Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://mullvad.net/...

windows10-2004-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    396s
  • max time network
    397s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    11/07/2026, 08:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://mullvad.net/en/download/vpn/windows
  • Sample260711-kbdzzaet6j
Score
8/10
defense_evasiondiscoverypersistenceransomwarespywarestealer

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Downloads MZ/PE file 1 IoCs
  • Checks computer location settings 2 TTPs 6 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 36 IoCs
  • Loads dropped DLL 48 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 7 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Launches sc.exe 1 IoCs

    Sc.exe is a Windows utlilty to control services on the system.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 58 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Kills process with taskkill 1 IoCs
    defense_evasion
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 10 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://mullvad.net/en/download/vpn/windows
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2204
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffe6ef2c188,0x7ffe6ef2c194,0x7ffe6ef2c1a0
      2⤵
        PID:2456
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,14777913859969179598,14631170417263859837,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:4808
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,11839693213645062857,688645357403251463,262144 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
        2⤵
          PID:1536
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,3070556161565203338,1689866520327820081,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=1972 /prefetch:8
          2⤵
            PID:1344
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,7134455934645969842,7016539222517336574,2097152 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
            2⤵
              PID:2636
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3396,i,528336079032105688,11280717008645597446,2097152 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
              2⤵
                PID:2944
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,6411010111572465470,4188509272593071235,2097152 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
                2⤵
                  PID:2752
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,10159089468815570286,1502765451206074627,2097152 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:2
                  2⤵
                    PID:3276
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5084,i,401184282711340926,10759635794087061450,2097152 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:1
                    2⤵
                      PID:4748
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,6677954563976382570,2492623718679519093,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
                      2⤵
                        PID:1312
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,11160357026508331923,9222690253303152289,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
                        2⤵
                          PID:5028
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5676,i,2531693035381769074,2646214209356960566,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
                          2⤵
                            PID:1596
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5676,i,2531693035381769074,2646214209356960566,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
                            2⤵
                              PID:712
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,3951120626826551868,8009531128182070699,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
                              2⤵
                                PID:4172
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6376,i,11297483547232521183,3715161409466066887,2097152 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:1
                                2⤵
                                  PID:2844
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6772,i,936523725824671843,10655282125793335299,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:8
                                  2⤵
                                    PID:2028
                                  • C:\Users\Admin\Downloads\Install Mullvad VPN.exe
                                    "C:\Users\Admin\Downloads\Install Mullvad VPN.exe"
                                    2⤵
                                    • Executes dropped EXE
                                    • Suspicious use of SetWindowsHookEx
                                    • Suspicious use of WriteProcessMemory
                                    PID:2540
                                    • C:\Users\Admin\AppData\Local\Temp\mullvad-updates\mullvad-2026.3.exe
                                      "C:\Users\Admin\AppData\Local\Temp\mullvad-updates\mullvad-2026.3.exe"
                                      3⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Drops file in Program Files directory
                                      • System Location Discovery: System Language Discovery
                                      • Suspicious behavior: EnumeratesProcesses
                                      • Suspicious use of AdjustPrivilegeToken
                                      • Suspicious use of SetWindowsHookEx
                                      • Suspicious use of WriteProcessMemory
                                      PID:5644
                                      • C:\Windows\SysWOW64\taskkill.exe
                                        "C:\Windows\system32\taskkill.exe" /f /t /im "Mullvad VPN.exe"
                                        4⤵
                                        • System Location Discovery: System Language Discovery
                                        • Kills process with taskkill
                                        • Suspicious use of AdjustPrivilegeToken
                                        PID:5812
                                      • C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\mullvad-setup.exe
                                        "C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\mullvad-setup.exe" driver remove wintun-abandoned-device
                                        4⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • Suspicious use of SetWindowsHookEx
                                        PID:7008
                                      • C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\mullvad-setup.exe
                                        "C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\mullvad-setup.exe" driver remove split-tunnel
                                        4⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • Suspicious use of SetWindowsHookEx
                                        PID:972
                                      • C:\Program Files\Mullvad VPN\resources\mullvad-daemon.exe
                                        "C:\Program Files\Mullvad VPN\resources\mullvad-daemon.exe" --register-service
                                        4⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • Suspicious behavior: EnumeratesProcesses
                                        • Suspicious use of AdjustPrivilegeToken
                                        • Suspicious use of SetWindowsHookEx
                                        PID:5324
                                      • C:\Windows\SysWOW64\sc.exe
                                        "C:\Windows\system32\sc.exe" start mullvadvpn
                                        4⤵
                                        • Launches sc.exe
                                        • System Location Discovery: System Language Discovery
                                        PID:5272
                                      • C:\Windows\explorer.exe
                                        "C:\Windows\explorer.exe"
                                        4⤵
                                        • Boot or Logon Autostart Execution: Active Setup
