Overview

overview

7

Static

static

1

itop-easy-...42.exe

windows10-2004-x64

5

itop-easy-...42.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    98s
  • max time network
    156s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260617-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    23/06/2026, 01:53

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    itop-easy-desktop-4-3-0-342.exe
  • Size 105.6MB
  • Sample260623-ca8h7aas6w
  • SHA256 2460bc2c81daed88b4edbf437efb61a2cd7fad5a7ae14c13a138b98620ca9d80
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryexecutioninstallerpersistenceprivilege_escalationtrojan

Malware Config

Signatures

  • Creates new service(s) 2 TTPs
    persistenceexecution
  • Stops running service(s) 4 TTPs
    defense_evasionexecution
  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Looks up external IP address via web service 3 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Drops file in System32 directory 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Executes dropped EXE 19 IoCs
  • Launches sc.exe 4 IoCs

    Sc.exe is a Windows utlilty to control services on the system.

  • Loads dropped DLL 35 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Using powershell.exe command.

    execution
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 27 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 5 IoCs

    Inno Setup installer

    installer
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Control Panel 1 IoCs
    defense_evasion
  • Modifies registry class 38 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 28 IoCs
  • Suspicious use of SendNotifyMessage 10 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 43 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\itop-easy-desktop-4-3-0-342.exe
    "C:\Users\Admin\AppData\Local\Temp\itop-easy-desktop-4-3-0-342.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3376
    • C:\Users\Admin\AppData\Local\Temp\is-QQBDP.tmp\itop-easy-desktop-4-3-0-342.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-QQBDP.tmp\itop-easy-desktop-4-3-0-342.tmp" /SL5="$502C0,110077931,234496,C:\Users\Admin\AppData\Local\Temp\itop-easy-desktop-4-3-0-342.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4972
      • C:\Users\Admin\AppData\Local\Temp\is-AVB3F.tmp\Installer\Setup.exe
        "C:\Users\Admin\AppData\Local\Temp\is-AVB3F.tmp\Installer\Setup.exe" /innoSetup "C:\Users\Admin\AppData\Local\Temp\itop-easy-desktop-4-3-0-342.exe" "/Ver=4.3.0.342"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:5944
        • C:\Users\Admin\AppData\Local\Temp\itop-easy-desktop-4-3-0-342.exe
          "C:\Users\Admin\AppData\Local\Temp\itop-easy-desktop-4-3-0-342.exe" /VerySilent /DIR /UNINSTALL /INSTALLER /NORESTART /do /TASKS="desktopicon" /CreateTaskbar "C:\Program Files\iTop Easy Desktop\"
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:1252
          • C:\Users\Admin\AppData\Local\Temp\is-RJJCJ.tmp\itop-easy-desktop-4-3-0-342.tmp
            "C:\Users\Admin\AppData\Local\Temp\is-RJJCJ.tmp\itop-easy-desktop-4-3-0-342.tmp" /SL5="$C0068,110077931,234496,C:\Users\Admin\AppData\Local\Temp\itop-easy-desktop-4-3-0-342.exe" /VerySilent /DIR /UNINSTALL /INSTALLER /NORESTART /do /TASKS="desktopicon" /CreateTaskbar "C:\Program Files\iTop Easy Desktop\"
            5⤵
            • Drops file in Program Files directory
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:4744
            • C:\Windows\SysWOW64\cmd.exe
              "C:\Windows\System32\cmd.exe" /c sc stop iTopEasyDesktopService
              6⤵
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:4252
              • C:\Windows\SysWOW64\sc.exe
                sc stop iTopEasyDesktopService
                7⤵
                • Launches sc.exe
                • System Location Discovery: System Language Discovery
                PID:2480
            • C:\Users\Admin\AppData\Local\Temp\is-MDUAP.tmp\IEDInit.exe
              "C:\Users\Admin\AppData\Local\Temp\is-MDUAP.tmp\IEDInit.exe" /DeleteAllFile /reinstall=1 /InstallDir="C:\Program Files\iTop Easy Desktop"
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              PID:6136
            • C:\Program Files\iTop Easy Desktop\LocalLang.exe
              "C:\Program Files\iTop Easy Desktop\LocalLang.exe"
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:5772
            • C:\Program Files\iTop Easy Desktop\IEDInit.exe
              "C:\Program Files\iTop Easy Desktop\IEDInit.exe" /SetupFile="C:\Users\Admin\AppData\Local\Temp\itop-easy-desktop-4-3-0-342.exe" /reinstall=0 /insur= /OldVersion=
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of WriteProcessMemory
              PID:3148
              • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                powershell.exe -Command "Add-AppxPackage -Path 'C:\Program Files\iTop Easy Desktop\IEDContextMenu.msix' -ExternalLocation 'C:\Program Files\iTop Easy Desktop\'"
                7⤵
                • Command and Scripting Interpreter: PowerShell
                • System Location Discovery: System Language Discovery
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of AdjustPrivilegeToken
                PID:1852
            • C:\Windows\SysWOW64\regsvr32.exe
              "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files\iTop Easy Desktop\IEDMenu.dll"
              6⤵
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of WriteProcessMemory
              PID:1500
              • C:\Windows\system32\regsvr32.exe
                /s "C:\Program Files\iTop Easy Desktop\IEDMenu.dll"
                7⤵
                • Loads dropped DLL
                • Modifies registry class
                PID:5820
            • C:\Program Files\iTop Easy Desktop\IEDManager.exe
              "C:\Program Files\iTop Easy Desktop\IEDManager.exe" /SetupRun
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of FindShellTrayWindow
              PID:5716
            • C:\Program Files\iTop Easy Desktop\UninstallInfo.exe
              "C:\Program Files\iTop Easy Desktop\UninstallInfo.exe" /install ied4
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious behavior: EnumeratesProcesses
              PID:2184
        • C:\Windows\SysWOW64\cmd.exe
          "C:\Windows\System32\cmd.exe" /c sc create iTopEasyDesktopService binPath= "\"C:\Program Files\iTop Easy Desktop\IEDService.exe\"" start= auto DisplayName= "iTop Easy Desktop Service"
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:3580
          • C:\Windows\SysWOW64\sc.exe
            sc create iTopEasyDesktopService binPath= "\"C:\Program Files\iTop Easy Desktop\IEDService.exe\"" start= auto DisplayName= "iTop Easy Desktop Service"
            5⤵
            • Launches sc.exe
            • System Location Discovery: System Language Discovery
            PID:2052
        • C:\Windows\SysWOW64\cmd.exe
          "C:\Windows\System32\cmd.exe" /c sc description iTopEasyDesktopService "iTop Easy Desktop Service"
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:6100
          • C:\Windows\SysWOW64\sc.exe
            sc description iTopEasyDesktopService "iTop Easy Desktop Service"
            5⤵
            • Launches sc.exe
            • System Location Discovery: System Language Discovery
            PID:2760
        • C:\Windows\SysWOW64\cmd.exe
          "C:\Windows\System32\cmd.exe" /c sc start iTopEasyDesktopService
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:2336
          • C:\Windows\SysWOW64\sc.exe
            sc start iTopEasyDesktopService
            5⤵
            • Launches sc.exe
            • System Location Discovery: System Language Discovery
            PID:2516
        • C:\Program Files\iTop Easy Desktop\AutoUpdate.exe
          "C:\Program Files\iTop Easy Desktop\AutoUpdate.exe" /Auto
          4⤵
          • Drops file in Program Files directory
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:2116
          • C:\Program Files\iTop Easy Desktop\Pub\itopennmid26.exe
            "C:\Program Files\iTop Easy Desktop\Pub\itopennmid26.exe" /rpop
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            PID:1052
  • C:\Program Files\iTop Easy Desktop\IEDService.exe
    "C:\Program Files\iTop Easy Desktop\IEDService.exe"
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:5416
  • C:\Program Files\iTop Easy Desktop\IEDService.exe
    "C:\Program Files\iTop Easy Desktop\IEDService.exe"
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:2440
    • C:\Program Files\iTop Easy Desktop\iEasyDesk.exe
      "C:\Program Files\iTop Easy Desktop\iEasyDesk.exe" /SetupRun
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies Control Panel
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1716
      • C:\Program Files\iTop Easy Desktop\IEDLoading.exe
        "C:\Program Files\iTop Easy Desktop\IEDLoading.exe" /IED /Init
        3⤵
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        PID:1072
      • C:\Program Files\iTop Easy Desktop\IEDManager.exe
        "C:\Program Files\iTop Easy Desktop\IEDManager.exe" /Refresh
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        PID:1852
      • C:\Program Files\iTop Easy Desktop\AUpdate.exe
        "C:\Program Files\iTop Easy Desktop\AUpdate.exe" /ied /dayactive
        3⤵
          PID:7468
