Analysis

  • user interaction
    yes
  • max time kernel
    428s
  • max time network
    429s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260617-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/06/2026, 11:02

General

  • Target
    view.html
  • Size 117KB
  • Sample260624-m5dbmsbw2v
  • SHA256 639464d4a53c5f2b741c5258e7e7dd1393b0ce44ac4e1de8616511fce727246f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Identifies Wine through registry keys 2 TTPs 2 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Contacts third-party web service commonly abused for C2 1 TTPs 7 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 5 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • NSIS installer 4 IoCs
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Control Panel 2 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 3 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
  • Suspicious use of AdjustPrivilegeToken 10 IoCs
  • Suspicious use of FindShellTrayWindow 47 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of SetWindowsHookEx 10 IoCs
  • Suspicious use of WriteProcessMemory 56 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\view.html
    1⤵
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:6060
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffa3491c188,0x7ffa3491c194,0x7ffa3491c1a0
      2⤵
        PID:620
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1696,i,9651597297103608279,13890805226975816635,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:11
        2⤵
        • System Time Discovery
        PID:556
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1564,i,17643878616769065149,8425736460689799219,262144 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
        2⤵
          PID:5172
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,8813294963574972604,11736411777325868219,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:13
          2⤵
            PID:5576
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3656,i,12464460762938876592,1416292072992127580,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
            2⤵
              PID:2904
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3672,i,14415661613758880670,9400980099094172219,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
              2⤵
                PID:1916
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,14507999602627933101,14430138211643552190,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:9
                2⤵
                  PID:3420
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,4657235449576854372,5698409239930779984,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:1
                  2⤵
                    PID:3032
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5424,i,8162851534422741159,8246847102106663026,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=3836 /prefetch:1
                    2⤵
                      PID:3580
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,11197803869471616143,17207687081386012156,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:14
                      2⤵
                        PID:2232
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5592,i,14514526034966661866,2285840717065984806,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:14
                        2⤵
                          PID:4116
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,4249121388196316253,7071919320527453072,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:14
                          2⤵
                            PID:2776
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,4249121388196316253,7071919320527453072,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6100 /prefetch:14
                            2⤵
                              PID:4528
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6732,i,10046295721016190908,1348851058913785446,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:1
                              2⤵
                                PID:1796
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6876,i,10463399424113264885,2962973646886691245,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:1
                                2⤵
                                  PID:2592
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=7132,i,16312492988484477921,16888833843636394842,2097152 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=7164 /prefetch:1
                                  2⤵
                                    PID:4884
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7120,i,9278269207981305892,12009806380157223078,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=7108 /prefetch:14
                                    2⤵
                                      PID:1964
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7052,i,9196707067572543561,1541623225660527097,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=7172 /prefetch:14
                                      2⤵
                                        PID:1528
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6892,i,10289873045068635761,14477648176720515646,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6856 /prefetch:14
                                        2⤵
                                          PID:3516
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6812,i,1941056320599663473,4441420984929115844,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:14
                                          2⤵
                                            PID:824
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6872,i,4062877416994067841,17683630794192663291,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:14
                                            2⤵
                                              PID:3588
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,1861647935131368691,7325534404336659013,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:14
                                              2⤵
                                                PID:1340
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,7505977995046816802,15772812501670509173,262144 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:10
                                                2⤵
                                                • Suspicious behavior: EnumeratesProcesses
                                                PID:1368
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6352,i,18251853360569927298,9373292104282203888,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:14
                                                2⤵
                                                  PID:3628
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7328,i,14343378860328733797,13696482728016319213,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=7112 /prefetch:14
                                                  2⤵
                                                    PID:3388
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6872,i,13151482195696993115,13155317297211008629,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:14
                                                    2⤵
                                                      PID:5512
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7120,i,10469554440014514585,18140878833950617789,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:14
                                                      2⤵
                                                        PID:4424
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6260,i,4216388825968310284,4573631707289740820,524288 --field-trial-handle=2300,i,4636587898499056501,3231675410601131477,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
                                                        2⤵
                                                          PID:1892
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                        1⤵
                                                          PID:4404
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                          1⤵
                                                            PID:4176
                                                          • C:\Windows\System32\rundll32.exe
                                                            C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                            1⤵
                                                              PID:1172
                                                            • C:\Program Files\7-Zip\7zG.exe
                                                              "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\Cockos_REAPER\" -spe -an -ai#7zMap7175:88:7zEvent31742
                                                              1⤵
                                                              • Suspicious use of AdjustPrivilegeToken
                                                              • Suspicious use of FindShellTrayWindow
                                                              PID:5680
                                                            • C:\Program Files\7-Zip\7zG.exe
                                                              "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\Cockos_REAPER\" -spe -an -ai#7zMap19399:88:7zEvent21947
                                                              1⤵
                                                              • Suspicious use of AdjustPrivilegeToken
                                                              • Suspicious use of FindShellTrayWindow
                                                              PID:1440
                                                            • C:\Users\Admin\Downloads\Cockos_REAPER\reaper773_x64-install.exe
                                                              "C:\Users\Admin\Downloads\Cockos_REAPER\reaper773_x64-install.exe"
                                                              1⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Drops file in Program Files directory
                                                              • System Location Discovery: System Language Discovery
                                                              • Modifies registry class
                                                              PID:2916
                                                            • C:\Users\Admin\Downloads\Cockos_REAPER\Patch.and.Keygen-R2R\REAPER_KeyGen.exe
                                                              "C:\Users\Admin\Downloads\Cockos_REAPER\Patch.and.Keygen-R2R\REAPER_KeyGen.exe"
                                                              1⤵
                                                              • System Location Discovery: System Language Discovery
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:1768
                                                              • C:\Users\Admin\AppData\Local\Temp\keygen.exe
                                                                C:\Users\Admin\AppData\Local\Temp\keygen.exe
                                                                2⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                • Modifies Control Panel
                                                                • Modifies registry class
                                                                • Suspicious behavior: GetForegroundWindowSpam
                                                                • Suspicious use of SetWindowsHookEx
                                                                PID:5756
                                                            • C:\Windows\system32\AUDIODG.EXE
                                                              C:\Windows\system32\AUDIODG.EXE 0x00000000000004C8 0x00000000000004C0
                                                              1⤵
                                                              • Suspicious use of AdjustPrivilegeToken
                                                              PID:4948
                                                            • C:\Users\Admin\Downloads\Cockos_REAPER\Keyfilemaker.and.Patch-BTCR\BTCR\KeyfilemakerAndPatch.exe
                                                              "C:\Users\Admin\Downloads\Cockos_REAPER\Keyfilemaker.and.Patch-BTCR\BTCR\KeyfilemakerAndPatch.exe"
                                                              1⤵
                                                              • Enumerates connected drives
                                                              • System Location Discovery: System Language Discovery
                                                              • Modifies registry class
                                                              • Suspicious behavior: GetForegroundWindowSpam
                                                              • Suspicious use of SetWindowsHookEx
                                                              PID:5324
                                                            • C:\Windows\SysWOW64\DllHost.exe
                                                              C:\Windows\SysWOW64\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
                                                              1⤵
                                                              • System Location Discovery: System Language Discovery
                                                              PID:4892
                                                            • C:\Windows\SysWOW64\DllHost.exe
                                                              C:\Windows\SysWOW64\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
                                                              1⤵
                                                              • System Location Discovery: System Language Discovery
                                                              PID:1304
                                                            • C:\Windows\System32\oobe\UserOOBEBroker.exe
                                                              C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
                                                              1⤵
                                                              • Drops file in Windows directory
                                                              PID:4412
                                                            • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
                                                              C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
                                                              1⤵
                                                              • System Location Discovery: System Language Discovery
                                                              PID:2416
                                                            • C:\Program Files\REAPER (x64)\reaper.exe
                                                              "C:\Program Files\REAPER (x64)\reaper.exe"
                                                              1⤵
                                                              • Executes dropped EXE
                                                              • Identifies Wine through registry keys
                                                              • Loads dropped DLL
                                                              • Checks processor information in registry
                                                              • Modifies Control Panel
                                                              • Modifies registry class
                                                              • Suspicious behavior: GetForegroundWindowSpam
                                                              • Suspicious use of SetWindowsHookEx
                                                              PID:3904