                                        • Enumerates connected drives
                                        • Checks SCSI registry key(s)
                                        • Modifies registry class
                                        • Suspicious behavior: GetForegroundWindowSpam
                                        • Suspicious use of AdjustPrivilegeToken
                                        • Suspicious use of FindShellTrayWindow
                                        • Suspicious use of SendNotifyMessage
                                        • Suspicious use of SetWindowsHookEx
                                        • Suspicious use of WriteProcessMemory
                                        PID:3976
                                        • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                          "C:\Program Files\Mullvad VPN\Mullvad VPN.exe"
                                          5⤵
                                          • Checks computer location settings
                                          • Executes dropped EXE
                                          • Loads dropped DLL
                                          • Suspicious use of AdjustPrivilegeToken
                                          • Suspicious use of WriteProcessMemory
                                          PID:5524
                                          • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                            "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1960,i,4511529247046947176,11640935890421782673,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2168 /prefetch:3
                                            6⤵
                                            • Executes dropped EXE
                                            PID:5608
                                          • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                            "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1960,i,4511529247046947176,11640935890421782673,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1956 /prefetch:2
                                            6⤵
                                            • Executes dropped EXE
                                            • Loads dropped DLL
                                            PID:3748
                                          • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                            "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --app-user-model-id=net.mullvad.vpn --app-path="C:\Program Files\Mullvad VPN\resources\app.asar" --enable-sandbox --force-color-profile=srgb --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1960,i,4511529247046947176,11640935890421782673,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2760 /prefetch:1
                                            6⤵
                                            • Checks computer location settings
                                            • Executes dropped EXE
                                            • Loads dropped DLL
                                            PID:2596
                                          • C:\Windows\system32\cmd.exe
                                            C:\Windows\system32\cmd.exe /d /s /c "reg query HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize\ /v SystemUsesLightTheme"
                                            6⤵
                                            • Suspicious use of WriteProcessMemory
                                            PID:3952
                                            • C:\Windows\system32\reg.exe
                                              reg query HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize\ /v SystemUsesLightTheme
                                              7⤵
                                                PID:1780
                                            • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                              "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1960,i,4511529247046947176,11640935890421782673,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2916 /prefetch:8
                                              6⤵
                                              • Executes dropped EXE
                                              PID:3824
                                            • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                              "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1960,i,4511529247046947176,11640935890421782673,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4068 /prefetch:8
                                              6⤵
                                              • Executes dropped EXE
                                              PID:6096
                                            • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                              "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1960,i,4511529247046947176,11640935890421782673,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=2956 /prefetch:8
                                              6⤵
                                              • Executes dropped EXE
                                              PID:1584
                                            • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                              "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1960,i,4511529247046947176,11640935890421782673,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4220 /prefetch:8
                                              6⤵
                                              • Executes dropped EXE
                                              PID:1468
                                            • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                              "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1960,i,4511529247046947176,11640935890421782673,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4476 /prefetch:8
                                              6⤵
                                              • Executes dropped EXE
                                              PID:3484
                                            • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                              "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1960,i,4511529247046947176,11640935890421782673,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4628 /prefetch:8
                                              6⤵
                                              • Executes dropped EXE
                                              PID:6336
                                            • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                              "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1960,i,4511529247046947176,11640935890421782673,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4684 /prefetch:8
                                              6⤵
                                              • Executes dropped EXE
                                              PID:4012
                                            • C:\Windows\system32\cmd.exe
                                              C:\Windows\system32\cmd.exe /d /s /c "reg query HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize\ /v SystemUsesLightTheme"
                                              6⤵
                                                PID:5656
                                                • C:\Windows\system32\reg.exe
                                                  reg query HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize\ /v SystemUsesLightTheme
                                                  7⤵
                                                    PID:3380
                                              • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                "C:\Program Files\Mullvad VPN\Mullvad VPN.exe"
                                                5⤵
                                                • Checks computer location settings
                                                • Executes dropped EXE
