users\Admin\AppData\Local\Programs\nodejs\node.exe
      "C:\Users\Admin\AppData\Local\Programs\nodejs\node.exe" C:\Users\Admin\AppData\Local\Programs\nodejs\app.js
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:1056
      • C:\Users\Admin\AppData\Local\Programs\nodejs\node.exe
        C:\Users\Admin\AppData\Local\Programs\nodejs\node.exe C:\Users\Admin\AppData\Local\Programs\nodejs\app.js start
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:2284
        • C:\Windows\system32\reg.exe
          reg add HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v nodejs /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\nodejs\node.exe\" \"C:\Users\Admin\AppData\Local\Programs\nodejs\app.js\" " /f
          4⤵
          • Adds Run key to start application
          • Modifies registry key
          PID:2168
  • C:\Users\Admin\AppData\Local\Programs\nodejs\node.exe
    "C:\Users\Admin\AppData\Local\Programs\nodejs\node.exe" "C:\Users\Admin\AppData\Local\Programs\nodejs\app.js"
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:764
    • C:\Users\Admin\AppData\Local\Programs\nodejs\node.exe
      C:\Users\Admin\AppData\Local\Programs\nodejs\node.exe C:\Users\Admin\AppData\Local\Programs\nodejs\app.js start
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:588
      • C:\Windows\system32\reg.exe
        reg add HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v nodejs /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\nodejs\node.exe\" \"C:\Users\Admin\AppData\Local\Programs\nodejs\app.js\" " /f
        3⤵
        • Adds Run key to start application
        • Modifies registry key
        PID:1296

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        text.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\emoji-regex\es2015\text.js
        • Size 15KB
        • SHA256 450490d136ad99169d360f0c45a317a0ccb083da34602324734491467715baea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        text.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\emoji-regex\text.js
        • Size 14KB
        • SHA256 07005fd8527ab9ac801d940ee255890039ce8c8960dffbf5ded08c7a8d89bee0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        license

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\strip-ansi\license
        • Size 1KB
        • SHA256 fcf1a18be2e25ba82acf2c59821b030d8ee764e4e201db6ef3c51900d385515f
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\@isaacs\fs-minipass\dist\commonjs\package.json
        • Size 28B
        • SHA256 58b55392b5778941e1e96892a70edc12e2d7bb8541289b237fbddc9926ed51bd
        • MD5 SHA1 SHA512

        package.json

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\@isaacs\fs-minipass\dist\esm\package.json
        • Size 26B
        • SHA256 1bf0e53fc74b05f1aade7451fbac72f1944b067d4229d96bae7a225519a250e4
        • MD5 SHA1 SHA512

        LICENSE.md

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\@npmcli\map-workspaces\LICENSE.md
        • Size 818B
        • SHA256 733dcbf5b1c95dc765b76db969b998ce0cbb26f01be2e55e7bccd6c7af29cb04
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\@npmcli\metavuln-calculator\LICENSE
        • Size 754B
        • SHA256 45e433413760dc3ae8169be5ed9c2c77adc31ad4d1bc5a28939576df240f29a0
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\@sigstore\protobuf-specs\LICENSE
        • Size 11KB
        • SHA256 7b0ce3425a26fdba501cb13508af096ade77e4036dd2bd8849031ddecf64f7c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fetch.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\@sigstore\sign\dist\types\fetch.js
        • Size 79B
        • SHA256 ef1f170ad28f2d870a474d2f96ae353d770fff5f20e642cd8f9b6f1d7742df13
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\cross-spawn\node_modules\which\LICENSE
        • Size 780B
        • SHA256 3f24d692d165989cd9a00fe35ca15a2bc6859e3361fa42aa20babd435f2e4706
        • MD5 SHA1 SHA512 TLSH