                                                            Network

                                                                  MITRE ATT&CK Enterprise v16

                                                                  Replay Monitor

                                                                  Loading Replay Monitor...

                                                                  Downloads

                                                                  Default_6.0.ReaperThemeZip

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\ColorThemes\Default_6.0.ReaperThemeZip
                                                                  • Size 22.0MB
                                                                  • SHA256 eb0c31c3aa933b5556cc0728dabcf9d343fece8e8a9448dd42b394c5533bb68d
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Default_7.0.ReaperThemeZip

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\ColorThemes\Default_7.0.ReaperThemeZip
                                                                  • Size 24.0MB
                                                                  • SHA256 b22b90a4a60e054a58b047447c3ec57a292f348e31d8f89599bd46491a56431a
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  GM.reabank

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\GM.reabank
                                                                  • Size 4KB
                                                                  • SHA256 da43bce7a5cc96a01d5757a951cbaba2696408d6239bdf083aab079e07ef236f
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Dumble Overdrive Special - Tweed Deluxe.wav

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Dumble Overdrive Special - Tweed Deluxe.wav
                                                                  • Size 4KB
                                                                  • SHA256 5a06fbba771a89783c957822e4dd92852ce12a1d47c604fdf220769f41b94480
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Fender Bassman - Fender Bassman.wav

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Fender Bassman - Fender Bassman.wav
                                                                  • Size 4KB
                                                                  • SHA256 68d325d659b8adf3dbb6a421277d35e5f61dbb1373003a149eb2a3cbdd49be8c
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Fender Bassman - Tweed Champ.wav

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Fender Bassman - Tweed Champ.wav
                                                                  • Size 4KB
                                                                  • SHA256 396bc77761daac4fc368a1d0c23ab9307941b6f3ea03b2502617c868f15c2b86
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Fender Deluxe - Marshall Stock 70.wav

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Fender Deluxe - Marshall Stock 70.wav
                                                                  • Size 4KB
                                                                  • SHA256 59b067e001e9425b4c165b9a71ca5e0ea1aa839633dbe4252660c3fe87da1596
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Fender Deluxe - Tweed Champ.wav

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Fender Deluxe - Tweed Champ.wav
                                                                  • Size 4KB
                                                                  • SHA256 5e4a40b4d41bee5448885be5378ab93a3027fb4c13778aa6179ffdf28ded2f84
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Marshall JCM800 - Marshall Stock 70.wav

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Marshall JCM800 - Marshall Stock 70.wav
                                                                  • Size 4KB
                                                                  • SHA256 48dcc27ee229502ec34ef863b8a867bb180156efccff2e2819260475a6f990c0
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Marshall JTM45 - Blackface Deluxe.wav

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Marshall JTM45 - Blackface Deluxe.wav
                                                                  • Size 4KB
                                                                  • SHA256 98faf64b07b18df56c2d3f0c9044fa1f93926656697401dec5eeffbd8bd142d7
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Marshall JTM45 - Matchless Chieftain.wav

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Marshall JTM45 - Matchless Chieftain.wav
                                                                  • Size 4KB
                                                                  • SHA256 f48c5bb9d4515a0de774181e043856e444d29adbb46ffb454480b2824e43bf42
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Mesa Boogie Clean - Blackface Twin.wav

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Mesa Boogie Clean - Blackface Twin.wav
                                                                  • Size 4KB
                                                                  • SHA256 54296c71c65d48cc5faa5de35f2d96fc0fb118b8443a5fb2e9a72d063b3dc178
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Mesa Boogie Clean - Matchless Chieftain.wav

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Mesa Boogie Clean - Matchless Chieftain.wav
                                                                  • Size 4KB
                                                                  • SHA256 5dec239f08e4809a1492713973c04a10e5cc0e54b48b824616131deafab02935
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Vox AC30 Non Top Boost - Vox AC30.wav