                                                • Suspicious use of WriteProcessMemory
                                                PID:7152
                                                • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                  "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2160,i,15933632863666015280,18287552859461652001,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2128 /prefetch:2
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:4072
                                                • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                  "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --field-trial-handle=2160,i,15933632863666015280,18287552859461652001,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2324 /prefetch:3
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:4156
                                              • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                "C:\Program Files\Mullvad VPN\Mullvad VPN.exe"
                                                5⤵
                                                • Checks computer location settings
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                PID:5272
                                                • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                  "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1964,i,16720008865534878456,16571927541641026582,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1960 /prefetch:2
                                                  6⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  PID:3252
                                                • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                  "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1964,i,16720008865534878456,16571927541641026582,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2136 /prefetch:3
                                                  6⤵
                                                  • Executes dropped EXE
                                                  PID:3948
                                                • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                  "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --app-user-model-id=net.mullvad.vpn --app-path="C:\Program Files\Mullvad VPN\resources\app.asar" --enable-sandbox --force-color-profile=srgb --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1964,i,16720008865534878456,16571927541641026582,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2704 /prefetch:1
                                                  6⤵
                                                  • Checks computer location settings
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  PID:4772
                                                • C:\Windows\system32\cmd.exe
                                                  C:\Windows\system32\cmd.exe /d /s /c "reg query HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize\ /v SystemUsesLightTheme"
                                                  6⤵
                                                    PID:6196
                                                    • C:\Windows\system32\reg.exe
                                                      reg query HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize\ /v SystemUsesLightTheme
                                                      7⤵
                                                        PID:4496
                                                    • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                      "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1964,i,16720008865534878456,16571927541641026582,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3844 /prefetch:8
                                                      6⤵
                                                      • Executes dropped EXE
                                                      PID:5296
                                                    • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                      "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1964,i,16720008865534878456,16571927541641026582,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3892 /prefetch:8
                                                      6⤵
                                                      • Executes dropped EXE
                                                      PID:6316
                                                    • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                      "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1964,i,16720008865534878456,16571927541641026582,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3936 /prefetch:8
                                                      6⤵
                                                      • Executes dropped EXE
                                                      PID:4476
                                                    • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                      "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1964,i,16720008865534878456,16571927541641026582,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4176 /prefetch:8
                                                      6⤵
                                                      • Executes dropped EXE
                                                      PID:4744
                                                    • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                      "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1964,i,16720008865534878456,16571927541641026582,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4180 /prefetch:8
                                                      6⤵
                                                      • Executes dropped EXE
                                                      PID:2292
                                                    • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                      "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1964,i,16720008865534878456,16571927541641026582,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4400 /prefetch:8
                                                      6⤵
                                                      • Executes dropped EXE
                                                      PID:4904
                                                    • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                      "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --enable-sandbox --field-trial-handle=1964,i,16720008865534878456,16571927541641026582,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4416 /prefetch:8
                                                      6⤵
                                                      • Executes dropped EXE
                                                      PID:4724
                                                    • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                      "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1964,i,16720008865534878456,16571927541641026582,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=2620 /prefetch:8
                                                      6⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:5792
                                                  • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                    "C:\Program Files\Mullvad VPN\Mullvad VPN.exe"
                                                    5⤵
                                                    • Checks computer location settings
                                                    • Executes dropped EXE
                                                    PID:3728
                                                    • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                      "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --field-trial-handle=1960,i,1536741415626214204,14843776462863968680,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1988 /prefetch:3
                                                      6⤵
