Overview

overview

8

Static

static

3

freetube-0...64.exe

windows10-2004-x64

7

freetube-0...64.exe

windows11-ltsc_2024-x64

8

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-ltsc_2024-x64

8

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

FreeTube.exe

windows10-2004-x64

7

LICENSES.c...m.html

windows10-2004-x64

3

LICENSES.c...m.html

windows11-ltsc_2024-x64

4

d3dcompiler_47.dll

windows10-2004-x64

1

dxcompiler.dll

windows10-2004-x64

1

dxil.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/app.js

windows10-2004-x64

3

resources/app.js

windows11-ltsc_2024-x64

3

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-ltsc_2024-x64

3

vk_swiftshader.dll

windows10-2004-x64

1

vulkan-1.dll

windows10-2004-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows11-ltsc_2024-x64

8

$R0/Uninst...be.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    128s
  • max time network
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    06/07/2026, 03:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    freetube-0.24.1-beta-setup-x64.exe
  • Size 96.9MB
  • Sample260706-eellbshv5y
  • SHA256 272f987e934fc1442bb9d04cce2e6602ccb78b1c3d47703e3b982f9ae46b42b4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoveryexecutionpersistenceransomwarespywarestealer

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 20 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Using powershell.exe command.

    execution
  • Drops file in Windows directory 1 IoCs
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

    defense_evasion
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 45 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\freetube-0.24.1-beta-setup-x64.exe
    "C:\Users\Admin\AppData\Local\Temp\freetube-0.24.1-beta-setup-x64.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:5004
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      2⤵
      • Hide Artifacts: Ignore Process Interrupts
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:1976
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:4820
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\FreeTube', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3544
  • C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe
    "C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe"
    1⤵
    • Executes dropped EXE
    • Drops file in Windows directory
    • Modifies registry class
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4296
    • C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe
      "C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\FreeTube" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1984,i,12971372800467119311,2698686257500823439,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1988,i,2609915603833378452,6213990751655410044,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1980 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2352
    • C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe
      "C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\FreeTube" --standard-schemes=app --secure-schemes=app --fetch-schemes=app --field-trial-handle=1984,i,12971372800467119311,2698686257500823439,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1988,i,2609915603833378452,6213990751655410044,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2384 /prefetch:11
      2⤵
      • Executes dropped EXE
      PID:5720
    • C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe
      "C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\FreeTube" --standard-schemes=app --secure-schemes=app --fetch-schemes=app --app-user-model-id=electron.app.FreeTube --app-path="C:\Users\Admin\AppData\Local\Programs\FreeTube\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1783309608608767 --launch-time-ticks=591234276 --field-trial-handle=1984,i,12971372800467119311,2698686257500823439,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1988,i,2609915603833378452,6213990751655410044,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3252 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:236
    • C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe
      "C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\FreeTube" --standard-schemes=app --secure-schemes=app --fetch-schemes=app --app-user-model-id=electron.app.FreeTube --app-path="C:\Users\Admin\AppData\Local\Programs\FreeTube\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1783309608608767 --launch-time-ticks=592448586 --field-trial-handle=1984,i,12971372800467119311,2698686257500823439,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1988,i,2609915603833378452,6213990751655410044,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3656 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5076
  • C:\Windows\system32\sihost.exe
    sihost.exe
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:1268
    • C:\Windows\explorer.exe
      explorer.exe /LOADSAVEDWINDOWS
      2⤵
      • Boot or Logon Autostart Execution: Active Setup
      • Checks SCSI registry key(s)
      • Modifies Internet Explorer settings
      • Modifies registry class
      PID:2648
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:6052
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:5352