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\amp_models\Vox AC30 Non Top Boost - Vox AC30.wav
                                                                  • Size 4KB
                                                                  • SHA256 076519b0129fa16a806793b127928e72dba7c382ad876c43a8a1221450f5e0e6
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  00 - Default Mapping.txt

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\ix_keymaps\00 - Default Mapping.txt
                                                                  • Size 1KB
                                                                  • SHA256 c0c705ad1bd1dacf4e175bbbf81c1ebf81b981d0bebf5357d1876abef8190dc5
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  Chromatic.txt

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\ix_scales\Chromatic.txt
                                                                  • Size 141B
                                                                  • SHA256 c34979d66ce96127ee98248d90dddc51ddbb93135747a30ae70f6a21c7b65559
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  Dorian.txt

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\ix_scales\Dorian.txt
                                                                  • Size 125B
                                                                  • SHA256 d4f12d3e28e91a4498d50ec6035765d904516a2cf6f545cf1131d307af1227dd
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  Harmonic Minor.txt

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\ix_scales\Harmonic Minor.txt
                                                                  • Size 125B
                                                                  • SHA256 3d105fc263a2e5e0e0dfc4e69032b291061d6db6abc1052c4116d192ac6a4a19
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  Locrian.txt

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\ix_scales\Locrian.txt
                                                                  • Size 125B
                                                                  • SHA256 1f86ea118db38741e65e76bf26f62287c09ce80d4bfea8530db8fe5792c0fab4
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  toolbar_color_note_pitch.png

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_color_note_pitch.png
                                                                  • Size 23KB
                                                                  • SHA256 56cb9e0a78670b0081ace9a35d18c81b64d1feee12a067d9bde975f6c8457ca2
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_color_take_lane.png

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_color_take_lane.png
                                                                  • Size 23KB
                                                                  • SHA256 0919bcc1f20063d0a9781a1d6a7dca2cd14b0ddeba5316478043c38942b404f9
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_time_selection_item_delete_remove.png

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_time_selection_item_delete_remove.png
                                                                  • Size 23KB
                                                                  • SHA256 1a4a708eb9d2f77b3b10d01248ce2f4cbbd0b7092c2a4d2f5ace360bb19519aa
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_window_tab_mixer_mcp.png

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\150\toolbar_window_tab_mixer_mcp.png
                                                                  • Size 23KB
                                                                  • SHA256 dbf46c6c988400a1f25e4a575c07047c33773e97796e3cff714b5754298e260e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_audio_waveform_digital_sample_rate.png

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\toolbar_icons\200\toolbar_audio_waveform_digital_sample_rate.png
                                                                  • Size 42KB
                                                                  • SHA256 e81eaed990348bc135a0018bc11e5e95004bf6e78c820aa0ed565dfdfe948ac3
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  room_large.png

                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Data\track_icons\room_large.png
                                                                  • Size 16KB
                                                                  • SHA256 6f6368a80ae186918208234298296e4551cc2a7d0468930c49ea3a45c19a9449
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 65KB
                                                                  • SHA256 91a64bc8730949624af0b6916d380c4a3be0901ad6dbe10797cb9bd16516541a
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 95KB
                                                                  • SHA256 8ec8a207170d8b57697bc718e96df66ba570d5d105c1e74c0dae4aa8a991a9a6
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  • Path C:\Program Files\REAPER (x64)\InstallData\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 42KB
                                                                  • SHA256 9e895169189004dd4bc522fc06e0520c3be84e2d83fcee07be3820e81f9596be
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Uninstall.exe

                                                                  • Path C:\Program Files\REAPER (x64)\Uninstall.exe
                                                                  • Size 327KB
                                                                  • SHA256 7df81f488d2468e3c8bad4a07c5f6dcf0ef8a2e39bdf369c1cf88b60f97993ef
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  reaper.exe

                                                                  • Path C:\Program Files\REAPER (x64)\reaper.exe
                                                                  • Size 17.5MB
                                                                  • SHA256 dc799a1549691e30b403003560f816fea80b3f17cf4984e23b1d44f04c4590ed
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  reaper.exe

                                                                  • Path C:\Program Files\REAPER (x64)\reaper.exe
                                                                  • Size 17.5MB
                                                                  • SHA256 db90baadcfd5fa8a19c59f3363f073d8ee0119ab0105475dd8b2c5791ce0a2d6
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  settings.dat

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                  • Size 280B
                                                                  • SHA256 25e3094666b1652de0c19f09d2c5a36315ff1f2b6bf4618230987e4527d887d6
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  settings.dat

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                  • Size 280B
                                                                  • SHA256 ca5d57edbd599d2f326c973f9ea78899a33bc93603d04f5c5fc3060bb6069335
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  LOG.old

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                  • Size 334B
                                                                  • SHA256 f7eb78f711abfacbd978258261731a6fffb071363d2aaeab336d5103b5f4bedb
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  the-real-index

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                  • Size 3KB
                                                                  • SHA256 4980b1791ce9565e4c9dbf2fbe254c0676562eeec62b29b4db5ba9de7d324c08
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  the-real-index~RFe59163d.TMP

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59163d.TMP
                                                                  • Size 3KB
                                                                  • SHA256 eeedf0557baeef893f3d2cc832602dbdd318233f1af7bfea8c858a1a5a425a49
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  SiteList-Enterprise.json

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                  • Size 2B
                                                                  • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                  • MD5 SHA1 SHA512

                                                                  Edge Profile.ico

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                  • Size 70KB
                                                                  • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Network Persistent State

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                  • Size 7KB
                                                                  • SHA256 f45463e24d8f92caa4b53f846ac79847bf8e0fcd31b82f97d991cab7579899f7
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Network Persistent State

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                  • Size 5KB
                                                                  • SHA256 796754adc7b578f40daf6324252716ae3bf95d3e76be12a96453294ad4b61b86
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  SCT Auditing Pending Reports