        • C:\Program Files\iTop Easy Desktop\AUpdate.exe
          "C:\Program Files\iTop Easy Desktop\AUpdate.exe" /u https://stats.reportcpanel.com/iactive_month.php /a ied4 /p itop /v 4.3.0.342 /t 10 /d 7
          3⤵
            PID:7476
          • C:\Program Files\iTop Easy Desktop\IEDSnap.exe
            "C:\Program Files\iTop Easy Desktop\IEDSnap.exe" /take /0 /3
            3⤵
              PID:7488
            • C:\Program Files\iTop Easy Desktop\IEDSettings.exe
              "C:\Program Files\iTop Easy Desktop\IEDSettings.exe"
              3⤵
                PID:7524
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=IEDSettings.exe --webview-exe-version=3.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msEdgeRose --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=7524.3328.15592070903448914400 /pfhostedapp:688bc99b214b3f88696ee1a5fc45b09d0fe2f590
                  4⤵
                    PID:5392
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView" /prefetch:4 /pfhostedapp:688bc99b214b3f88696ee1a5fc45b09d0fe2f590 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x1cc,0x7ffd2f645fd8,0x7ffd2f645fe4,0x7ffd2f645ff0
                      5⤵
                        PID:4496
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView" --webview-exe-name=IEDSettings.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2024 --field-trial-handle=2028,i,11204318093685385063,9598268560843633384,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:688bc99b214b3f88696ee1a5fc45b09d0fe2f590
                        5⤵
                          PID:6256
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView" --webview-exe-name=IEDSettings.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2112 --field-trial-handle=2028,i,11204318093685385063,9598268560843633384,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:688bc99b214b3f88696ee1a5fc45b09d0fe2f590
                          5⤵
                            PID:6268
                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView" --webview-exe-name=IEDSettings.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2400 --field-trial-handle=2028,i,11204318093685385063,9598268560843633384,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:688bc99b214b3f88696ee1a5fc45b09d0fe2f590
                            5⤵
                              PID:6680
                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView" --webview-exe-name=IEDSettings.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3656 --field-trial-handle=2028,i,11204318093685385063,9598268560843633384,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:688bc99b214b3f88696ee1a5fc45b09d0fe2f590 /prefetch:1
                              5⤵
                                PID:7144
                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView" --webview-exe-name=IEDSettings.exe --webview-exe-version=3.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3992 --field-trial-handle=2028,i,11204318093685385063,9598268560843633384,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:688bc99b214b3f88696ee1a5fc45b09d0fe2f590 /prefetch:1
                                5⤵
                                  PID:7200
                          • C:\Program Files\iTop Easy Desktop\IEDChatAI.exe
                            "C:\Program Files\iTop Easy Desktop\IEDChatAI.exe" /PreStart
                            2⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • Checks whether UAC is enabled
                            • Modifies registry class
                            • Suspicious behavior: EnumeratesProcesses
                            • Suspicious use of FindShellTrayWindow
                            • Suspicious use of SetWindowsHookEx
                            • Suspicious use of WriteProcessMemory
                            PID:2020
                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=IEDChatAI.exe --webview-exe-version=4.1.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-features=msEdgeRose --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2020.5384.1079997408627860911 /pfhostedapp:f47f160dd08ae3f55d858fb29c21bc282e2dec12
                              3⤵
                              • Drops file in Windows directory
                              • Enumerates system info in registry
                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                              • Suspicious use of WriteProcessMemory
                              PID:3392
                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView" /prefetch:4 /pfhostedapp:f47f160dd08ae3f55d858fb29c21bc282e2dec12 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffd2f645fd8,0x7ffd2f645fe4,0x7ffd2f645ff0
                                4⤵
                                  PID:2092
                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView" --webview-exe-name=IEDChatAI.exe --webview-exe-version=4.1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1748 --field-trial-handle=1752,i,1297713340678585965,7270021349462509364,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:f47f160dd08ae3f55d858fb29c21bc282e2dec12
                                  4⤵
                                    PID:8
                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView" --webview-exe-name=IEDChatAI.exe --webview-exe-version=4.1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2116 --field-trial-handle=1752,i,1297713340678585965,7270021349462509364,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:f47f160dd08ae3f55d858fb29c21bc282e2dec12
                                    4⤵
                                      PID:720
                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView" --webview-exe-name=IEDChatAI.exe --webview-exe-version=4.1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2380 --field-trial-handle=1752,i,1297713340678585965,7270021349462509364,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:f47f160dd08ae3f55d858fb29c21bc282e2dec12
                                      4⤵
                                        PID:4180
                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView" --webview-exe-name=IEDChatAI.exe --webview-exe-version=4.1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3448 --field-trial-handle=1752,i,1297713340678585965,7270021349462509364,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:f47f160dd08ae3f55d858fb29c21bc282e2dec12 /prefetch:1
                                        4⤵
                                          PID:5712
                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView" --webview-exe-name=IEDChatAI.exe --webview-exe-version=4.1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4312 --field-trial-handle=1752,i,1297713340678585965,7270021349462509364,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:f47f160dd08ae3f55d858fb29c21bc282e2dec12
                                          4⤵
                                            PID:6040
                                      • C:\Program Files\iTop Easy Desktop\IEDSearch.exe
                                        "C:\Program Files\iTop Easy Desktop\IEDSearch.exe"
                                        2⤵
                                        • Enumerates connected drives
                                        • Drops file in System32 directory
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • Modifies registry class
                                        • Suspicious behavior: EnumeratesProcesses
                                        • Suspicious use of FindShellTrayWindow
                                        • Suspicious use of SetWindowsHookEx
                                        PID:2608
                                      • C:\Program Files\iTop Easy Desktop\Pub\iedip.exe
                                        "C:\Program Files\iTop Easy Desktop\Pub\iedip.exe" /LA
                                        2⤵
                                          PID:2708
                                        • C:\Program Files\iTop Easy Desktop\IEDHook.exe
                                          "C:\Program Files\iTop Easy Desktop\IEDHook.exe" /DisableWinKey
                                          2⤵
                                            PID:7564
                                        • C:\Program Files\iTop Easy Desktop\iTopEDFileFilter.sys
                                          "C:\Program Files\iTop Easy Desktop\iTopEDFileFilter.sys"
                                          1⤵
                                          • Executes dropped EXE
                                          PID:5636
                                        • C:\Program Files\iTop Easy Desktop\Pub\itopennmid26.exe
                                          "C:\Program Files\iTop Easy Desktop\Pub\itopennmid26.exe"
                                          1⤵
                                          • Executes dropped EXE
                                          • System Location Discovery: System Language Discovery
                                          • Suspicious use of FindShellTrayWindow
                                          • Suspicious use of SendNotifyMessage
                                          PID:2184