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        StartupProfileData-NonInteractive
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 17KB
        • SHA256 121af5619e754bc871c3edbc6be7130426602d9ba0eedeac216d43842f94c1d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StartupProfileData-NonInteractive
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 16KB
        • SHA256 efd641040c87331d77a809dee67c52b274da2fe1bddbf57631c13d53179844a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        prep_Activatable Class_Hermes_perf.cache
        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
        • Size 599B
        • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        __PSScriptPolicyTest_vfzvcz0y.mio.ps1
        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_vfzvcz0y.mio.ps1
        • Size 60B
        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSE.electron.txt
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSES.chromium.html
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\LICENSES.chromium.html
        • Size 18.6MB
        • SHA256 c1bc6cfdd6c5844720e5e6332698a6131f5402e77abf1fdb9646740d38065a65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_100_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\chrome_100_percent.pak
        • Size 113KB
        • SHA256 34433fa04ddf5eb78b3b4e9c64a3af626e28641907ad7a6086614eb6a8f00a07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_200_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\chrome_200_percent.pak
        • Size 183KB
        • SHA256 581c8d53199c10512d31a340699f9ad269f8eea5fe6bc49e05c1bde98ee612aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcompiler_47.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.5MB
        • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxcompiler.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\dxcompiler.dll
        • Size 24.5MB
        • SHA256 e2d701e4d24fe6d2ceeb26c19a136a10fcd9c777ceffc87f13526a4f3f2eb578
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxil.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\dxil.dll
        • Size 1.4MB
        • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffmpeg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\ffmpeg.dll
        • Size 3.0MB
        • SHA256 2256d0112a047ec96e67b9f41fc8e7a692136f0db6a756ccfe4b525826c5f240
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\icudtl.dat
        • Size 10.3MB
        • SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\libEGL.dll
        • Size 508KB
        • SHA256 4e9de12f01d96edbb627bb1f32e9b1dffb4aba5ee08cd77127a61ca56b58b1e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\libGLESv2.dll
        • Size 7.6MB
        • SHA256 ed2fa8efa72f780df205fb19dd12a39837209a8784a44adf01134052a018a499
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        af.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\af.pak
        • Size 595KB
        • SHA256 35bf116b83d8451d46110963166b641ebee86fc74feb5c51a9a7547ea7867f4c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        am.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\am.pak
        • Size 966KB
        • SHA256 b32b7633f420a7bf71b062425679530076cc08c747269314c0cad9da1b9a1ee8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ar.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\ar.pak
        • Size 1.0MB
        • SHA256 a499c458b6d8986d97586a1185a26866ad28501f646e7e4931546853546671e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bg.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\bg.pak
        • Size 1.1MB
        • SHA256 67e1384c134be11ec09201444c90792f4081f5694d8eb685cf0fb0e0ea78192c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\bn.pak
        • Size 1.4MB
        • SHA256 e847f2446f66c8ff5b66cbcfba8a8bbc4f581be519a5b83325910cca8ffead86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ca.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\ca.pak
        • Size 670KB
        • SHA256 73de3ffbe20a96aaa8859485d4bfd791d7fa18c10bc8ce2e6ad004da7b5697b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cs.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\cs.pak
        • Size 696KB
        • SHA256 ec24ea525752f6c7ad0a7b81488e04af018b6d5d3471778c39956700ef849e22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        da.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\da.pak
        • Size 626KB
        • SHA256 86f333280cc92a3fc12562d42bd076b3c4acaaa6513669aecb6e77ab69b6440e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        de.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\de.pak
        • Size 671KB
        • SHA256 21ad66dd9c44932d33235dd5616567258949821690a19abd06db9811124f891c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        el.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\el.pak
        • Size 1.2MB
        • SHA256 9de58f1e607a002407621688811da85fbfaa117a33bbd6b183c89ca48073e355
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-GB.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\en-GB.pak
        • Size 542KB
        • SHA256 62e8c435f37897499248e280ecf114b4185a0d2ef24f8e706e2c7ace8e4e2324
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-US.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\en-US.pak
        • Size 548KB
        • SHA256 658b0bb2581d4e195dcbae102a133f4755d8903b9ef266d3d54652a79af018ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es-419.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\es-419.pak
        • Size 661KB