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                  • Size 2B
                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                  • MD5 SHA1 SHA512

                                                                  Sdch Dictionaries

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                  • Size 40B
                                                                  • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                  • MD5 SHA1 SHA512

                                                                  Preferences

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                  • Size 14KB
                                                                  • SHA256 e310f4ae3484b9221d18ecf28ff6eba00cdcb7ddf8e1c01e340c67e33552b825
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Preferences

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                  • Size 14KB
                                                                  • SHA256 fc95f4bef65d0f96290d6e36fb9bcdeeef8ee3cb1b8e27a31da0d35c56bface8
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Preferences

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                  • Size 29KB
                                                                  • SHA256 ca6007a512e5d33da4736c8417aef4088797058540badd9b3b695c511f65bed9
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Preferences

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                  • Size 15KB
                                                                  • SHA256 b344d6289c26be263693b1ad3fe407a7bc80382fa586123c4aa918ac61011eee
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Preferences

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                  • Size 14KB
                                                                  • SHA256 76267c5b2ff08b79b80a7f8092892efa507f8432f758a992d3a856097647e4d9
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Preferences

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                  • Size 29KB
                                                                  • SHA256 2f14fb3b029fbca65cc1844ec68255165cfcfbd5f46923e9a164910364f3cffe
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Secure Preferences

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                  • Size 27KB
                                                                  • SHA256 56f9eecf37ac7074ed9116afef0056c1a23ce4e7085ef3ca00d544b6e8f88d78
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  the-real-index

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8f9fd82d-b210-4109-b489-f797ed71bcad\index-dir\the-real-index
                                                                  • Size 672B
                                                                  • SHA256 9ffdee3320589d3ef8c664868adc29068c5216075e3629ebf284cfc2620f90c2
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  the-real-index~RFe5d50f1.TMP

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8f9fd82d-b210-4109-b489-f797ed71bcad\index-dir\the-real-index~RFe5d50f1.TMP
                                                                  • Size 672B
                                                                  • SHA256 1080e4182fc9d96dc686bdcbba461127ea7f542c85422703425209e60dbd3d6b
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  index.txt

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                  • Size 371B
                                                                  • SHA256 2caa4fdfa33a2f62ea47c3d1a0ce84024dbfedf7da81ae09603607649959c272
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  CURRENT

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                  • Size 16B
                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                  • MD5 SHA1 SHA512

                                                                  MANIFEST-000001

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                  • Size 41B
                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                  • MD5 SHA1 SHA512

                                                                  OperationConfig

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                  • Size 3KB
                                                                  • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  OperationConfig

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                  • Size 22KB
                                                                  • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Local State

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                  • Size 42KB
                                                                  • SHA256 7e4bc1d8b91a7891b1aa3d5dee80387475fd0e768b13dc270c7f80f4f12820f6
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Local State

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                  • Size 38KB
                                                                  • SHA256 33378eb26395ec7dda4b9cad9b81ec745fe7e20c7cdde19a334dcdffac425322
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Local State

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                  • Size 35KB
                                                                  • SHA256 a245bcb781411548aa1d91433e544c3ce1f448736e5c43f24d160a012476b22f
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Local State

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                  • Size 43KB
                                                                  • SHA256 d53e86fec0d698cc5afcd09f21bf1a2f65bbaa08d3a0428a8d58071a9c3bbbad
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Local State

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                  • Size 35KB
                                                                  • SHA256 98733eec241c56760956cccf37c4b7e0ef1fdd998f3c33c4b23f365c3486aeed
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Local State

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                  • Size 38KB
                                                                  • SHA256 c07a8522cb08a5d167ebbdf74cbd09725410090bbe9ed5aa122ee02aae10d5b3
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Local State

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                  • Size 35KB
                                                                  • SHA256 50e873313012e96eded8965b3585bedaadbf5d78cf4101369a0ac23213044040
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  314eef03-73bb-47c4-a86b-7baf72fb9c62.tmp

                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\314eef03-73bb-47c4-a86b-7baf72fb9c62.tmp
                                                                  • Size 13B
                                                                  • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                  • MD5 SHA1 SHA512

                                                                  BASSMOD.dll

                                                                  • Path C:\Users\Admin\AppData\Local\Temp\BASSMOD.dll
                                                                  • Size 33KB
                                                                  • SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  R2RRPRKG2.dll

                                                                  • Path C:\Users\Admin\AppData\Local\Temp\R2RRPRKG2.dll
                                                                  • Size 85KB
                                                                  • SHA256 d109a8ba3f5f76f2860f8649895a52c556f5ba57faff2ce96a8216f09b47360a
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  bgm.xm

                                                                  • Path C:\Users\Admin\AppData\Local\Temp\bgm.xm
                                                                  • Size 31KB
                                                                  • SHA256 c6d3769490a754c5d878e1dc5fc059ce04570c595b573f254c0903db11decdee
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  keygen.exe

                                                                  • Path C:\Users\Admin\AppData\Local\Temp\keygen.exe
                                                                  • Size 442KB
                                                                  • SHA256 daf3e140087659ad4ae82493c95ca40f88aae3b26368a529d6384af5c9ce8a58
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  System.dll

                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsxC76F.tmp\System.dll
                                                                  • Size 10KB
                                                                  • SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  UAC.dll

                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsxC76F.tmp\UAC.dll
                                                                  • Size 14KB
                                                                  • SHA256 32dd7269abf5a0e5db888e307d9df313e87cef4f1b597965a9d8e00934658822
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  portable.dll

                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsxC76F.tmp\portable.dll
                                                                  • Size 24KB
                                                                  • SHA256 25e5a428e663c6b6c352e7eb313d9fd265e944e0f8f88c7406c3fc15d1ad82b6
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  reaAD16.tmp

                                                                  • Path C:\Users\Admin\AppData\Local\Temp\reaAD16.tmp
                                                                  • Size 11KB
                                                                  • SHA256 afe27e2fc7cc038eb12f842fce9c7eeabce6ef531ffd1518b7829c6c60194cc7
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  Marshall JCM800 - Matchless Chieftain.wav