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Reconnaissance

                                              Resource Development

                                              Initial Access

                                              Execution

                                              Command and Scripting Interpreter

                                              1
                                              T1059

                                              PowerShell

                                              1
                                              T1059.001

                                              System Services

                                              2
                                              T1569

                                              Service Execution

                                              2
                                              T1569.002

                                              Persistence

                                              Create or Modify System Process

                                              2
                                              T1543

                                              Windows Service

                                              2
                                              T1543.003

                                              Event Triggered Execution

                                              1
                                              T1546

                                              Component Object Model Hijacking

                                              1
                                              T1546.015

                                              Privilege Escalation

                                              Create or Modify System Process

                                              2
                                              T1543

                                              Windows Service

                                              2
                                              T1543.003

                                              Event Triggered Execution

                                              1
                                              T1546

                                              Component Object Model Hijacking

                                              1
                                              T1546.015

                                              Defense Evasion

                                              Impair Defenses

                                              1
                                              T1562

                                              Credential Access

                                              Discovery

                                              Network Share Discovery

                                              1
                                              T1135

                                              Peripheral Device Discovery

                                              1
                                              T1120

                                              Query Registry

                                              3
                                              T1012

                                              System Information Discovery

                                              4
                                              T1082

                                              System Location Discovery

                                              1
                                              T1614

                                              System Language Discovery

                                              1
                                              T1614.001

                                              Lateral Movement

                                              Collection

                                              Command and Control

                                              Exfiltration

                                              Impact

                                              Service Stop

                                              1
                                              T1489

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              AutoUpdate.exe
                                              • Path C:\Program Files\iTop Easy Desktop\AutoUpdate.exe
                                              • Size 3.1MB
                                              • SHA256 ef940635af48a6a6f7c9c626aa5becbc6409a2e2388afa240906d6f53e18f1e1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              TimeZone.dbd
                                              • Path C:\Program Files\iTop Easy Desktop\DataBase\TimeZone.dbd
                                              • Size 6KB
                                              • SHA256 6cc4e4756460310986a4073f684388921dbf230294b8ecb2f62cc1186384f6d6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              IEDLoading.log
                                              • Path C:\Program Files\iTop Easy Desktop\IEDLoading.log
                                              • Size 664B
                                              • SHA256 d483decac4682008f4920b57c6280b0425aaffbb2ac1210e38df68b1757c4947
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              IEDManager.exe
                                              • Path C:\Program Files\iTop Easy Desktop\IEDManager.exe
                                              • Size 5.8MB
                                              • SHA256 3474adcddf138505977cb84c213949ebec246d7654fdc889b554b3bac34cd673
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              IEDMenu.dll
                                              • Path C:\Program Files\iTop Easy Desktop\IEDMenu.dll
                                              • Size 4.6MB
                                              • SHA256 2648baf41e113138da011864252dc62e8ab52a2ed8a3f79bdc55ae8e075224b8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              IEDService.exe
                                              • Path C:\Program Files\iTop Easy Desktop\IEDService.exe
                                              • Size 1.5MB
                                              • SHA256 b72b428885c9c75e3a983c80d1f34470d0c72489098e272c7117fe6fe80049e0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              IEDService.log
                                              • Path C:\Program Files\iTop Easy Desktop\IEDService.log
                                              • Size 5KB
                                              • SHA256 69a72ccb29ee501f1c69e7521345e97317fb3a98021eb96d6b0dfb1904c2b81d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Lang.dat
                                              • Path C:\Program Files\iTop Easy Desktop\Lang.dat
                                              • Size 36B
                                              • SHA256 16948c7a0e6079a3117142fe5bbfa47fc7ecc68eeb64fbc5059c2f89dab5bdf3
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              English.lng
                                              • Path C:\Program Files\iTop Easy Desktop\Language\English.lng
                                              • Size 163KB
                                              • SHA256 33eb424b2b843f7a66b194cbbb417802270098cb1d6a473078a912c694825c6d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              LocalLang.exe
                                              • Path C:\Program Files\iTop Easy Desktop\LocalLang.exe
                                              • Size 224KB
                                              • SHA256 24d27708d7e369bfc5bef75847c672132c1e580196827a803a4c57992fff7d5f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              ProductStatistics3.dll
                                              • Path C:\Program Files\iTop Easy Desktop\ProductStatistics3.dll
                                              • Size 1.1MB
                                              • SHA256 ee8f95875dfead2d636cd99d331e118597a1a8deeacf2eb5b9cb2b888570d8f1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              is-K2O86.tmp
                                              • Path C:\Program Files\iTop Easy Desktop\Resources\PersonalizeCursors\HuiRan-Pink\is-K2O86.tmp
                                              • Size 16KB
                                              • SHA256 e38263f293426a18d8dfc9ff57948bf728023d02fd465ed7198ab5ab694d4264
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              is-IONPD.tmp
                                              • Path C:\Program Files\iTop Easy Desktop\Resources\PersonalizeCursors\Vivi\is-IONPD.tmp
                                              • Size 99KB
                                              • SHA256 e70b9409a9e86622ef760c7614c665f2d2449e6d8618032f64832d18b0ef26d8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              is-HILKR.tmp
                                              • Path C:\Program Files\iTop Easy Desktop\Resources\PersonalizeCursors\White\is-HILKR.tmp
                                              • Size 133KB
                                              • SHA256 4a81870d9a55a0bc1a55a4e2c2773d0b3f83c2354d779f7509ec4fb25a5833a1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              is-UAU36.tmp
                                              • Path C:\Program Files\iTop Easy Desktop\Resources\PersonalizeCursors\White\is-UAU36.tmp
                                              • Size 133KB
                                              • SHA256 6bcec4846ac592083e71d006e7eea2fadc44aea99bebfdbdef05d61f8a31ae36
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              UninstallInfo.exe
                                              • Path C:\Program Files\iTop Easy Desktop\UninstallInfo.exe
                                              • Size 1.8MB
                                              • SHA256 c7503801092f51b76ce5aaa74cb99c0f73e37f88f73057cc73a670b022a2684e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              iTopPP.dll
                                              • Path C:\Program Files\iTop Easy Desktop\Update\Temp\Pub\iTopPP.dll
                                              • Size 4.6MB
                                              • SHA256 6081adfa34fdf7c91f978782e3dd2fb0500d9d973c73f907741e3551bc52f581
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              iToppopconfig.upt
                                              • Path C:\Program Files\iTop Easy Desktop\Update\Temp\Pub\iToppopconfig.upt
                                              • Size 447KB
                                              • SHA256 1b656dc57eb10d0d7b6e641b0690aeed1dade4da7a031cb86d500ca34afcb57a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              iedip.exe
                                              • Path C:\Program Files\iTop Easy Desktop\Update\Temp\Pub\iedip.exe
                                              • Size 2.4MB
                                              • SHA256 72ee941c1f0566413fe0714f9d8079956f9a4a327012eafa6867d774d0cbdbf0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              itopennmid26.exe
                                              • Path C:\Program Files\iTop Easy Desktop\Update\Temp\Pub\itopennmid26.exe
                                              • Size 2.8MB
                                              • SHA256 87e1f8d4de7c8a45a5a51b4b9e247a555022bccef1ffd006adc61e38d1d88978
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              itopennmid26.upt
                                              • Path C:\Program Files\iTop Easy Desktop\Update\Temp\Pub\itopennmid26.upt
                                              • Size 1.0MB
                                              • SHA256 d35f172e0643382559fa6f94b9b918911e3784f8aa7b6c3efa2c0a3c68949972
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Update.ini
                                              • Path C:\Program Files\iTop Easy Desktop\Update\Update.ini
                                              • Size 11KB
                                              • SHA256 f696d39fde7302037f566595612dada65a3de8e24391779f6cece346900ccfa2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              libc++.whl
                                              • Path C:\Program Files\iTop Easy Desktop\Windhawk\AppData\Engine\Mods\64\libc++.whl
                                              • Size 2.0MB
                                              • SHA256 ffa8ffa0c5c6fa29878a0ad42cbe7dce957b290af87c3221f3e2b9a9dacf839b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              libunwind.whl
                                              • Path C:\Program Files\iTop Easy Desktop\Windhawk\AppData\Engine\Mods\64\libunwind.whl
                                              • Size 236KB
                                              • SHA256 c5aed63b165b6a6e6a1e56214529f8a09b093813159de1d3bc82b6e627191459
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              windows-11-start-menu-styler_1.3.1_821516.dll