        • SHA256 af7888ba7108b72ef6e22b7b729fea8ac9d71657047e7237cec499663e62436d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\es.pak
        • Size 658KB
        • SHA256 113f8776bf3d68e5a83c8ef2fe323fbf9246f6bbc12e166d91d913b7dbe1c961
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        et.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\et.pak
        • Size 601KB
        • SHA256 5fa2452eed76359c20506c1ddfc4708d466070069422e887637916c637d7d059
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fa.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\fa.pak
        • Size 995KB
        • SHA256 b809d2de1ef0f4b26ef34e878c9fcec7f0e603a910d65c877907e16e38884163
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\fi.pak
        • Size 612KB
        • SHA256 7d0d39f97228c1ddf7228e44a509d116eb0556cd079f08aa95ac2449305e319a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fil.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\fil.pak
        • Size 694KB
        • SHA256 8954dabde6d7e7872cdb8e647deeff53d217148d201d3c1c78c517185db5f8ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\fr.pak
        • Size 716KB
        • SHA256 87776d3fa22f3fdb6f951cd6f62f11454bd311ca0e415faff22e09957b3b306d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\gu.pak
        • Size 1.4MB
        • SHA256 f59dadc38ed3b6673279dc3e309d62f3083b9e89f4c6d03c3757812029ab7c0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        he.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\he.pak
        • Size 871KB
        • SHA256 6e7506fc5816532f768287ab591983f20754310f2c091a35e780d34296da71f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\hi.pak
        • Size 1.5MB
        • SHA256 7e5875389c730cd8c59db02bef63fe8e595182a315e4c21fdf18bf63cbd7a5b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\hr.pak
        • Size 670KB
        • SHA256 7720dd0928c07b8f1b095573184131a52eabaa453472158a127b778340cf044a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\hu.pak
        • Size 717KB
        • SHA256 c2b5368e94d000707ab20a971045b1750e441cc901c046f5dc6fa0430b67a298
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        id.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\id.pak
        • Size 592KB
        • SHA256 705d9d1f315d0573acc77569396b9dc21fca6a11885282e1df013feee1bac6cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        it.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\it.pak
        • Size 648KB
        • SHA256 9da499f66f38f4e490ac15017c68cf15c2e447d81ab4006482285cd42201e3cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ja.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\ja.pak
        • Size 791KB
        • SHA256 c366b5cec74555d41e8e0a1455cd95ea5d9f98637bcb8c3c66bc51ef9983c591
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\kn.pak
        • Size 1.6MB
        • SHA256 9f30fcee918e8087d6bc994c69afa88e30a1d80fc8c692e72bc9e43c544552c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ko.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\ko.pak
        • Size 671KB
        • SHA256 da4fa0e2ae54040ea796523636055da4326d0fba549fe9ab77eff7b38e7c0f25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lt.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\lt.pak
        • Size 729KB
        • SHA256 f383cfbde7ddaa676d500c5c0e4b41f586e6523cfedd6e5074cba157d1b20ff3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\lv.pak
        • Size 726KB
        • SHA256 c2b0b4155868bdd9629ce945edba598b609580a3febc0d1320b4ca5cfd3a959f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ml.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\ml.pak
        • Size 1.6MB
        • SHA256 73476d6e2475c53f0e34cbb828c6040b87ed368aa7df54d93a10652362968438
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\mr.pak
        • Size 1.3MB
        • SHA256 210b05badd582b3c1bcdffd40a5ae77ce0290fd5b8da88604242bea19ab31184
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ms.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\ms.pak
        • Size 624KB
        • SHA256 a2eaf35c46fb34960f6867b19427c871e8f7e59baea5ad3e06d99b29824cb46a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nb.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\nb.pak
        • Size 598KB
        • SHA256 06833d00a792c640fe4cce924bcd855b04e544cb8c8c6804dede3a106cbf9f25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\nl.pak
        • Size 623KB
        • SHA256 cad7960798432e33d4c3472d7cca29db688e0a6e4557ccc5634b56fa3c1184b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\pl.pak
        • Size 696KB
        • SHA256 2d07600479e32c3c233312872f54b4c33394d79357fc9182337271e961f409d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-BR.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\pt-BR.pak
        • Size 652KB
        • SHA256 cf120bb9160da9b960f930dc784c62ce10b72ab3b785df2f3a174e91a79a1785
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-PT.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\pt-PT.pak
        • Size 655KB
        • SHA256 7c72d93fb87047b4d3c450751c6f6c1b974c57fee7efe2cbace420c6f5baa11c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ro.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\ro.pak
        • Size 681KB
        • SHA256 9ede51d705907fa6234025462a564eab8c63552cfcba0ccf98d845ed98055e56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ru.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\ru.pak
        • Size 1.1MB
        • SHA256 8128251d564b01d9d96f758baaca87185f3d4be898c6a27eb27ed0b69ad5129e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\sk.pak
        • Size 708KB