        LICENSE-MIT.txt

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\emoji-regex\LICENSE-MIT.txt
        • Size 1KB
        • SHA256 f996f6e050e6fc18086162b4b44e301bba345c87deca83f57a27e6d54195556e
        • MD5 SHA1 SHA512 TLSH

        license

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\is-fullwidth-code-point\license
        • Size 1KB
        • SHA256 67292c32894c8ac99db06ffa1cb8e9a5171ef988120723ebe673bf76712260ec
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\libnpmpack\LICENSE
        • Size 730B
        • SHA256 2ef361317adeda98117f14c5110182c28eae233af1f7050c83d4396961d14013
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\libnpmversion\LICENSE
        • Size 763B
        • SHA256 1fccd0ad2e7e0e31ddfadeaf0660d7318947b425324645aa85afd7227cab52d7
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\LICENSE
        • Size 802B
        • SHA256 04400db77d925de5b0264f6db5b44fe6f8b94f9419ad3473caaa8065c525c0be
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\index.js
        • Size 16KB
        • SHA256 7a395802fbe01bb3dc8d09586e0864f255874bf897378e546444fbaec29f54c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\package.json
        • Size 1KB
        • SHA256 c3052bd85910be313e38ad355528d527b565e70ef15a784db3279649eee2ded5
        • MD5 SHA1 SHA512 TLSH

        glob.d.ts.map

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\glob\dist\commonjs\glob.d.ts.map
        • Size 3KB
        • SHA256 91a91361619a2034d7dcb84e1c68e08447dd666166258baca6d6255ceefd41cf
        • MD5 SHA1 SHA512 TLSH

        has-magic.d.ts

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\glob\dist\commonjs\has-magic.d.ts
        • Size 773B
        • SHA256 52030a2056912c1b82c99f424edb29ce47b3a761089b326749f02d484ef81ce8
        • MD5 SHA1 SHA512 TLSH

        has-magic.d.ts.map

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\glob\dist\commonjs\has-magic.d.ts.map
        • Size 246B
        • SHA256 9e87ee2704ddd099ab4b6e6822d64df9b42c2d8b963a1ca0b9a6119814602a4f
        • MD5 SHA1 SHA512 TLSH

        ignore.d.ts

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\glob\dist\commonjs\ignore.d.ts
        • Size 836B
        • SHA256 62a1f98aa6a5fe10d6b82893b15d2067364ec332ab7befb54261ece4241fa732
        • MD5 SHA1 SHA512 TLSH

        ignore.d.ts.map

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\glob\dist\commonjs\ignore.d.ts.map
        • Size 886B
        • SHA256 1a4e51f33c24667754901d1bf1a556385132ddabbbe4894e7dd89d1f99198626
        • MD5 SHA1 SHA512 TLSH

        index.d.ts

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\glob\dist\commonjs\index.d.ts
        • Size 6KB
        • SHA256 1e4da22986b860a5cbf2648f42ab5cf2a5145346f450b42a9a4e21ab258760e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.d.ts.map

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\glob\dist\commonjs\index.d.ts.map
        • Size 3KB
        • SHA256 c16e4f243248271fcd0665782cace03944b5131e0d8fdbc00753f4c3e2c16af6
        • MD5 SHA1 SHA512 TLSH

        pattern.d.ts

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\glob\dist\commonjs\pattern.d.ts
        • Size 2KB
        • SHA256 3cf2d1f58ada4a5b8e55b7bac8e27991860e09a6206e3c15a1876331fcd62286
        • MD5 SHA1 SHA512 TLSH

        pattern.d.ts.map

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\glob\dist\commonjs\pattern.d.ts.map
        • Size 1KB
        • SHA256 b75bc80c025c0cfcd7cfe70afaca70907e38922854594c80f199eefa6cbaaf64
        • MD5 SHA1 SHA512 TLSH

        processor.d.ts

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\glob\dist\commonjs\processor.d.ts
        • Size 2KB
        • SHA256 347be9ba90b8f03651e1ba369ce4915b65fac75df6987b570f133f1d758099a4
        • MD5 SHA1 SHA512 TLSH

        processor.d.ts.map

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\glob\dist\commonjs\processor.d.ts.map
        • Size 1KB
        • SHA256 0c9435d91446dd471239e1a66c863336bcf3295dd1f6227c7c20d1ad6df60585
        • MD5 SHA1 SHA512 TLSH

        walker.d.ts

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\glob\dist\commonjs\walker.d.ts
        • Size 3KB
        • SHA256 54540be1afdaf0c41c20a6876659e4c168a916c6c9c8d21bcb2ea98f9ec90e5d
        • MD5 SHA1 SHA512 TLSH