                                              • Path C:\Program Files\iTop Easy Desktop\Windhawk\AppData\Engine\Mods\64\windows-11-start-menu-styler_1.3.1_821516.dll
                                              • Size 1.0MB
                                              • SHA256 9fb29ce883897ef05e492e0a40d0c452928a1ac813c1530e664cd8503b4df50d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              windows-11-taskbar-styler_1.5.1_838403.dll
                                              • Path C:\Program Files\iTop Easy Desktop\Windhawk\AppData\Engine\Mods\64\windows-11-taskbar-styler_1.5.1_838403.dll
                                              • Size 1.0MB
                                              • SHA256 d6886f05a21292d62847575e16e3357a6588b436fba984e967d86ce31be6016f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              windows-11-start-menu-styler.ini
                                              • Path C:\Program Files\iTop Easy Desktop\Windhawk\AppData\Engine\Mods\windows-11-start-menu-styler.ini
                                              • Size 466B
                                              • SHA256 3d1dc783e8648b39c3c3c977247627e9b42dc73c52aafca07d98d08f473b6a12
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              windows-11-taskbar-styler.ini
                                              • Path C:\Program Files\iTop Easy Desktop\Windhawk\AppData\Engine\Mods\windows-11-taskbar-styler.ini
                                              • Size 372B
                                              • SHA256 09c9fad5e0f94af16f9c7f5e8950c42878bb4f4a6fb28910cfdbffc1eb2845eb
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              settings.ini
                                              • Path C:\Program Files\iTop Easy Desktop\Windhawk\AppData\Engine\settings.ini
                                              • Size 402B
                                              • SHA256 9796f7869178dbcc7ba189858288fe1af467b02366ef3daf6d69dd2e1acb33f7
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              windhawk.dll
                                              • Path C:\Program Files\iTop Easy Desktop\Windhawk\Engine\32\windhawk.dll
                                              • Size 909KB
                                              • SHA256 10b8e8b465840d14e6cf1ea3b662e485b181c582fc5b3e89acd22c06a27d6985
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              windhawk.dll
                                              • Path C:\Program Files\iTop Easy Desktop\Windhawk\Engine\64\windhawk.dll
                                              • Size 961KB
                                              • SHA256 e1dc342debe2f21f4c7655b11280762fb02a29f0b19a22cc8c34642410b4449f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              windhawk.dll
                                              • Path C:\Program Files\iTop Easy Desktop\Windhawk\Engine\arm64\windhawk.dll
                                              • Size 1.7MB
                                              • SHA256 0f1046c49baeb0248e28ec947b9e30f6c8cae07b6c418e7fee9bc3a4579aa641
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              engine.ini
                                              • Path C:\Program Files\iTop Easy Desktop\Windhawk\Engine\engine.ini
                                              • Size 114B
                                              • SHA256 5f99cebb89c79d3396fd91a2182e2ec394818afe2c2dfd7967c15e876ef64ed3
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              setting_patch.dat
                                              • Path C:\Program Files\iTop Easy Desktop\Windhawk\setting_patch.dat
                                              • Size 324KB
                                              • SHA256 fbda98314937631ddf22ae5d26c35c0957ce1be57ef96ebdd18b5b64d732147c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              iEasyDesk.exe
                                              • Path C:\Program Files\iTop Easy Desktop\iEasyDesk.exe
                                              • Size 14.2MB
                                              • SHA256 ebb445047028b7f257733543391837d78468303b19cb7848ae12440487ccee4f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              iTopEDFileFilter.sys
                                              • Path C:\Program Files\iTop Easy Desktop\iTopEDFileFilter.sys
                                              • Size 41KB
                                              • SHA256 dc8440ba9e4d5ecaf035a5b57bd4c3476a925c8461191cd8a099d05ae7f6c720
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              webres.dll
                                              • Path C:\Program Files\iTop Easy Desktop\webres.dll
                                              • Size 881KB
                                              • SHA256 aef2c754be5766765c3640ff477c99688d8807626982ebe5c1a229ac931e7d42
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              winid.dat
                                              • Path C:\Program Files\iTop Easy Desktop\winid.dat
                                              • Size 858B
                                              • SHA256 588a275a0c69a09fdc377e9d30ec9d7a4bd06b9d2838440134dc638686dcaae2
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\ProgramData\iTop Easy Desktop\Config.ini
                                              • Size 58B
                                              • SHA256 61d0483814e45ef445e4da0150a0f5e6bfb9e34b2fd013f0123bc5db9b92ae40
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Install.ini
                                              • Path C:\ProgramData\iTop\Install.ini
                                              • Size 198B
                                              • SHA256 efa012545f79e3f6240c7a5f7cb311cc34cc4e80bbe3f38b622b5c398af8eff2
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Setup.exe
                                              • Path C:\Users\Admin\AppData\Local\Temp\is-AVB3F.tmp\Installer\Setup.exe
                                              • Size 6.4MB
                                              • SHA256 67b36573dfe30b044b64f20b0b78ca0adad9c064c17b735f5dd3f9a8c30ba8e4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              IEDInit.exe
                                              • Path C:\Users\Admin\AppData\Local\Temp\is-MDUAP.tmp\IEDInit.exe
                                              • Size 4.2MB
                                              • SHA256 6319b4b16c77d712e6d7831b93f0bff78b2a0450f0f669442e58770878a75d79
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              itop-easy-desktop-4-3-0-342.tmp
                                              • Path C:\Users\Admin\AppData\Local\Temp\is-QQBDP.tmp\itop-easy-desktop-4-3-0-342.tmp
                                              • Size 1.3MB
                                              • SHA256 b62d1042c998d8fe396af1a808241a1234393e29e59deadbb9b543006d29a321
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              libcrypto-1_1.dll
                                              • Path C:\Users\Admin\AppData\Local\Temp\libcrypto-1_1.dll
                                              • Size 1.7MB
                                              • SHA256 37cc65da464443f780ba555ed3c86f5f1003ccbe790f85f3a612c62741c9fa92
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              libssl-1_1.dll
                                              • Path C:\Users\Admin\AppData\Local\Temp\libssl-1_1.dll
                                              • Size 353KB
                                              • SHA256 e9cedb410df5a475a08b2f17ec5ea5615d02ff4f1a1e045f53053a73da9a2474
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              AUpdate.itdt
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\AUpdate.itdt
                                              • Size 65B
                                              • SHA256 d14f7d617a4a4cb14b0be5712fcc97ce2e015c3504591c8e78cdac3f1d86be72
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              BoxConfig.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BoxConfig.ini
                                              • Size 1KB
                                              • SHA256 fb54046466f2d817f41ac0c34454d780144a773f3d245dbf1434f2ad787a3231
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              BoxConfig.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BoxConfig.ini
                                              • Size 2KB
                                              • SHA256 951a2f50f082532041d2561685f82eccd73e18d71aff7aee57c1ac7f620db2e7
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              BoxConfig.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BoxConfig.ini
                                              • Size 4KB
                                              • SHA256 2af0c42ca00adf22b09ca8cbbf80e1405f6052aaa7e761bed82d23b62404450d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              BoxConfig.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BoxConfig.ini
                                              • Size 6KB
                                              • SHA256 c185d845c3ab205288e3f0426f8e2c97493f69c3404031d0cb95f27fe6523992
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              BoxConfig.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BoxConfig.ini
                                              • Size 6KB
                                              • SHA256 fb419c47136c22adfe159d89512effe7f827ce095da72fdf1e1ffffccd437a2d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              settings.dat
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 4aad422a4238ec0d99e9aa5c60db7411fd2d9e01196d421644546d428c291e8b
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              settings.dat
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 3ed8c1fb792e181957a9f8c78b194e5da6ab6511c93c5a6f65ae41fd138169a3
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              1136584a-aad1-43a2-8a0b-ad84cc89c78d.tmp
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Default\1136584a-aad1-43a2-8a0b-ad84cc89c78d.tmp
                                              • Size 6KB
                                              • SHA256 fb150f2b627f15564743ee1af1200a30da66db872904f922bf9447491274e567
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 168B
                                              • SHA256 120d0695f3f2b8b1c6e459b63dc56bd026a6c09590734c10590a3d90d8d93bb7
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index~RFe5a4b91.TMP
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5a4b91.TMP
                                              • Size 48B
                                              • SHA256 84bdbf347bcc268679c9ab5dde689189b9ede35416de86a67eff9dfbef5c522f
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              CURRENT
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Default\Extension Rules\CURRENT
                                              • Size 16B
                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              MANIFEST-000001
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Default\Extension Scripts\MANIFEST-000001
                                              • Size 41B
                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Network Persistent State
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Default\Network\Network Persistent State
                                              • Size 59B
                                              • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Network Persistent State
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Default\Network\Network Persistent State
                                              • Size 706B
                                              • SHA256 720735cf63ff5cd8f0e4bab8ad64cf4904f6b35b916be20fa7129bb820604a66
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              SCT Auditing Pending Reports
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Default\Network\SCT Auditing Pending Reports
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              TransportSecurity
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Default\Network\TransportSecurity
                                              • Size 188B
                                              • SHA256 217fe15c423e1ddcb67cde7c9d0fbf21c601b0cc5f3f28821d02d507abb381c0
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              TransportSecurity~RFe5ac6db.TMP
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Default\Network\TransportSecurity~RFe5ac6db.TMP
                                              • Size 188B
                                              • SHA256 c96974b15765709be03a7b2b3b7d4f6a9a3e23cb0319a0911e4028e5eba4043c
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              data_0
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\GraphiteDawnCache\data_0
                                              • Size 8KB
                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                              • MD5 SHA1 SHA512 SSDEEP
                                              Submit Download