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\amp_models\Marshall JCM800 - Matchless Chieftain.wav
                                                                  • Size 4KB
                                                                  • SHA256 273250faa8df43799e9ba549544b8c4005bea371e4d6df537f1f9d97076a8636
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_audio_waveform_secondary_external_editor.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_audio_waveform_secondary_external_editor.png
                                                                  • Size 23KB
                                                                  • SHA256 baa31c701edb9e36dd0dac24f98c865a91362472e8008950681f4c327ce4fb63
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_delete.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_delete.png
                                                                  • Size 17KB
                                                                  • SHA256 4d8aa7089a19ce4e956c4c2a95e52abbefab0c660b319559cd925d755a0b8834
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_disk_properties_resource_path.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_disk_properties_resource_path.png
                                                                  • Size 23KB
                                                                  • SHA256 22e5a5fb48a777b8724f06ffe2ec99ae2826aad8b19fd55d37d73cca571540a6
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_envelope_fade_shape_none_default_delete_remove.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_envelope_fade_shape_none_default_delete_remove.png
                                                                  • Size 23KB
                                                                  • SHA256 196df12cc11fce768ff24c3440eb645b8b5cbf701952d70febda954e3993beff
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_envelope_item_selected_replace.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_envelope_item_selected_replace.png
                                                                  • Size 23KB
                                                                  • SHA256 3b81fbf623fc307f53b6724bf8c5848ab30131e60d7c1f2a414c6c855fb0f753
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_envelope_point_time_selection_cut_scissors.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_envelope_point_time_selection_cut_scissors.png
                                                                  • Size 23KB
                                                                  • SHA256 b4642df54058b1b0b12305db34fa3bc5660a479297ff1910fdb6e026ce7e0715
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_grid_adjust_increase.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_grid_adjust_increase.png
                                                                  • Size 23KB
                                                                  • SHA256 f485be3ec6cc22b885290a5cef96f91d7dd6fe989266b20c33cd6c38543c7cba
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_half_minim_grid.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_half_minim_grid.png
                                                                  • Size 23KB
                                                                  • SHA256 a0aa464a73268d1ab433a6bdd720bbdccfaa810a5de006ade92eeab70a81a13a
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_hide_tcp.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_hide_tcp.png
                                                                  • Size 23KB
                                                                  • SHA256 56af3f47bd5e081c897a974a40f5586a64cfe4ed91e6f93e60bad3ca0305857d
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_item_green_arrow_selected.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_item_green_arrow_selected.png
                                                                  • Size 23KB
                                                                  • SHA256 bc5d130f6bea11286e7326cf702c4189264846af5232234544a2bac55e2dd0e2
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_item_red_arrow_selected.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_item_red_arrow_selected.png
                                                                  • Size 23KB
                                                                  • SHA256 e6e23cc0a607e0191a91bf95296dc4d4a26bcee2a5dbcfa4514c7a8c92841195
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_midi_hide_unused_unnamed_note_rows.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_midi_hide_unused_unnamed_note_rows.png
                                                                  • Size 23KB
                                                                  • SHA256 5d60571e6b496d396d3e433ee8bfb39905de6b489a02eed9082ddedd12dc9993
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_midi_zoom.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_midi_zoom.png
                                                                  • Size 23KB
                                                                  • SHA256 93e23ba9d251d2ec94ac32121cb29f2305ebb2e2ba06409a764230d3c0015cd5
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_misc_mouse_right_click.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_misc_mouse_right_click.png
                                                                  • Size 23KB
                                                                  • SHA256 f62d4ca51af323c299a399fce72fef89f44245dbdb069cdcf3e28d726d3355ac
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_preroll_clock.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_preroll_clock.png
                                                                  • Size 23KB
                                                                  • SHA256 276683a2eb19665bd0bb4ceb5d736de32332326e302060857680dee830b87101
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_selection_inverse_delete_remove.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_selection_inverse_delete_remove.png
                                                                  • Size 23KB
                                                                  • SHA256 005bc4e242ae0961e00658dd2b3acd679bcff42822681515cc829bd26abb5f8f
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_solo_none_unsolo.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_solo_none_unsolo.png
                                                                  • Size 23KB
                                                                  • SHA256 e5f3a02190e1b191677d95990a36d868cc066efdf120ccd0b28b7669d605ab5a
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_stretch_marker_delete_remove.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_stretch_marker_delete_remove.png
                                                                  • Size 23KB
                                                                  • SHA256 800bf51289eac02ab255c1e1a4078b38d898d16b5c3f1b405357afd181a9fa0b
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_theme_previous.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_theme_previous.png
                                                                  • Size 23KB
                                                                  • SHA256 4582d65abd8521b3147bf6466aca47d59965ddb8dbae7a5e4d111690ea3d6b05
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_time_hours.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_time_hours.png
                                                                  • Size 23KB
                                                                  • SHA256 df5bd19fa8e6fbb29b4719fe8e38e420070084c4b7e3d9a804a85b5261371075
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_visible_tcp.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_visible_tcp.png
                                                                  • Size 23KB
                                                                  • SHA256 e638292a235d9bcf7de8ddf9faa66ab7d531f970a28509de04f8d1c86c1dea65
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_window_tab_next_background.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_window_tab_next_background.png
                                                                  • Size 23KB
                                                                  • SHA256 80bfbf211bfa8f0531f211bc8916d49eb2b1fde43addbe62e56c0e1a6f7a5eb6
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_zoom_out_audio_waveform.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_zoom_out_audio_waveform.png
                                                                  • Size 23KB
                                                                  • SHA256 267fd82948ac4e393c11a9b57fd42c3460e99fe588976d5b66e3051bf1704d14
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_zoom_selected.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\150\toolbar_zoom_selected.png
                                                                  • Size 23KB
                                                                  • SHA256 3616afdf0dc63b9a2059b7e23199fb46be48a4646e7b8792ad7a364e8f270b4e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_delete.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\200\toolbar_delete.png
                                                                  • Size 42KB
                                                                  • SHA256 ef6d1541d176e8b00a31ea9574c8b9761a6752acfb67029b193043b0616d730e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_env_auto_touch.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\200\toolbar_env_auto_touch.png
                                                                  • Size 42KB