        walker.d.ts.map

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\glob\dist\commonjs\walker.d.ts.map
        • Size 4KB
        • SHA256 d2f9134b1058571e80315959c20a359bb10606e4859974c445357a0d988eacb3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minimatch\LICENSE
        • Size 790B
        • SHA256 7562dad0a93e4fbf8547fccac664dc3187231e457c9c0d5c5834bc2d5f31749a
        • MD5 SHA1 SHA512 TLSH

        assert-valid-pattern.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minimatch\dist\commonjs\assert-valid-pattern.js
        • Size 505B
        • SHA256 283105428a047d6cf59143fa2912ee8eaa4e93fefc896494013ac728b3bc6fed
        • MD5 SHA1 SHA512 TLSH

        ast.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minimatch\dist\commonjs\ast.js
        • Size 22KB
        • SHA256 73ce143cf7d8474f9ae8047779dcfc59b9032a3b1baf658151c34750f1972f91
        • MD5 SHA1 SHA512 SSDEEP TLSH

        brace-expressions.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minimatch\dist\commonjs\brace-expressions.js
        • Size 5KB
        • SHA256 1d8fb7fb85b08339e7c7796c1b58009d76996910322fab6e901a383380736d4b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        escape.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minimatch\dist\commonjs\escape.js
        • Size 989B
        • SHA256 bc79b646d7ff8fcb61dcd03ba59e5e14c3a09513d83e7426105c4f3eea7df062
        • MD5 SHA1 SHA512 TLSH

        unescape.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minimatch\dist\commonjs\unescape.js
        • Size 996B
        • SHA256 faf027f3832c78d3ff44e76ad33f55054fdd30298e68e8f5a4bcf08f2923be92
        • MD5 SHA1 SHA512 TLSH

        assert-valid-pattern.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minimatch\dist\esm\assert-valid-pattern.js
        • Size 345B
        • SHA256 d09338474c788ba8c40872eb53783bbeb0b7a6d9b750cb17a64298fbab878ce1
        • MD5 SHA1 SHA512 TLSH

        ast.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minimatch\dist\esm\ast.js
        • Size 22KB
        • SHA256 90edd5ca034246103b5aaac2870110cabd7b9f5e85fa813ef35fd29de4c1d402
        • MD5 SHA1 SHA512 SSDEEP TLSH

        brace-expressions.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minimatch\dist\esm\brace-expressions.js
        • Size 5KB
        • SHA256 f1d426dcbab3c1483cc2554ba62b274387b55efa611c26ca7868db286e20f0bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        escape.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minimatch\dist\esm\escape.js
        • Size 865B
        • SHA256 8712c9d62915b40af8fd40766dacaf30b51a27e4511049c3053a024033675c97
        • MD5 SHA1 SHA512 TLSH

        unescape.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minimatch\dist\esm\unescape.js
        • Size 866B
        • SHA256 56304b4b91fd7f53bd3385cca0b4d825ad7c408a9db9addadc1036b6fcf77d36
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\npm-audit-report\LICENSE
        • Size 771B
        • SHA256 b49c8d25a8b57fa92b2902d09c4b8a809157ee32fc10d17b7dbb43c4a8038f79
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\socks-proxy-agent\LICENSE
        • Size 1KB
        • SHA256 22427a9ca2a0ff9c27dde9e26fe6e940529aee030b342a70b435366af0fcc51b
        • MD5 SHA1 SHA512 TLSH

        LICENSE.md

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\tar\node_modules\yallist\LICENSE.md
        • Size 1KB
        • SHA256 a638a0768dbec922fd821d0b6cce6275231c4b57cfcddf584defce530fbfbbf5
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\treeverse\LICENSE
        • Size 771B
        • SHA256 24b8d53712087b867030d18f2bd6d1a72c78f9fb4dee0ce025374da25e4443b9
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\tuf-js\LICENSE
        • Size 1KB
        • SHA256 6ba2fb4cc004819b1d872168a7ba6ac4a5a07400366680750321058fe21dd36b
        • MD5 SHA1 SHA512 TLSH