                                              data_1
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\GraphiteDawnCache\data_1
                                              • Size 264KB
                                              • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                              • MD5 SHA1 SHA512 SSDEEP
                                              Submit Download

                                              data_2
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\GraphiteDawnCache\data_2
                                              • Size 8KB
                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                              • MD5 SHA1 SHA512 SSDEEP
                                              Submit Download

                                              data_3
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\GraphiteDawnCache\data_3
                                              • Size 8KB
                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                              • MD5 SHA1 SHA512 SSDEEP
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Local State
                                              • Size 2KB
                                              • SHA256 56a2d9df810706fa586291ace357eab626faffa5027551daf98ca1d28c8fa60c
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Local State
                                              • Size 3KB
                                              • SHA256 c39a33fb179057d1549ee635ba79a71dc65b78011dd4d94f98a83c2c867d6cc7
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Local State
                                              • Size 15KB
                                              • SHA256 26c8f536e6eba24c2bcf8bac69e29c3c44bdeb5c412b93d7543c44f2154d75ee
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Local State~RFe59f766.TMP
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\BrowserCache\EBWebView\Local State~RFe59f766.TMP
                                              • Size 1KB
                                              • SHA256 9d9369082d59d620252d47951206ec186961bb5d7fa6b6e637c7a2470df2cc1a
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 272B
                                              • SHA256 899fc3321cfa899f5e8cf24ebee5d2cbc27eb64b35242ba850b1b0dbb74a8253
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 554B
                                              • SHA256 d14d28716a83bae8d01b60785b5b0ce9cce739a7b821e1aea0f646fde17db6c6
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 578B
                                              • SHA256 00419c22e1d649747a8f66f90c0ed8568f0b9b22a978c97141eeb36c6d4c2591
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 740B
                                              • SHA256 1b50f21392686f06e19a547b4e41e085797a963eae819affee87e406245f71af
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 740B
                                              • SHA256 2039da4cfffa95c64f778f724a6088e0a3aa6f3679368bf4d701cfd016a1b267
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 908B
                                              • SHA256 346ab0117ef5eb8ccca118f2a74ac8b33a898552f2b11ac7550a8092f0842139
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 884B
                                              • SHA256 a9c767389c155b46f2e789be90ef89ee3b819c8062888f143d17f0a443ff8d8b
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 1KB
                                              • SHA256 8c1a252beb8adcf451ae757cbd372c2aea6c0715e7e728b5fb6ae38abb84ad1e
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 1KB
                                              • SHA256 104390410583e9df1b8a19c1101200f2ddbae4337b15b7fe24e5dc05036b90c0
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 1KB
                                              • SHA256 b4dadab1c716e4e994115714af8086f6dd4bc7faa91bf89d5e9adfbd842556fd
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 2KB
                                              • SHA256 eb5cd68e5ea9706c02618a401ac7726c100cb94ab19458a77cb24c7179748538
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 2KB
                                              • SHA256 c505fe57785b9e104eaf27210a47fa58ba349ddddef6d332994bad5a4b1895a1
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 2KB
                                              • SHA256 abc5de6f2e09603ee568447d14b6590724653b8890216681184309d573a18f06
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 2KB
                                              • SHA256 89439a7987f479879235f1cf98326edcc38defd918ba7999db7b89274781034d
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 2KB
                                              • SHA256 f6baf5dbbde0ccec55e862b30fdfdc94ce88c063c848e82b389b043c42a8c9dd
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 2KB
                                              • SHA256 c2d2db5b45f4e695b561042c95f68bd3c3e8e178fa1bd27c6995f67d4e9fbc7c
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 2KB
                                              • SHA256 51d3473e3fb1a744da8c952094dcaaa9d0144a264555bf14e4d234583e4e5e78
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 7KB
                                              • SHA256 0444916d31d503a51bb112fb4c106ffa25359b5f5b80a589e69b4d5f2d5f3d6e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 7KB
                                              • SHA256 b259d384bd10cb45e6b7ba523ea3a49e11c2c12ec39c8047e6bcecd95bd2b29d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Config.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Config.ini
                                              • Size 236B
                                              • SHA256 db1e6962862b295cb73a7ec916678298ae4dcad44aaaeb294121ecb789b9f666
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              17c421fff354c77ba745dde1203f8fbf0.png
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Data\ImagesCache\17c421fff354c77ba745dde1203f8fbf0.png
                                              • Size 1KB
                                              • SHA256 a8f580c4de6d3ab4939b8bf3e6a66f2fac6210dc2b0b95d30ab263ac56a75ed1
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              17c421fff354c77ba745dde1203f8fbf1.png
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Data\ImagesCache\17c421fff354c77ba745dde1203f8fbf1.png
                                              • Size 2KB
                                              • SHA256 007698201a4c0b883bc91a133c109b59f1a9f46920dc09f64c6888f8a7518c77
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              17c421fff354c77ba745dde1203f8fbf2.png
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Data\ImagesCache\17c421fff354c77ba745dde1203f8fbf2.png
                                              • Size 7KB
                                              • SHA256 2a5603ccecef4fa40492860c5855a116275ef6a1fac653ecb3fb8acdb72c5e82
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              40441a858d7f7c74d81b32d196041bb40.png
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Data\ImagesCache\40441a858d7f7c74d81b32d196041bb40.png
                                              • Size 714B
                                              • SHA256 63a1279f7788127560cc32308d6435c7678a97897bbb63b63db48c12a3540743
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              40441a858d7f7c74d81b32d196041bb41.png
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Data\ImagesCache\40441a858d7f7c74d81b32d196041bb41.png
                                              • Size 1KB
                                              • SHA256 2ff6d75d2dbd290817201f02d24d250f39efff6c86c7bbe9778b4aa03b8efd31
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              40441a858d7f7c74d81b32d196041bb42.png
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Data\ImagesCache\40441a858d7f7c74d81b32d196041bb42.png
                                              • Size 2KB
                                              • SHA256 34a89762bea8e04e9f9033ed5fc72a580278d83f0f7d44c01e0498edd68b75c1
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              599d471d859fe71b250c76439566f6fc0.png
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Data\ImagesCache\599d471d859fe71b250c76439566f6fc0.png
                                              • Size 1KB
                                              • SHA256 9fb0bcd311eb8f251b062b30749f2e1fa9f8d1b200482b45be715c49f730493c
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              599d471d859fe71b250c76439566f6fc1.png
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Data\ImagesCache\599d471d859fe71b250c76439566f6fc1.png
                                              • Size 2KB
                                              • SHA256 7c35cf1e33be4f5eff2030ba045098b24cfb6c42772012f32fe9a4eaf8faf736
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              599d471d859fe71b250c76439566f6fc2.png
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Data\ImagesCache\599d471d859fe71b250c76439566f6fc2.png
                                              • Size 8KB
                                              • SHA256 d23e154486770a53674b1e784778a62d6e4969ae4c415ddd984c44efa443b47d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              9d06a025f55f4b3975888c03d2250ae10.png
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Data\ImagesCache\9d06a025f55f4b3975888c03d2250ae10.png
                                              • Size 276B
                                              • SHA256 f3a145adc930542e7ac1673f32758b5fbb50e4cc71360ef52668548f9a02c449
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              9d06a025f55f4b3975888c03d2250ae11.png
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Data\ImagesCache\9d06a025f55f4b3975888c03d2250ae11.png
                                              • Size 365B
                                              • SHA256 51e7c9406fe327403e148f7b8cbf4aa14339ce51c7b75f03cd98ac0e16b53490
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              9d06a025f55f4b3975888c03d2250ae12.png
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Data\ImagesCache\9d06a025f55f4b3975888c03d2250ae12.png
                                              • Size 923B
                                              • SHA256 624273d212ac3b2def1b801f62c34d04a1dc5b684268b6acd0c70f1d14eda32c
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              SoftInfo_Desk.dat
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Data\SoftInfo_Desk.dat
                                              • Size 6B
                                              • SHA256 2e08d1f6000aef541797d008c05ac36f4dbebfb36cbac5615788e6fcc5b300a7
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              IEDRtt.ept
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\IEDRtt.ept
                                              • Size 12B
                                              • SHA256 0ebb4c1cc55b167b7d5639d6c48dcb925bac4ac6a7b110cd54f00b577d2b97a2
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              IEDRtt.ept
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\IEDRtt.ept
                                              • Size 148B
                                              • SHA256 187c1391f654822885292bb9170eaf9e859dcfab298c3cb9efb4e0e6c010b6c6
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              AutoUpdate.log
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Logs\AutoUpdate.log
                                              • Size 6KB
                                              • SHA256 67c5769cdd37352ab1ade6413d540e26e392949b20341aed43552e2ae021928e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              IEDChatAI.log
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Logs\IEDChatAI.log
                                              • Size 664B
                                              • SHA256 5a4dacf1eae81d114ebdbb87ec4ec384f200a3bf1e4d53f7ec7ed2b0099e43e5
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              IEDChatAI.log
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Logs\IEDChatAI.log
                                              • Size 13KB
                                              • SHA256 42aa06b3e3edf7de4611f6daedd57bcd50f0ab51e246035c9be1e32e961a7da3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              IEDManager.log
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Logs\IEDManager.log
                                              • Size 684B
                                              • SHA256 f32c68a7184465a929896b99460f286ed752f5c21f1e75826aa0493d4c2f478a
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              IEDManager.log
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Logs\IEDManager.log
                                              • Size 1KB
                                              • SHA256 b8186526c3d99de7ab5aea250dd19579285e67c725fc2f9f94431a6c0a897568
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              IEDSearch.log
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Logs\IEDSearch.log
                                              • Size 664B
                                              • SHA256 1eb77cd9251007138415db9bf2a7f9d58e23f02be1a64290e8bea69dc90fa1cb
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              IEDSettings.log
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Logs\IEDSettings.log
                                              • Size 664B
                                              • SHA256 3be22cf08c704f384f0357c809a9bb4baaef8cca059969452bd952124906d0af
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              IEDSettings.log
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Logs\IEDSettings.log
                                              • Size 3KB
                                              • SHA256 233f98a11814188cde929131e4f77d85a1cffcafa72d0383f7c4d091f55f216e
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              IEDSettings.log
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Logs\IEDSettings.log
                                              • Size 4KB