                                                      • Executes dropped EXE
                                                      PID:1660
                                                    • C:\Program Files\Mullvad VPN\Mullvad VPN.exe
                                                      "C:\Program Files\Mullvad VPN\Mullvad VPN.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Mullvad VPN" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1960,i,1536741415626214204,14843776462863968680,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1956 /prefetch:2
                                                      6⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      PID:5140
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,7879255154068213981,6426349228509311570,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
                                              2⤵
                                                PID:6044
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,15500424430325729644,11237303891324546337,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
                                                2⤵
                                                  PID:6052
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6752,i,3580678852519957198,4542408518722909313,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
                                                  2⤵
                                                    PID:6060
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6604,i,6973416089478820503,11432536922526874478,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:8
                                                    2⤵
                                                      PID:5224
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4280,i,269342391654492001,3353867980421924257,262144 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
                                                      2⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:2464
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,11960040871082038407,12592868204247219780,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:8
                                                      2⤵
                                                        PID:572
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5676,i,14359114457216493300,15397498794231663414,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=4952 /prefetch:8
                                                        2⤵
                                                          PID:6332
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3536,i,4260893821186396647,12806378545516395603,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=7060 /prefetch:8
                                                          2⤵
                                                            PID:4592
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2964,i,12906074480661592021,18017925376217960763,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=6948 /prefetch:8
                                                            2⤵
                                                              PID:5260
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7020,i,12723695936772356286,1266305038964705667,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
                                                              2⤵
                                                                PID:6892
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,6833556302641181328,12888206216463966765,524288 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
                                                                2⤵
                                                                  PID:5648
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=3556,i,9138798439154211210,1660791973355162689,2097152 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
                                                                  2⤵
                                                                    PID:3128
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7232,i,1137445479493091959,11545554683259156298,2097152 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=7220 /prefetch:1
                                                                    2⤵
                                                                      PID:7032
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6992,i,14598769231425676623,5984639965910635436,2097152 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
                                                                      2⤵
                                                                        PID:3352
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7228,i,219044057758277409,8041689473029373568,2097152 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=7232 /prefetch:1
                                                                        2⤵
                                                                          PID:6964
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7412,i,15522904836787062667,8423775252552597469,2097152 --field-trial-handle=2304,i,1202097041677776264,16969723761712867545,262144 --variations-seed-version --mojo-platform-channel-handle=7432 /prefetch:1
                                                                          2⤵
                                                                            PID:5560
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                          1⤵
                                                                            PID:3536
                                                                          • C:\Program Files\Mullvad VPN\resources\mullvad-daemon.exe
                                                                            "C:\Program Files\Mullvad VPN\resources\mullvad-daemon.exe" --run-as-service -vv
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • Drops file in System32 directory
                                                                            PID:5204
                                                                          • C:\Program Files\Mullvad VPN\resources\mullvad-split-tunnel.sys
                                                                            "C:\Program Files\Mullvad VPN\resources\mullvad-split-tunnel.sys"
                                                                            1⤵
                                                                            • Executes dropped EXE
                                                                            PID:6112
                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                            1⤵
                                                                            • Suspicious use of SetWindowsHookEx
                                                                            PID:6524
                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                            1⤵
                                                                            • Modifies registry class
                                                                            • Suspicious use of SetWindowsHookEx
                                                                            PID:7056
                                                                          • C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\GetHelp.exe
                                                                            "C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\GetHelp.exe" -ServerName:App.AppXc53jt7x72yk6zj4f70fb3gxetfvdh22w.mca
                                                                            1⤵
                                                                              PID:2272

                                                                            Network

                                                                                  MITRE ATT&CK Enterprise v16

                                                                                  Replay Monitor

                                                                                  Loading Replay Monitor...