                                                                  • SHA256 925692f38b560465006faae433d60d678b3693e36170d4cd761377e5b91b61fa
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_ex_properties_for_current_media_on.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\200\toolbar_ex_properties_for_current_media_on.png
                                                                  • Size 42KB
                                                                  • SHA256 29e0e0232451367298ba62ce6e1cbe1bcd06bca619baf6020be08b03515b065b
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_audio_waveform_secondary_external_editor.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_audio_waveform_secondary_external_editor.png
                                                                  • Size 10KB
                                                                  • SHA256 10795196ef656a5405253092ee2491b9adc68fff35aae352d8184dab69e94024
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_color_midi_channel.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_color_midi_channel.png
                                                                  • Size 10KB
                                                                  • SHA256 27ff4f65bb000e6e5365ed94c49fcdbe226267199e67b2b884aed3afad3d69b5
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_color_track.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_color_track.png
                                                                  • Size 10KB
                                                                  • SHA256 1bac35ef12bd1a699c48159604dfbe607f2120926dc31904ee21358ac3f9d5a1
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_disk_properties_resource_path.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_disk_properties_resource_path.png
                                                                  • Size 10KB
                                                                  • SHA256 580a9bd75269d3d4f64547d334d48940970acf104758296b3a171e8f5ba19aac
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_envelope_fade_shape_none_default_delete_remove.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_envelope_fade_shape_none_default_delete_remove.png
                                                                  • Size 10KB
                                                                  • SHA256 d0042812225df5a5c8d068d0febcdda86c24598f0b0512567b35f1aad5bbf9d6
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_envelope_item_selected_replace.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_envelope_item_selected_replace.png
                                                                  • Size 10KB
                                                                  • SHA256 69c565d1953245c4549e35d0cf3ec0a52fd1b9e774b1ab73c707d1efcda959d0
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_grid_adjust_increase.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_grid_adjust_increase.png
                                                                  • Size 10KB
                                                                  • SHA256 1d5e8f29117b491ea77abd27b5e840783c85b1d1461034c84ec430cdf14320bc
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_hide_mixer.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_hide_mixer.png
                                                                  • Size 10KB
                                                                  • SHA256 51f6d3ef86c0388c8b1b7fbaf11ec966352ed63f8e30eb01ae65db3b81a423c8
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_marker_renum.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_marker_renum.png
                                                                  • Size 10KB
                                                                  • SHA256 590fd65cd2ed306ae229224a25e543e3d0c6a166b3b70bd42c76abaa160f5b30
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_marquee_cursor_selection_off.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_marquee_cursor_selection_off.png
                                                                  • Size 10KB
                                                                  • SHA256 3f113572e79d943a447cc5a2c01a2793eb43122a0ff5f1e5c437a7771a111380
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_midi_hide_unused_unnamed_note_rows.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_midi_hide_unused_unnamed_note_rows.png
                                                                  • Size 10KB
                                                                  • SHA256 99288a17c0a47bfb44db1105dc762fa1cc4d17235db0ba9834e9ecb753caebe3
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_midi_pitch_transpose.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_midi_pitch_transpose.png
                                                                  • Size 10KB
                                                                  • SHA256 375d6f9f1e86c774a75788cf1f3452e8c2fb03ca4c8142046c5caa1a314bc6a7
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_misc_mouse_right_click.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_misc_mouse_right_click.png
                                                                  • Size 10KB
                                                                  • SHA256 29e2d3d38ae65e43e91b30856e4df99168ed8700bc42dfac0d3b0f7d48fd3279
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_quarter_crotchet_note.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_quarter_crotchet_note.png
                                                                  • Size 10KB
                                                                  • SHA256 1cdfee358a859d9095d6e052be3e91b46556c261e95eece61d749f7cdfa3af4e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_record_stop_save.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_record_stop_save.png
                                                                  • Size 10KB
                                                                  • SHA256 c22865540602d68df333788e722e0600c6fe0d561a303aef6489451d5becfdbc
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_stretch_marker_delete_remove.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_stretch_marker_delete_remove.png
                                                                  • Size 10KB
                                                                  • SHA256 385426e0a0551b8916e53fd8080e42147b80c5b37b7e47fa6ea825264ec68a43
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_theme_previous.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_theme_previous.png
                                                                  • Size 10KB
                                                                  • SHA256 339840956a38072cab4e395e9d8f71779729ff1bf7a654594241cfacfba21ddf
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_time_minutes.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_time_minutes.png
                                                                  • Size 10KB
                                                                  • SHA256 ecb21254845ac8bade4d57e15209097820a912e9691db059c541abb1bafdf423
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_time_selection_item_selected_grow_expand.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_time_selection_item_selected_grow_expand.png
                                                                  • Size 10KB
                                                                  • SHA256 b8399d2fba66194281fa6e50f19346fb51f8e5b06676942c09589db6db624de2
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_v3_ripple_one.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_v3_ripple_one.png
                                                                  • Size 10KB
                                                                  • SHA256 cbd8d4834004ab40091620fb17d68aa0b07a3d0236c48ce17c36d134bdd5e0dd
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_v3_snap_on.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_v3_snap_on.png
                                                                  • Size 10KB
                                                                  • SHA256 473186d3b0c40a38dfbc9b35a99c9f6f57226061585f865c413c30a30cecd98b
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_visible_tcp.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_visible_tcp.png
                                                                  • Size 10KB
                                                                  • SHA256 c69bc9773401907b507e062740d0f7d9670fd5a22716948d0ee0e56596fe6888
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  toolbar_window_tab_docker_bottom.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\toolbar_icons\toolbar_window_tab_docker_bottom.png
                                                                  • Size 10KB
                                                                  • SHA256 5846459669922085a59dbebbaf468f50eda23e4c54026d5f2d744d46ec573a4a
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  folder.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\track_icons\folder.png
                                                                  • Size 16KB
                                                                  • SHA256 a31fe9e90585c4c84e38b9a6e43169836d1d70f246ebcbfaec56005006046317
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  folder_down.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Data\track_icons\folder_down.png
                                                                  • Size 16KB
                                                                  • SHA256 5be16dbae8b82ad49946dbd480c21038cb7106279468cf857e69f169db963210
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  REAPER.ini