                                              • SHA256 9a12fbe98cd9f04afddc5f13a76bdf74038e66a5183c76fd57f9f1ced753f3da
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              iEasyDesk.log
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Logs\iEasyDesk.log
                                              • Size 1KB
                                              • SHA256 685364ddfe5c22c4f29a1eaa2a6c00b11c0251e06ad06380616125f14023ca82
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              iEasyDesk.log
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Logs\iEasyDesk.log
                                              • Size 1KB
                                              • SHA256 9e115b8ebb634ad1447b479a69addf0c720820ecc23626c1b5fa80ba24be2309
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              iEasyDesk.log
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\Logs\iEasyDesk.log
                                              • Size 5KB
                                              • SHA256 197dadb209e0e8933ca12bc0e5715c3c78d8ab3902b17a42d5566b0e8de65349
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              PlayerSetting.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\PlayerSetting.ini
                                              • Size 2B
                                              • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              PlayerSetting.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\PlayerSetting.ini
                                              • Size 92B
                                              • SHA256 91a82ffb2277168dbe5c60d736f5cd5fdf29be2a2f185aec8445385c384b2d5f
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              StatCache3.db
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\StatCache3.db
                                              • Size 414B
                                              • SHA256 df4e10c30082e2d1dd3b8e94f297368b782388b02205b49cc0df48a751fe602d
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              StatCache3.db
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\StatCache3.db
                                              • Size 450B
                                              • SHA256 deb32a25359f69f90759ee21929f3aeffdba46d203106b3d476af8955a0193c9
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              StatCache3.db
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\StatCache3.db
                                              • Size 486B
                                              • SHA256 7198ad29bdb30d0757b5fade91af1f773d4c74788029d469c673277a9981fafc
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              StatCache3.db
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\StatCache3.db
                                              • Size 562B
                                              • SHA256 98fc6c4c94a134f6787e926a014b03124218aa98f17ed98cd46f5dddcc74463f
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              StatCache3.db
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\StatCache3.db
                                              • Size 598B
                                              • SHA256 b4081dd08c8f90187531aea28c034ef89cf64116c9817d4c07ed86e0d1eddfca
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              StatCache3.db
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\StatCache3.db
                                              • Size 634B
                                              • SHA256 4b6e42f0104f375ac0529acde07bc00e60e5d392b24337895fd58f3f9abd18cc
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              StatCache3.db
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\StatCache3.db
                                              • Size 706B
                                              • SHA256 1bde8186538357ad403a03858f29e09e0396e194eea2d00a46827ece856aa60d
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              StatCache3.db
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\StatCache3.db
                                              • Size 814B
                                              • SHA256 efac86b6746593c85dc9327d1e481df80656f283bb23b741065d30bb5860207e
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              StatCache3.db
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\StatCache3.db
                                              • Size 850B
                                              • SHA256 fcefb65166e2784dd6331ce6f4c3085c11f50d8ab4ea4c29959a4109e7fd7d7f
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ied4Stat3.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\ied4Stat3.ini
                                              • Size 98B
                                              • SHA256 966c958231221d8371227cd0c7e10cd041a3861d67006f1c7bad0270f94b128d
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ied4Stat3.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\ied4Stat3.ini
                                              • Size 155B
                                              • SHA256 a7ee94e99b140647a5bb92c59d9f1c4f7ae9fba7a45904c1c824c4d2d5b08ac8
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ied4Stat3.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\ied4Stat3.ini
                                              • Size 212B
                                              • SHA256 32844ced2123a6031b347355c20073d53d4de8ed7f0eb29667103fbf4b2b367f
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ied4Stat3.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\ied4Stat3.ini
                                              • Size 389B
                                              • SHA256 b3b962e73a8f3f4a4e3519d0fe94361b448aa5a5dd040737942df017cfbd5812
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ied4Stat3.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\ied4Stat3.ini
                                              • Size 446B
                                              • SHA256 eaeb4cd81e81e22437410fc14d2de622d35f845461bec34d8369a85e0df4e6fb
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ied4Stat3.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\ied4Stat3.ini
                                              • Size 503B
                                              • SHA256 659e813b69145187b46102b4e1a93b4d95afaaac7730940ef866108834e14e38
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ied4Stat3.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\ied4Stat3.ini
                                              • Size 617B
                                              • SHA256 c21f7dfe1a9a11b514fbd37a75b9c21104e3fb9e4a7d4ccc26e1e4ece92c33b4
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ied4Stat3.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\ied4Stat3.ini
                                              • Size 674B
                                              • SHA256 77244531b0912b5a780826f3920121bfc75e4ce122aca96fadd7402054a7eb8d
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ied4Stat3.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\ied4Stat3.ini
                                              • Size 731B
                                              • SHA256 dcf665bb24bd4026b2800fc8578f04b996c2287ccab0e476dca04bbb2ca033f3
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ied4Stat3.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\ied4Stat3.ini
                                              • Size 788B
                                              • SHA256 6f30e5c2f5b867439c68da95c322542835f7376a523e23b914f83ac020fbf846
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ied4Stat3.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\ied4Stat3.ini
                                              • Size 845B
                                              • SHA256 196e61992cca65c73a591e7e1e37fb82681a6dd8f10f351d5f90aa2905f73ddd
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ied4Stat3.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\ied4Stat3.ini
                                              • Size 902B
                                              • SHA256 3632e06198dcc718831fb8b5c8f2039ad468bd1b6e458b77077f03cd30f48c1a
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ied4Stat3.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\StatData\ied4Stat3.ini
                                              • Size 959B
                                              • SHA256 8edaa8da07de3bc6cc38a4c1edaf5450f1ec5e8c9caa9491109fcb8803df77b1
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              settings.dat
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView\Crashpad\settings.dat
                                              • Size 280B
                                              • SHA256 80d1cf84e2e3b204cd4fa461aaa3d6805db7ef1f0b5216c3d6d85f37e62798cf
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 144B
                                              • SHA256 af22c8f15cb8e1cfa111399570bf0097e6fcf3cac89e99a03dd391ab88488363
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index~RFe5b2d94.TMP
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5b2d94.TMP
                                              • Size 48B
                                              • SHA256 fe12682a722488c1b963aeb34c5932bf4cd009f9a78d719912e58ce303d5864a
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              index
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView\Default\Code Cache\wasm\index
                                              • Size 24B
                                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Preferences
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView\Default\Preferences
                                              • Size 6KB
                                              • SHA256 397874299a4c6e5b0edcd638e4c730f68abbd388bed6de035408fdec69369eab
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Preferences~RFe5b223a.TMP
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView\Default\Preferences~RFe5b223a.TMP
                                              • Size 6KB
                                              • SHA256 3bbcc4850c56f2c08e1e3af5b089954eb1fce5efab0f4481273cfacdee847e5e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView\Local State
                                              • Size 3KB
                                              • SHA256 c5c834e6349960521042e6386984ee99ae5dc4d9ac6b413da2059fa49628a194
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView\Local State
                                              • Size 2KB
                                              • SHA256 a811c31b0252e628bac5634bc29a6a0b047540e371d635aff4dc8d781afb0c04
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView\Local State
                                              • Size 15KB
                                              • SHA256 99ce5860f5583a0336797b17f8e59c51fe8dc7d700d5aa430bbef81a3a03833a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Local State~RFe5ad62d.TMP
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WallpaperCache\EBWebView\Local State~RFe5ad62d.TMP
                                              • Size 1KB
                                              • SHA256 5753f45c9319a8cca9dc90f4e5d5999b1e9b06440d8235373a35fb27709741c0
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              WidgetConfig.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WidgetConfig.ini
                                              • Size 1KB
                                              • SHA256 3378980fb4afbbdf4bcd663c04789e5082cbc112b40af5e96d36ba33881a58ed
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              WidgetConfig.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WidgetConfig.ini
                                              • Size 5KB
                                              • SHA256 d80b6c2331d23580bbfcffa1f7fe28c6b5bc2fafabae25267613f20f817eb00f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              WidgetConfig.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WidgetConfig.ini
                                              • Size 8KB
                                              • SHA256 16b604a3064b1333adefa936c6d4cd938849873df15a610e91431a1c3795342d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              WidgetConfig.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WidgetConfig.ini
                                              • Size 8KB
                                              • SHA256 b48a5cc0accd01a8852829b53558266637b3efd0563de0eaa999f444991d6741
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              WidgetConfig.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WidgetConfig.ini
                                              • Size 8KB
                                              • SHA256 162d0ffa8943f29df454012d5601133f808fe8736a4487717f9b3b7a4521cd43
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              WidgetConfig.ini
                                              • Path C:\Users\Admin\AppData\Local\iTop Easy Desktop\WidgetConfig.ini
                                              • Size 8KB
                                              • SHA256 1d54b05f0a8f892179588cf670f297081aaa1a7b9fe07924ab81faffc2e71169
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              black.dll
                                              • Path \??\c:\program files\itop easy desktop\skin\black.dll
                                              • Size 6.4MB
                                              • SHA256 fa4b62002ec3ddc2df1a1b47458ab484163a4616ae6c34096a3937bd2f3aea9f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              public.dll
                                              • Path \??\c:\program files\itop easy desktop\skin\public.dll
                                              • Size 26KB
                                              • SHA256 80a5114b712c4eca47abe09ef8cd6955c64b36f9479875137ecc29e448ce852e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              memory/8-2204-0x00007FFD514E0000-0x00007FFD514E1000-memory.dmp
                                              Download