        • SHA256 859ab9241e6da9efc96f38c5e2115b0539da9ac254a14b5350afc5e7b62b9f56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\sl.pak
        • Size 678KB
        • SHA256 549e486755c31a5ecf2c9708bcd3d4dbc0f2a35e003726bdfd79a0c481e53af3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\sr.pak
        • Size 1.0MB
        • SHA256 5ee068f48ebb080f901decc016235797d0f5c66b5f9d7b5ae026b6f210de3248
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\sv.pak
        • Size 605KB
        • SHA256 52f8d477c4b983614c8095e27f0513a99080409b76009d1e89f155bbc04dcff1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sw.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\sw.pak
        • Size 640KB
        • SHA256 bf090212ea30662234b2cb0edf03a9c025afabd901c2f4599a4c556257ba5c67
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ta.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\ta.pak
        • Size 1.6MB
        • SHA256 e6136824b4e1862828e5b0aac50811b9076526d739386ae8f6042c7f2b560f24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        te.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\te.pak
        • Size 1.5MB
        • SHA256 13318eb82b0302ccc3cfd130f32c1c1f0f6b7feea8f2d1173bd9a7f7aebcd1f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        th.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\th.pak
        • Size 1.3MB
        • SHA256 66d9fb5ab55db59675c38add303d3a0a665fd624051085a453990aea018759de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\tr.pak
        • Size 651KB
        • SHA256 505892d8b565ab64e538b913f9fdbcde44fe0235e7657a3f7c87cbce07c28518
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        uk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\uk.pak
        • Size 1.1MB
        • SHA256 3b9d9b55685728411810d10d5ab6176889187dbe7f7919ad95da533945d0b565
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ur.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\ur.pak
        • Size 981KB
        • SHA256 2f11ad2c0dfef993439ee40a5af8cf74070ea974b3ad3aebbc334c0288e318b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\vi.pak
        • Size 774KB
        • SHA256 b9eafab05aaeae9f9e122cdc4ba7ebff85e0f71bf7da619b3463bfa966fe751a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-CN.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\zh-CN.pak
        • Size 554KB
        • SHA256 d2807985b7f397f704d50dc8f540976cfe5f91295bd85e28192a8592913ccc12
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-TW.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\locales\zh-TW.pak
        • Size 547KB
        • SHA256 05e1d10f1131071f3ea79dabeb1c756397c3232f49e5c14cc3c091f7d231a899
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resources.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\resources.pak
        • Size 6.4MB
        • SHA256 a89bcf21e419e3d2bdff25d930d98d3b866c11c596314ba6f830b22b7ef3807a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        app-update.yml
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\resources\app-update.yml
        • Size 89B
        • SHA256 5efdfe9d44398bcf110cc6745e9c4b4c82d1d7bbbd502e2a36cd3d5e36f92dd2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        app.asar
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\resources\app.asar
        • Size 4.1MB
        • SHA256 890d40052a9fd06822a8fb2a06716cc36ebc9b582bd2d3bc2a1acdc6bcb22072
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevate.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        snapshot_blob.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\snapshot_blob.bin
        • Size 333KB
        • SHA256 ad0788d20ffda9dac3a04bb79b66f1cb85b9667f69fbf147752d26259bb5e725
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        v8_context_snapshot.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\v8_context_snapshot.bin
        • Size 698KB
        • SHA256 49a57d20f07680e16238acd8cf60dbcf2b345ca9ab5b2a26626f2ce1bfdf2fc4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\vk_swiftshader.dll
        • Size 5.4MB
        • SHA256 bb23e739886eb9a969a52cec70d00eb5a07d3aa9c0acd212ad609b8016a36097
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader_icd.json
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vulkan-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\7z-out\vulkan-1.dll
        • Size 930KB
        • SHA256 ca5de625ce8c5db5bc8ae7cb0ce55b80c2fa8713a84911245dba97a47bb7d5a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StdUtils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UAC.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\UAC.dll
        • Size 14KB
        • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WinShell.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsExec.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\nsExec.dll
        • Size 6KB
        • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsis7z.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsmC85D.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Network Persistent State
        • Path C:\Users\Admin\AppData\Roaming\FreeTube\Network\Network Persistent State
        • Size 264B
        • SHA256 d8004af780b888f061ab71a0df38e43e6662e12ee04b80a1297066cfcf71c8cb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Network Persistent State~RFe5a9721.TMP
        • Path C:\Users\Admin\AppData\Roaming\FreeTube\Network\Network Persistent State~RFe5a9721.TMP
        • Size 59B
        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        CURRENT
        • Path C:\Users\Admin\AppData\Roaming\FreeTube\Session Storage\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512
        Submit Download