        AUTHORS

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\AUTHORS
        • Size 207B
        • SHA256 0ee7b5b132cdd64923287705569f0b55e82729319e3a78571a8ce9bc9a62f98f
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\LICENSE
        • Size 1KB
        • SHA256 9874348297d23c486dfb13b9df158f3fe2f57153ddfd0513507d22f0438ea204
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\index.js
        • Size 151B
        • SHA256 2eacd689c758e0aacc3fa3157b6fdc1739598f0fd7ebaca3841849940e290f8c
        • MD5 SHA1 SHA512 TLSH

        parse.js

        • Path C:\Users\Admin\AppData\Local\Programs\node-v24.13.0-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\parse.js
        • Size 2KB
        • SHA256 4b435dcbc2bf9a1afa4f28f7d3fcfd33406eb08c900ac2f967c32b982f39cb0e
        • MD5 SHA1 SHA512 TLSH

        npm-cli.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\bin\npm-cli.js
        • Size 56B
        • SHA256 3ce7cba6f5128dd5f54c98b6a5036b0f850496878cc2e21044b675fe3c594e3e
        • MD5 SHA1 SHA512 TLSH

        npm-prefix.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\bin\npm-prefix.js
        • Size 864B
        • SHA256 673f620e40137c295f2cf057364468bf3a71653dfc0973be895ebf7a8c368c2e
        • MD5 SHA1 SHA512 TLSH

        cli.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\lib\cli.js
        • Size 419B
        • SHA256 d97a2b1a2170d6094625956d6ad5ba5d5edfce26bc3787c51447c9737b6afc2d
        • MD5 SHA1 SHA512 TLSH

        entry.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\lib\cli\entry.js
        • Size 2KB
        • SHA256 71dd761b12aed36725bec2022e93ce19d657c0d1cfc9d790098aae509e158abd
        • MD5 SHA1 SHA512 TLSH

        validate-engines.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\lib\cli\validate-engines.js
        • Size 1KB
        • SHA256 7a711312c19a4a425aec17ada0117bbf528c335c2138167455c6d3ca4dcf217d
        • MD5 SHA1 SHA512 TLSH

        definition.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\@npmcli\config\lib\definitions\definition.js
        • Size 6KB
        • SHA256 00a77ad5ebe383a8db37c6f1685769a549c2812da1dfe6cbf299408b4f7de2a7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        definitions.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\@npmcli\config\lib\definitions\definitions.js
        • Size 75KB
        • SHA256 22b498e37554fc44602116332fe60e34bc78c2fdbb8140a9d9287a847293b1d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\@npmcli\config\lib\definitions\index.js
        • Size 2KB
        • SHA256 1367551cd0ac0bb508ad6184fc1ad7020fde370a7aa5fc7924c96c369d2f5306
        • MD5 SHA1 SHA512 TLSH

        env-replace.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\@npmcli\config\lib\env-replace.js
        • Size 632B
        • SHA256 c60ea0332bdfa351cd156b636e263c0c6b22dfde396aa68142aec10a02a05af9
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\@npmcli\config\lib\index.js
        • Size 30KB
        • SHA256 454b18ec3652371784155cb75748dfb39f1893fe3561d3be5961df901a8a8bdf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nerf-dart.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\@npmcli\config\lib\nerf-dart.js
        • Size 473B
        • SHA256 7d0ee69ea790e4658d5029cdd728eb6375d0feed79af8b24dac99723e25cbbc7
        • MD5 SHA1 SHA512 TLSH

        parse-field.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\@npmcli\config\lib\parse-field.js
        • Size 2KB
        • SHA256 5ea7f66b8afaeb7d1dc00eb80ba7cf4a9dea3c46670dfd0208c78c72318e7552
        • MD5 SHA1 SHA512 TLSH

        set-envs.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\@npmcli\config\lib\set-envs.js
        • Size 3KB
        • SHA256 d283d0baf0200bbb23afcbb956a63163c0d73ae67bf31e1dc5647bfa0c5ab6fc
        • MD5 SHA1 SHA512 TLSH

        type-defs.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\@npmcli\config\lib\type-defs.js
        • Size 1KB
        • SHA256 5f8cab3a4133b226c653784d569a9bf3e5a2ee76ac73b9156cd58a2c72839648
        • MD5 SHA1 SHA512 TLSH