                                                                                  Downloads

                                                                                  chrome_100_percent.pak
                                                                                  • Path C:\Program Files\Mullvad VPN\chrome_100_percent.pak
                                                                                  • Size 112KB
                                                                                  • SHA256 45d14a4278b1e152b363197401a5604aa5a3cee6512a6b52df978038fa521a0f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Mullvad VPN.lnk
                                                                                  • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mullvad VPN.lnk
                                                                                  • Size 1KB
                                                                                  • SHA256 eec0e9fa1529f731a1304421ebf0be01c615ac92e0f14a2168b956cacb961b0c
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  install.log
                                                                                  • Path C:\ProgramData\Mullvad VPN\install.log
                                                                                  • Size 881B
                                                                                  • SHA256 229d8190895938d928a40fa1c236e1d8fc2dd430d278a288abab17810df5cd9a
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  settings.dat
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                  • Size 280B
                                                                                  • SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  settings.dat
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                  • Size 280B
                                                                                  • SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  LOG.old
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                  • Size 331B
                                                                                  • SHA256 c4954d32124aed9bc0a2f4a733f518ce3436acf7c1920debb4f8a9b0c17f7be8
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  BookmarkMergedSurfaceOrdering
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                  • Size 6B
                                                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  f_00008f
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
                                                                                  • Size 2.7MB
                                                                                  • SHA256 253323fd74dc963eb545505b04bc2616d0cd486fb46377f4d1e521f284950e67
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  f_000093
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                                                                  • Size 62KB
                                                                                  • SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  f_000094
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                                                                  • Size 68KB
                                                                                  • SHA256 90e39936fa4a20f0fcdafc8ce17bd53e662b5ac7fe4c810b28ed5356b9da6d02
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  f_000095
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                                                                  • Size 19KB
                                                                                  • SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  f_000096
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                                                  • Size 63KB
                                                                                  • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  f_000097
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
                                                                                  • Size 38KB
                                                                                  • SHA256 4392ddde86f22a921269feaf788a13509946046047df6926017041ff33d0293e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  f_00009e
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
                                                                                  • Size 193KB
                                                                                  • SHA256 ff821be86fb17c69ad74f9a23884cda54ec1c56d238f8b90e63261c3dc55c50f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  temp-index
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                  • Size 12KB
                                                                                  • SHA256 847162c27516c106b500e1c5ff6cef8020a5b3ee86311649e5a3118b3968cdf9
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  the-real-index
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                  • Size 4KB
                                                                                  • SHA256 89a59a0fabaa8e5776d49776a6c4242c32f7f81eee4fe1b291be4cc1e888a3bd
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  the-real-index
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                  • Size 5KB
                                                                                  • SHA256 64af6d675b9cf32c19628d1af296625852975bcefcdded8a394cc2ea1a5f6b23
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  the-real-index
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                  • Size 4KB
                                                                                  • SHA256 5a49ace3dc0261f94511274f5e454cad83b12a8d6100e2408531a5d2f2157611
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  the-real-index~RFe58872c.TMP
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58872c.TMP
                                                                                  • Size 3KB
                                                                                  • SHA256 ef4debb875809681d2d832fbfbe8b79ab0537099d18a3e868c288be738fa6227
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  SiteList-Enterprise.json
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                  • Size 2B
                                                                                  • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  Edge Profile.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                  • Size 70KB
                                                                                  • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  HubApps
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                  • Size 106KB
                                                                                  • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Network Persistent State
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                  • Size 1KB
                                                                                  • SHA256 eafbcc8a9ee03642c3217222f128b8e2ee9557de4af1b3dc80657f7bb137766c
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  Network Persistent State
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                  • Size 1KB
                                                                                  • SHA256 68cadaa3ae31722962c2d33b2c7e42152756dac12645fd4ebbe64065c264cff4