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\REAPER.ini
                                                                  • Size 10B
                                                                  • SHA256 2ba0a5ccf4357483d7a3c72d633ee2c59bf02050672f73de83526de59272dd99
                                                                  • MD5 SHA1 SHA512

                                                                  REAPER.ini

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\REAPER.ini
                                                                  • Size 33B
                                                                  • SHA256 9d7a90f16e19268d74b7617012cd7343b641c561c45b8d936ff58862479deb79
                                                                  • MD5 SHA1 SHA512

                                                                  REAPER.ini

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\REAPER.ini
                                                                  • Size 47B
                                                                  • SHA256 c4b8924de97a8e7f234d9dce0ecbeb566b7ff0469323df39b12e529f63019b21
                                                                  • MD5 SHA1 SHA512

                                                                  REAPER.ini

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\REAPER.ini
                                                                  • Size 75B
                                                                  • SHA256 5018baa0a5cfb0ecc665fa6667f070fe27ff3851099479f072ea391589e6fb69
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  REAPER.ini

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\REAPER.ini
                                                                  • Size 138B
                                                                  • SHA256 6f73fc2b0426cd4fe180cd6150fd193d79276c3da5ff4ae4506ce6c219c4270b
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  apply_75.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\apply_75.png
                                                                  • Size 16KB
                                                                  • SHA256 3c816574df47d312d45e90d3648930fcdf5b1e54f1b792c7b3bb1b09841c9f3d
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 34KB
                                                                  • SHA256 4078c27dc4a84de8447d5385873773db37423ce29d579ad1dffccbde14f35a09
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 34KB
                                                                  • SHA256 30345a18512129a56fca6bd58ee779d6c7ddc242c1a841c93ad89dc551f889e6
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  cell_hide_on.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\cell_hide_on.png
                                                                  • Size 23KB
                                                                  • SHA256 aff3527cb1c27d2e7fa275ffa9fc73a345b9c22cc0f79cb4a700c59ab3b19b2f
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 42KB
                                                                  • SHA256 20f679c2dfe98d7ec3b3044c8869a04c469a39c82f930fd27aa31a2114339476
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 42KB
                                                                  • SHA256 284a87e570f3cb8ef7070cd1f6f1377ffd250ba8de5ae31a818dae09fee5ef72
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 487B
                                                                  • SHA256 e9b98ce5dd56d37802c20fa57a55841cea3c1b4fe5ec8bc14b97c937a5170e7a
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 487B
                                                                  • SHA256 ea81195f5194f38af9ce923a939769b8606f193fac5d463ffb34ea561fba085e
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 487B
                                                                  • SHA256 13ffcbc1c7aef35dd1fbfa4573f0bd0c3ac8bcf9487ff0d152efb6bbe5ca0713
                                                                  • MD5 SHA1 SHA512 TLSH
                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 63KB
                                                                  • SHA256 46c76d5d59660d09f66233811f4b056f6376d65df813226e6c90c96c0bb68b42
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 60KB
                                                                  • SHA256 003cbe0d8d58153c70bb1e050fabb03c99d7d01e9d67a96e23a657bf5fc185ca
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 63KB
                                                                  • SHA256 5fdac2828515126d684ec705c27706ae43e5fd1a8d3f249df979deb306c5b452
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  layout_docked_A.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\layout_docked_A.png
                                                                  • Size 72KB
                                                                  • SHA256 e39ed5382395b3f051edf06aefa087c0a58f19e7e0b17fdf4ec7cd9aa8d371b5
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 216KB
                                                                  • SHA256 45d546336186fdc40894950cc0cabdeef3c94af87c2d962e6f1b4128e8ac5db1
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 288KB
                                                                  • SHA256 4b803503719afcb3292f3a0b6ce94622de5f9dd277da9261a6bfca70de5471ac
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  layout_docked_B_on.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\layout_docked_B_on.png
                                                                  • Size 54KB
                                                                  • SHA256 8743452fcd73da5652d537a2a68ffce61cc2bfede1c3d5099b9c4a6584502071
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
                                                                  • Size 42KB
                                                                  • SHA256 a936fb6139a549badd54155105ff2b37541f4501ecf650968dc3994734ae7dfe
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  button_leftArrow_off_200.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_7.0_theme_adjuster_images\button_leftArrow_off_200.png
                                                                  • Size 38KB
                                                                  • SHA256 1a5ab4dd286b43db72d28e258bcbfce00b89ae60052bf87aa7a7006820ed33a2
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  button_off_200.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_7.0_theme_adjuster_images\button_off_200.png
                                                                  • Size 27KB
                                                                  • SHA256 eabc2ea9bafa67d08d155bc9a4df635b9df5250465cf027222622e54c4c1f3e3
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  button_on_150.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_7.0_theme_adjuster_images\button_on_150.png
                                                                  • Size 15KB
                                                                  • SHA256 a279ef45f5c961dd3c4aaf1c01ff34ce28339eafb0aa76bb0052f244b4d7921c
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  button_upArrow_on.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_7.0_theme_adjuster_images\button_upArrow_on.png
                                                                  • Size 9KB
                                                                  • SHA256 440607d18a2c78c8f793f383b6294cfed0ce3831c637aa5d565ff725b060f352
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  button_upArrow_on_200.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_7.0_theme_adjuster_images\button_upArrow_on_200.png
                                                                  • Size 38KB
                                                                  • SHA256 5e2596c7eb969210363243a38b249c0fd1181b95650de0e736fda4c27befacdc
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  page_trans_200.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_7.0_theme_adjuster_images\page_trans_200.png
                                                                  • Size 16KB
                                                                  • SHA256 6f905fb73154bbf1c0b2f0b88c792a5c331718e0a58f46fc097b1e9e38774042
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  tcp_vol_knob_stack_200.png