        umask.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\@npmcli\config\lib\umask.js
        • Size 949B
        • SHA256 9aec687f45f435f9f198e583f35b5f5a4cd0d66e21c2e6e9c772fd8ccbe65b68
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\@npmcli\config\package.json
        • Size 1KB
        • SHA256 73069aa3cf5eb44c03bb3a9edb7b667e2fffc11ce6ef55898e9619368bfe6ea4
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\abbrev\lib\index.js
        • Size 1KB
        • SHA256 d12c4a8f9905d3518963e66d6568b0c8dd1f0c61f5b8bb5fa517fb015b3626b4
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\abbrev\package.json
        • Size 1KB
        • SHA256 9e129b43f1bf19aa0c01b1ac723eb2f21b14cb9ff0fd284cb5534b822083ff26
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\ci-info\index.js
        • Size 2KB
        • SHA256 1d0822329d3b3fbe506f50e920884cdadc8ff0eb133a03f9503d2030f19e30cf
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\ci-info\package.json
        • Size 1KB
        • SHA256 e20390005115a12f5ffa88ab1a9a113d838d8fd1744efc00ee2ae1fb1a7d6223
        • MD5 SHA1 SHA512 TLSH

        vendors.json

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\ci-info\vendors.json
        • Size 6KB
        • SHA256 82983c6409c25a390f5521cce32516b07b7fc4d003ac68d7d3dce125db58b9ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        clone.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\graceful-fs\clone.js
        • Size 519B
        • SHA256 9256fa1806a26da76f0d1eb6b84925e29705f8fc8122a9e108a3bad5f89a960c
        • MD5 SHA1 SHA512 TLSH

        graceful-fs.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\graceful-fs\graceful-fs.js
        • Size 12KB
        • SHA256 45f2a47dd6e670f1a4e177eab18fb525beb4d6be685c07391bdc19b5224c24ab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        legacy-streams.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\graceful-fs\legacy-streams.js
        • Size 2KB
        • SHA256 fdef09271b72482d8611f65f05a355f181ebf3354f1fe3db20c74a2aa4f86e30
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\graceful-fs\package.json
        • Size 1KB
        • SHA256 2dcd4b0786f9ca9b80418d56a57a5aa4649732d667e389cf1afa4b12ed618266
        • MD5 SHA1 SHA512 TLSH

        polyfills.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\graceful-fs\polyfills.js
        • Size 10KB
        • SHA256 85be48ba570e23b2d93740bdf66cdc556c59a77127508d767b518079ce851aec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ini.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\ini\lib\ini.js
        • Size 7KB
        • SHA256 481b00a4ebbfc83b28b97d32dccd32d7585b29b209930d4db457d91967f172ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\ini\package.json
        • Size 1KB
        • SHA256 94ebf2db52f15b5da55a809977e04f02b052abf418cb160a8d0719362295d867
        • MD5 SHA1 SHA512 TLSH

        node-gyp.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\node-gyp\bin\node-gyp.js
        • Size 3KB
        • SHA256 17df5be493b4c9ebef5c5a4f2ef0449a4a65fcd563c8741d8ed5ff0cbb943aa0
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\node-gyp\package.json
        • Size 1KB
        • SHA256 df10667b8a38401fe593e48ea46078e0fe04ad1f06ccbbc20897e875ffa37ec4
        • MD5 SHA1 SHA512 TLSH

        debug.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\nopt\lib\debug.js
        • Size 186B
        • SHA256 0eda498431dfcb77febe2e79b4a63139559d3f42b21e8b81fc3879a3f6dc3c46
        • MD5 SHA1 SHA512 TLSH

        nopt-lib.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\nopt\lib\nopt-lib.js
        • Size 14KB
        • SHA256 fb1225f5af7ce00c5eca903e3ed53a450cc1891d66bc6c06fbbd29973c30cc92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nopt.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\nopt\lib\nopt.js
        • Size 1KB
        • SHA256 d65dabbe6a6f823df2548a9e791e8a768d92368e92fdb7e9ae32fee80aac08fb
        • MD5 SHA1 SHA512 TLSH

        type-defs.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\nopt\lib\type-defs.js
        • Size 2KB
        • SHA256 6537bb9b4df3a1af3e14d5a99d58e75180878a3e96a4bb3bc9760b052b53c5a5
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\nopt\package.json
        • Size 1KB
        • SHA256 bf4e97204670ac6527dd6da623b03fbc3145aa976e631039dfd1ebbb73d99ef8
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\proc-log\lib\index.js
        • Size 3KB
        • SHA256 f6c7ee8376eb6720a9b5149077648a0cc74e749c928f36bf88bd4dc6728d663c
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\proc-log\package.json
        • Size 1KB
        • SHA256 25f1b2da27302598083b749278018f7bd5cf42b8632df48428e07371e6386380
        • MD5 SHA1 SHA512 TLSH