                                              memory/1052-2603-0x0000000000400000-0x000000000071B000-memory.dmp
                                              Download

                                              memory/1072-3908-0x0000000000400000-0x000000000083B000-memory.dmp
                                              Download

                                              memory/1252-143-0x0000000000400000-0x0000000000443000-memory.dmp
                                              Download

                                              memory/1252-24-0x0000000000400000-0x0000000000443000-memory.dmp
                                              Download

                                              memory/1252-1744-0x0000000000400000-0x0000000000443000-memory.dmp
                                              Download

                                              memory/1716-3921-0x0000000005A60000-0x0000000005FD6000-memory.dmp
                                              Download

                                              memory/1716-3920-0x0000000000400000-0x0000000001287000-memory.dmp
                                              Download

                                              memory/1716-1967-0x0000000005A60000-0x0000000005FD6000-memory.dmp
                                              Download

                                              memory/1716-4230-0x0000000005A60000-0x0000000005FD6000-memory.dmp
                                              Download

                                              memory/1716-4229-0x0000000000400000-0x0000000001287000-memory.dmp
                                              Download

                                              memory/1716-4268-0x000000000F850000-0x000000000FAF2000-memory.dmp
                                              Download

                                              memory/1716-2463-0x0000000005A60000-0x0000000005FD6000-memory.dmp
                                              Download

                                              memory/1716-2462-0x0000000000400000-0x0000000001287000-memory.dmp
                                              Download

                                              memory/1852-1645-0x0000000005330000-0x0000000005352000-memory.dmp
                                              Download

                                              memory/1852-1650-0x0000000005C50000-0x0000000005FAB000-memory.dmp
                                              Download

                                              memory/1852-1644-0x00000000053A0000-0x00000000059EA000-memory.dmp
                                              Download

                                              memory/1852-1667-0x00000000075D0000-0x00000000075D6000-memory.dmp
                                              Download

                                              memory/1852-1665-0x0000000007660000-0x000000000768A000-memory.dmp
                                              Download