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\Scripts\Cockos\Default_7.0_theme_adjuster_images\tcp_vol_knob_stack_200.png
                                                                  • Size 157KB
                                                                  • SHA256 356c91d69252d5a9238f2b1c565145a820b7225d1a1e2377ab4d3c813352bf0e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  reaper-mouse.ini

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\reaper-mouse.ini
                                                                  • Size 544B
                                                                  • SHA256 486c6d9144d2f9ac2bc5948a24b89394d28fc826cc63f9d2406926723f162249
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  reaper-vstplugins64.ini

                                                                  • Path C:\Users\Admin\AppData\Roaming\REAPER\reaper-vstplugins64.ini
                                                                  • Size 488B
                                                                  • SHA256 09fd1304de6ad8fca89584bd36902892182261a4db2455c11837b2ed8f3ec37b
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  Cockos_REAPER.zip

                                                                  • Path C:\Users\Admin\Downloads\Cockos_REAPER.zip
                                                                  • Size 33.9MB
                                                                  • SHA256 759d502fd4751d81cf303fe734e9a7e768fdd53ff28f5402a41dfb27b41e83f4
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  reaper773_x64-install.exe

                                                                  • Path C:\Users\Admin\Downloads\Cockos_REAPER\reaper773_x64-install.exe
                                                                  • Size 16.2MB
                                                                  • SHA256 1a96f1aaf2c8fec04f92753078582ff577ad666f267965303daa12511db8752b
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  memory/3904-8648-0x000000000ADB0000-0x000000000ADF1000-memory.dmp

                                                                  memory/3904-8679-0x000000000B990000-0x000000000BC0C000-memory.dmp

                                                                  memory/3904-9021-0x00007FFA27480000-0x00007FFA28CEF000-memory.dmp

                                                                  memory/3904-9022-0x00007FFA2EBF0000-0x00007FFA2EC24000-memory.dmp

                                                                  memory/3904-9023-0x00007FFA353E0000-0x00007FFA353FC000-memory.dmp

                                                                  memory/3904-8287-0x0000000009E50000-0x0000000009FBD000-memory.dmp

                                                                  memory/3904-8290-0x0000000009BF0000-0x0000000009C2F000-memory.dmp

                                                                  memory/3904-8292-0x0000000009CE0000-0x0000000009DF2000-memory.dmp

                                                                  memory/3904-8294-0x0000000009FC0000-0x000000000A0DA000-memory.dmp

                                                                  memory/3904-9024-0x00007FFA31180000-0x00007FFA31191000-memory.dmp

                                                                  memory/3904-8644-0x000000000A1C0000-0x000000000A207000-memory.dmp

                                                                  memory/3904-8646-0x000000000A260000-0x000000000A339000-memory.dmp

                                                                  memory/3904-9025-0x00007FFA30E80000-0x00007FFA30E91000-memory.dmp

                                                                  memory/3904-8650-0x000000000AF50000-0x000000000B077000-memory.dmp

                                                                  memory/3904-8653-0x000000000B110000-0x000000000B1BC000-memory.dmp

                                                                  memory/3904-8655-0x000000000B2E0000-0x000000000B57B000-memory.dmp

                                                                  memory/3904-8669-0x000000000B1C0000-0x000000000B2A7000-memory.dmp

                                                                  memory/3904-8672-0x000000000B580000-0x000000000B6B7000-memory.dmp

                                                                  memory/3904-8674-0x000000000B740000-0x000000000B82E000-memory.dmp

                                                                  memory/3904-9026-0x00007FFA2EA50000-0x00007FFA2EA63000-memory.dmp

                                                                  memory/3904-8676-0x000000000B880000-0x000000000B8BF000-memory.dmp

                                                                  memory/3904-8689-0x000000000BEA0000-0x000000000BF31000-memory.dmp

                                                                  memory/3904-8691-0x000000000BF40000-0x000000000BFE0000-memory.dmp

                                                                  memory/3904-9027-0x00007FFA2D4D0000-0x00007FFA2D4E6000-memory.dmp

                                                                  memory/3904-2920-0x0000000140000000-0x000000014125C000-memory.dmp

                                                                  memory/3904-9019-0x000000006CA00000-0x000000006CEBC000-memory.dmp

                                                                  memory/3904-9020-0x00007FFA28CF0000-0x00007FFA28FA6000-memory.dmp

                                                                  memory/3904-9033-0x00007FFA2C0D0000-0x00007FFA2C0E2000-memory.dmp

                                                                  memory/3904-9032-0x00007FFA2C0F0000-0x00007FFA2C101000-memory.dmp

                                                                  memory/3904-9031-0x00007FFA2C110000-0x00007FFA2C128000-memory.dmp

                                                                  memory/3904-9030-0x00007FFA2CF70000-0x00007FFA2CF83000-memory.dmp

                                                                  memory/3904-9029-0x00007FFA2C130000-0x00007FFA2C164000-memory.dmp

                                                                  memory/3904-9028-0x00007FFA2D4B0000-0x00007FFA2D4C1000-memory.dmp

                                                                  memory/5324-2831-0x0000000000CA0000-0x0000000000CB0000-memory.dmp

                                                                  memory/5756-2810-0x0000000000400000-0x0000000000441000-memory.dmp

                                                                  memory/5756-2829-0x0000000010000000-0x0000000010013000-memory.dmp

                                                                  memory/5756-2828-0x0000000010000000-0x0000000010013000-memory.dmp

                                                                  memory/5756-2827-0x0000000010000000-0x0000000010013000-memory.dmp

                                                                  memory/5756-2826-0x0000000010000000-0x0000000010013000-memory.dmp

                                                                  memory/5756-2815-0x0000000010000000-0x0000000010013000-memory.dmp