        comparator.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\classes\comparator.js
        • Size 3KB
        • SHA256 eb054dfca2fc7451db641d3217d105509a06cf3e10cce1853e194ed5a5a502b3
        • MD5 SHA1 SHA512 TLSH

        range.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\classes\range.js
        • Size 15KB
        • SHA256 73163f678bd51c418989e9d14cae155b1696ac0ad2e3b2af2901247ba53051c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        semver.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\classes\semver.js
        • Size 9KB
        • SHA256 0c3c0e4894b4765a9df6f8e586570efb5927102751bd995073bec396aa0bc5c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cmp.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\functions\cmp.js
        • Size 1015B
        • SHA256 6580d5b2bb52e3ad19d84977c2ee322b55faf0365c278d54c9edeb7e373de5cc
        • MD5 SHA1 SHA512 TLSH

        compare.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\functions\compare.js
        • Size 177B
        • SHA256 0d51286f0134290034e1d4bcc265cc8d303d0418f7b4a80f779eba4481a7e563
        • MD5 SHA1 SHA512 TLSH

        eq.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\functions\eq.js
        • Size 131B
        • SHA256 63e538f8c088995998e51af1eded85093651622e0110c8505bb7f655b5dcccfe
        • MD5 SHA1 SHA512 TLSH

        gt.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\functions\gt.js
        • Size 129B
        • SHA256 e739b80f6f1d9c355be6369a2feec33cb05442b5a275554ea8b1ec9e68b35e49
        • MD5 SHA1 SHA512 TLSH

        gte.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\functions\gte.js
        • Size 132B
        • SHA256 c2d3c0bc8d234a4cc9389b47743d4d945a4f76968c6011912248c8f60d699102
        • MD5 SHA1 SHA512 TLSH

        lt.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\functions\lt.js
        • Size 129B
        • SHA256 9d45286c17b8dd47e12044ae7efedf7b7683aa44c95efc511e8ea847a1e88f36
        • MD5 SHA1 SHA512 TLSH

        neq.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\functions\neq.js
        • Size 133B
        • SHA256 cab66bc03a3f27e65e8cdde20b514d825c431a20af994ef75eed6592d4699f98
        • MD5 SHA1 SHA512 TLSH

        parse.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\functions\parse.js
        • Size 349B
        • SHA256 4b2540c8f89bed8f3f158a96100b7ee5a905cff8b39f63317179ab5cc71e5f6c
        • MD5 SHA1 SHA512 TLSH

        satisfies.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\functions\satisfies.js
        • Size 259B
        • SHA256 699bc56d7a4d64bbb3d8f1b59ee54999884d87b710a3a2131c57e0c23922f532
        • MD5 SHA1 SHA512 TLSH

        valid.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\functions\valid.js
        • Size 184B
        • SHA256 f29c937a2e4d31a159761632dfe3a789f8e02c6ef1afe2d89f2918556c8d5c3b
        • MD5 SHA1 SHA512 TLSH

        constants.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\internal\constants.js
        • Size 910B
        • SHA256 83ec2d950774e5045dbb1a8079a810276905a8e9a76a60ac2d58506c46764c83
        • MD5 SHA1 SHA512 TLSH

        debug.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\internal\debug.js
        • Size 251B
        • SHA256 a1253139164d187848c43dcda6c5b09ccb6d76cbe4df03414bf57424101f422c
        • MD5 SHA1 SHA512 TLSH

        identifiers.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\internal\identifiers.js
        • Size 554B
        • SHA256 1b76ab27e1c123cf69eba8997d3dd06dc4aec8dab53463ca6e84e484f7884249
        • MD5 SHA1 SHA512 TLSH

        lrucache.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\internal\lrucache.js
        • Size 844B
        • SHA256 f0bb4ecec3a39005c621b6fcebb6388d4afde28c01e36f52a09fbe0c9537a2e2
        • MD5 SHA1 SHA512 TLSH

        parse-options.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\internal\parse-options.js
        • Size 355B
        • SHA256 1060995308399661110883096002bf1815b82a14c7552cc8b8445d0d79f3bc22
        • MD5 SHA1 SHA512 TLSH