                                              memory/1852-1664-0x00000000075B0000-0x00000000075CA000-memory.dmp
                                              Download

                                              memory/1852-1643-0x00000000027D0000-0x0000000002806000-memory.dmp
                                              Download

                                              memory/1852-1660-0x0000000007230000-0x00000000072D3000-memory.dmp
                                              Download

                                              memory/1852-1647-0x0000000005AD0000-0x0000000005B36000-memory.dmp
                                              Download

                                              memory/1852-1646-0x0000000005A60000-0x0000000005AC6000-memory.dmp
                                              Download

                                              memory/1852-1663-0x0000000007760000-0x0000000007964000-memory.dmp
                                              Download

                                              memory/1852-1656-0x000000006E280000-0x000000006E2CC000-memory.dmp
                                              Download

                                              memory/1852-1666-0x0000000006600000-0x0000000006608000-memory.dmp
                                              Download

                                              memory/1852-1659-0x00000000065F0000-0x0000000006610000-memory.dmp
                                              Download

                                              memory/1852-1670-0x00000000076C0000-0x00000000076E6000-memory.dmp
                                              Download

                                              memory/1852-4267-0x0000000004F50000-0x0000000005069000-memory.dmp
                                              Download

                                              memory/1852-1662-0x0000000007390000-0x00000000073AA000-memory.dmp
                                              Download

                                              memory/1852-1652-0x0000000006030000-0x000000000607C000-memory.dmp
                                              Download

                                              memory/1852-1661-0x00000000079E0000-0x000000000805C000-memory.dmp
                                              Download

                                              memory/1852-1669-0x0000000007620000-0x0000000007628000-memory.dmp
                                              Download

                                              memory/1852-1655-0x0000000006FC0000-0x0000000006FF6000-memory.dmp
                                              Download

                                              memory/1852-1651-0x0000000005FF0000-0x000000000600E000-memory.dmp
                                              Download

                                              memory/1852-1668-0x00000000075E0000-0x00000000075EA000-memory.dmp
                                              Download

                                              memory/1852-3940-0x0000000004F50000-0x0000000005069000-memory.dmp
                                              Download

                                              memory/1852-4266-0x0000000000400000-0x0000000000A09000-memory.dmp
                                              Download

                                              memory/2020-4231-0x0000000000400000-0x0000000000C0B000-memory.dmp
                                              Download

                                              memory/2020-2464-0x0000000000400000-0x0000000000C0B000-memory.dmp
                                              Download

                                              memory/2020-4232-0x0000000004E70000-0x00000000053E6000-memory.dmp
                                              Download

                                              memory/2020-1952-0x0000000004E70000-0x00000000053E6000-memory.dmp
                                              Download

                                              memory/2020-2465-0x0000000004E70000-0x00000000053E6000-memory.dmp
                                              Download

                                              memory/2116-2602-0x0000000000400000-0x0000000000760000-memory.dmp
                                              Download

                                              memory/2116-2511-0x0000000000400000-0x0000000000760000-memory.dmp
                                              Download

                                              memory/2116-2559-0x0000000000400000-0x0000000000760000-memory.dmp
                                              Download

                                              memory/2116-2436-0x0000000000400000-0x0000000000760000-memory.dmp
                                              Download

                                              memory/2184-1770-0x0000000000400000-0x0000000000610000-memory.dmp
                                              Download

                                              memory/2184-2605-0x0000000000400000-0x000000000071B000-memory.dmp
                                              Download

                                              memory/2440-2435-0x0000000000400000-0x0000000000590000-memory.dmp
                                              Download

                                              memory/2440-3343-0x0000000000400000-0x0000000000590000-memory.dmp
                                              Download

                                              memory/2608-2078-0x0000000004FB0000-0x0000000005526000-memory.dmp
                                              Download

                                              memory/2608-3924-0x0000000000400000-0x0000000000D54000-memory.dmp
                                              Download

                                              memory/2608-2572-0x0000000000400000-0x0000000000D54000-memory.dmp
                                              Download

                                              memory/2608-2466-0x0000000000400000-0x0000000000D54000-memory.dmp
                                              Download

                                              memory/2608-2516-0x0000000000400000-0x0000000000D54000-memory.dmp
                                              Download

                                              memory/2608-4264-0x0000000000400000-0x0000000000D54000-memory.dmp
                                              Download

                                              memory/2608-2467-0x0000000004FB0000-0x0000000005526000-memory.dmp
                                              Download

                                              memory/2608-4265-0x0000000004FB0000-0x0000000005526000-memory.dmp
                                              Download

                                              memory/2708-4228-0x0000000000400000-0x00000000006B8000-memory.dmp
                                              Download

                                              memory/3148-1672-0x0000000000400000-0x0000000000871000-memory.dmp
                                              Download

                                              memory/3376-13-0x0000000000400000-0x0000000000443000-memory.dmp
                                              Download

                                              memory/3376-0-0x0000000000400000-0x0000000000443000-memory.dmp
                                              Download

                                              memory/3496-2604-0x00000000013E0000-0x00000000013E1000-memory.dmp
                                              Download

                                              memory/3496-4857-0x0000000000400000-0x00000000006A2000-memory.dmp
                                              Download

                                              memory/4744-1654-0x0000000000400000-0x0000000000549000-memory.dmp
                                              Download

                                              memory/4744-1743-0x0000000000400000-0x0000000000549000-memory.dmp
                                              Download

                                              memory/4744-144-0x0000000000400000-0x0000000000549000-memory.dmp
                                              Download

                                              memory/4972-12-0x0000000000400000-0x0000000000549000-memory.dmp
                                              Download

                                              memory/4972-6-0x0000000002320000-0x0000000002321000-memory.dmp
                                              Download

                                              memory/5416-1780-0x0000000000400000-0x0000000000590000-memory.dmp
                                              Download

                                              memory/5636-1897-0x0000000000010000-0x0000000000037000-memory.dmp
                                              Download

                                              memory/5712-2223-0x00007FFD514E0000-0x00007FFD514E1000-memory.dmp
                                              Download

                                              memory/5716-1732-0x0000000004E20000-0x0000000004F39000-memory.dmp
                                              Download

                                              memory/5716-1731-0x0000000000400000-0x0000000000A09000-memory.dmp
                                              Download

                                              memory/5716-1703-0x0000000004E20000-0x0000000004F39000-memory.dmp
                                              Download

                                              memory/5772-1615-0x0000000000400000-0x000000000043F000-memory.dmp
                                              Download

                                              memory/5820-1685-0x00000000024B0000-0x0000000002993000-memory.dmp
                                              Download

                                              memory/5944-1771-0x0000000000400000-0x0000000000AB0000-memory.dmp
                                              Download

                                              memory/5944-14-0x00000000026B0000-0x00000000026B1000-memory.dmp
                                              Download

                                              memory/5944-1776-0x0000000000400000-0x0000000000AB0000-memory.dmp
                                              Download

                                              memory/5944-31-0x0000000000400000-0x0000000000AB0000-memory.dmp
                                              Download

                                              memory/5944-23-0x0000000003A10000-0x0000000003A20000-memory.dmp
                                              Download

                                              memory/5944-1699-0x0000000000400000-0x0000000000AB0000-memory.dmp
                                              Download

                                              memory/5944-32-0x00000000026B0000-0x00000000026B1000-memory.dmp
                                              Download

                                              memory/5944-36-0x0000000003A10000-0x0000000003A20000-memory.dmp
                                              Download

                                              memory/5944-1511-0x0000000000400000-0x0000000000AB0000-memory.dmp
                                              Download

                                              memory/5944-2365-0x0000000000400000-0x0000000000AB0000-memory.dmp
                                              Download

                                              memory/6136-51-0x0000000000400000-0x0000000000871000-memory.dmp
                                              Download

                                              memory/7524-5021-0x00000000066C0000-0x0000000006C36000-memory.dmp
                                              Download

                                              memory/7564-5025-0x0000000000400000-0x0000000000450000-memory.dmp
                                              Download