        default.exc
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512
        Submit Download

        memory/236-520-0x00007FFA316A0000-0x00007FFA316A1000-memory.dmp
        Download

        memory/236-521-0x00007FFA31A30000-0x00007FFA31A31000-memory.dmp
        Download

        memory/1976-44-0x0000000008290000-0x000000000890C000-memory.dmp
        Download

        memory/1976-24-0x0000000073930000-0x00000000740EC000-memory.dmp
        Download

        memory/1976-41-0x0000000007B60000-0x0000000007C03000-memory.dmp
        Download

        memory/1976-42-0x0000000073930000-0x00000000740EC000-memory.dmp
        Download

        memory/1976-43-0x0000000073930000-0x00000000740EC000-memory.dmp
        Download

        memory/1976-33-0x0000000006890000-0x00000000068AE000-memory.dmp
        Download

        memory/1976-45-0x0000000007C10000-0x0000000007C2A000-memory.dmp
        Download

        memory/1976-29-0x0000000006350000-0x00000000063B6000-memory.dmp
        Download

        memory/1976-32-0x00000000063C0000-0x000000000671B000-memory.dmp
        Download

        memory/1976-27-0x0000000006210000-0x0000000006232000-memory.dmp
        Download

        memory/1976-40-0x0000000006E90000-0x0000000006EB0000-memory.dmp
        Download

        memory/1976-46-0x0000000007C80000-0x0000000007C8A000-memory.dmp
        Download

        memory/1976-28-0x00000000062E0000-0x0000000006346000-memory.dmp
        Download

        memory/1976-26-0x0000000073930000-0x00000000740EC000-memory.dmp
        Download

        memory/1976-34-0x0000000006950000-0x000000000699C000-memory.dmp
        Download

        memory/1976-36-0x0000000073930000-0x00000000740EC000-memory.dmp
        Download

        memory/1976-47-0x0000000007E20000-0x0000000007E4A000-memory.dmp
        Download

        memory/1976-48-0x0000000007E50000-0x0000000007E74000-memory.dmp
        Download

        memory/1976-35-0x0000000007860000-0x0000000007896000-memory.dmp
        Download

        memory/1976-37-0x00000000702F0000-0x000000007033C000-memory.dmp
        Download

        memory/1976-25-0x0000000005B90000-0x00000000061DA000-memory.dmp
        Download

        memory/1976-51-0x0000000073930000-0x00000000740EC000-memory.dmp
        Download

        memory/1976-23-0x0000000003390000-0x00000000033C6000-memory.dmp
        Download

        memory/1976-22-0x0000000073942000-0x0000000073943000-memory.dmp
        Download

        memory/1976-49-0x00000000704A0000-0x00000000707FB000-memory.dmp
        Download

        memory/3544-74-0x00000000702F0000-0x000000007033C000-memory.dmp
        Download

        memory/3544-77-0x00000000704A0000-0x00000000707FB000-memory.dmp
        Download

        memory/4820-65-0x0000000007470000-0x0000000007481000-memory.dmp
        Download

        memory/4820-57-0x0000000005950000-0x0000000005CAB000-memory.dmp
        Download

        memory/4820-61-0x00000000702F0000-0x000000007033C000-memory.dmp
        Download

        memory/4820-64-0x0000000007510000-0x00000000075A6000-memory.dmp
        Download

        memory/4820-55-0x0000000073930000-0x00000000740EC000-memory.dmp
        Download

        memory/4820-67-0x0000000073930000-0x00000000740EC000-memory.dmp
        Download

        memory/4820-56-0x0000000073930000-0x00000000740EC000-memory.dmp
        Download

        memory/6052-662-0x00000281801E0000-0x00000281802E0000-memory.dmp
        Download

        memory/6052-709-0x0000028194790000-0x00000281947B0000-memory.dmp
        Download

        memory/6052-674-0x0000028181FD0000-0x0000028181FF0000-memory.dmp
        Download

        memory/6052-675-0x0000028194410000-0x0000028194510000-memory.dmp
        Download

        memory/6052-663-0x00000281801E0000-0x00000281802E0000-memory.dmp
        Download

        memory/6052-683-0x0000028184210000-0x0000028184230000-memory.dmp
        Download