        re.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\internal\re.js
        • Size 8KB
        • SHA256 b2068ac03f228a6e7aad84515bb55ac50c2052554a09216432a62604d158b5eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\semver\package.json
        • Size 1KB
        • SHA256 b389e3d149b7ee2c35100edfce04a17e3c7c0a5cab906e9829e28ba0e9c068d7
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\walk-up-path\dist\commonjs\index.js
        • Size 474B
        • SHA256 4e86e409d7506477caee910cb50f5bff1dda477878da923bd3888501e1a04036
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\node_modules\walk-up-path\package.json
        • Size 1KB
        • SHA256 3a3641a678348a7becbfe5840320fd51afb843d5728efba222fa133571e17395
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\node_modules\npm\package.json
        • Size 6KB
        • SHA256 00613c3052df3ff9d69a731334569232993ddaee6a7c6c9b5e33c791761fd027
        • MD5 SHA1 SHA512 SSDEEP TLSH

        npm.cmd

        • Path C:\Users\Admin\AppData\Local\Programs\nodejs\npm.cmd
        • Size 538B
        • SHA256 21b46c69ad6e2f231f02a9e120f4ba6c8e75fef5a45637103002eab99f888ab8
        • MD5 SHA1 SHA512 TLSH

        __PSScriptPolicyTest_plz3hvs2.ap3.ps1

        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_plz3hvs2.ap3.ps1
        • Size 60B
        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
        • MD5 SHA1 SHA512 TLSH

        memory/588-5704-0x0000025F3A900000-0x0000025F3B0AE000-memory.dmp

        memory/764-5701-0x00000225283B0000-0x0000022528B5E000-memory.dmp

        memory/904-8-0x000001B1EF250000-0x000001B1EF272000-memory.dmp

        memory/904-4444-0x000001B1EECB0000-0x000001B1EECC2000-memory.dmp

        memory/904-4320-0x000001B1EF1D0000-0x000001B1EF1E0000-memory.dmp

        memory/904-1-0x000001B1EF1D0000-0x000001B1EF1E0000-memory.dmp

        memory/904-0-0x000001B1EF1D0000-0x000001B1EF1E0000-memory.dmp

        memory/904-21-0x000001B1EF780000-0x000001B1EF792000-memory.dmp

        memory/904-9-0x000001B1EF1D0000-0x000001B1EF1E0000-memory.dmp

        memory/904-18-0x000001B1EF760000-0x000001B1EF77C000-memory.dmp

        memory/904-11-0x00007FF4B9EA0000-0x00007FF4B9EB0000-memory.dmp

        memory/904-19-0x000001B1F00C0000-0x000001B1F0173000-memory.dmp

        memory/904-20-0x000001B1EF780000-0x000001B1EF78A000-memory.dmp

        memory/904-4443-0x000001B1EF910000-0x000001B1F00BE000-memory.dmp

        memory/904-4445-0x000001B1EF1D0000-0x000001B1EF1E0000-memory.dmp

        memory/904-4321-0x000001B1EF1D0000-0x000001B1EF1E0000-memory.dmp

        memory/904-4442-0x000001B1EEBC0000-0x000001B1EEBCC000-memory.dmp

        memory/904-4513-0x00007FF4B9EA0000-0x00007FF4B9EB0000-memory.dmp

        memory/904-22-0x000001B1EF760000-0x000001B1EF76A000-memory.dmp

        memory/904-5698-0x000001B1EF910000-0x000001B1F00BE000-memory.dmp

        memory/904-5697-0x000001B1EEBC0000-0x000001B1EEBCC000-memory.dmp

        memory/1056-5693-0x0000024A9FEE0000-0x0000024AA068E000-memory.dmp

        memory/1700-4412-0x0000012B09D30000-0x0000012B0A4DE000-memory.dmp

        memory/2284-5703-0x000001D22F430000-0x000001D22FBDE000-memory.dmp

        memory/3152-4533-0x00000207DC820000-0x00000207DCFCE000-memory.dmp

        memory/3172-4529-0x000001D0C17B0000-0x000001D0C1F5E000-memory.dmp

        memory/4688-5689-0x000001B1F5BC0000-0x000001B1F636E000-memory.dmp