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  Network Persistent State
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                  • Size 111B
                                                                                  • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  Network Persistent State
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                  • Size 3KB
                                                                                  • SHA256 1280f77490c0c3a027af1363d5ba3b860f379d79e61ee89f43796f771d0ef771
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  SCT Auditing Pending Reports
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                  • Size 2B
                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  Sdch Dictionaries
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                  • Size 209B
                                                                                  • SHA256 ba554f7d2c8392978b235b949f7c5850bd23aedbc574718386ccb3933996b9fa
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  Sdch Dictionaries
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                  • Size 209B
                                                                                  • SHA256 3188bc05c9cf43592fa59edfb7b0874429fb3010f6c075cbe156ef883158a67b
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  Sdch Dictionaries~RFe5d1763.TMP
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5d1763.TMP
                                                                                  • Size 40B
                                                                                  • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                  • Size 13KB
                                                                                  • SHA256 dd9176d62c03e8e144b428dd59d06782fbf6485859027491eedc601067ad881c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                  • Size 28KB
                                                                                  • SHA256 321182b319187e8627ea83dacb1f6f222ab9489a18b2f77741060551cde51983
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                  • Size 14KB
                                                                                  • SHA256 08b707b82b9cdb4e20e129737aec5d2336fb8169659ca59389245e83395cbf16
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Secure Preferences
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                  • Size 30KB
                                                                                  • SHA256 455f1ab8a6c1aa6aa41360e1508e83e6c4ee22dc0c4fbc049b02457fdf24f507
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  the-real-index
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
                                                                                  • Size 2KB
                                                                                  • SHA256 810aad0f90c3c5486fdae4dbc55b0a8a96b2012ba337385d2201bf9faebfedc4
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  the-real-index~RFe5cb06c.TMP
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe5cb06c.TMP
                                                                                  • Size 2KB
                                                                                  • SHA256 d5b367fd4633c865b7bf3218828c9ac814502af00e51ee9bcacfa6602cfe5834
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  index.txt
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                  • Size 371B
                                                                                  • SHA256 657d0ec1b25c04fafd9cec79f7227e44b62424239d9746051282def9d962c98d
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  sync_diagnostic.log
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                  • Size 6KB
                                                                                  • SHA256 7b96d1bb3fc68510d0eb4075d223d054d064d09a349f4b1494a2e84e2604d185
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  76ff0841-8580-4c05-a3cc-15ab02876b18.tmp
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\76ff0841-8580-4c05-a3cc-15ab02876b18.tmp
                                                                                  • Size 22KB
                                                                                  • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                  • Size 27KB
                                                                                  • SHA256 dfc0c5259b129e2dfdb8a9a25a07175cb767d5639d60d8e108494301aa37f427
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                  • Size 27KB
                                                                                  • SHA256 7a44260cfbf68b21ce7136dd8dc6de954f14f80a51a1bfc43bb0df6cf8e67c9a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                  • Size 8KB
                                                                                  • SHA256 191f7c13fe139e0ee9ce392dab667043b62f18effbfb6bf3ccdde1d0451e2841
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                  • Size 19KB
                                                                                  • SHA256 8ec7e489490691ccfffe63fc01dcb57c0ad76fa132a62e19212f696476488e9b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                  • Size 19KB
                                                                                  • SHA256 5fd2affc4cb9f3f47d56615bd79b5998a7e5e795a55f8ce97efeb11fca7dd3be
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                  • Size 19KB
                                                                                  • SHA256 77fdf610ae5a3ba2d595ca30ac11a49a68fc14a4866578f01fa469082a815227
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                  • Size 27KB
                                                                                  • SHA256 332ce477c04fd061e28f4dd4d06efb15bca652b501f4dce2e6797b12d06ce043
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                  • Size 8KB
                                                                                  • SHA256 0c6078b15fc1d481d79ad2aa900b8a5704454373323378524f1c6e7aa2b59c81
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Local State
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                  • Size 27KB
                                                                                  • SHA256 aafa34b19a8e77b52e63324d1cbd3b76cbfba5969660d37dfb248892bd7693ec
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  RevisitationBloomfilter
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                  • Size 392B
                                                                                  • SHA256 4b0bdd6052e6285930d8009ce33611169b9fb83e68c7ef59354174ac939d4f3d
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  RevisitationBloomfilter~RFe5d80bc.TMP
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5d80bc.TMP
                                                                                  • Size 392B
                                                                                  • SHA256 25eafbf7de1169ac97a8e40cab71c80ef6e098890da64ac39cb070cf3239d166
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  6148c1dc-d422-4161-aa80-3873fdc21384.tmp
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6148c1dc-d422-4161-aa80-3873fdc21384.tmp
                                                                                  • Size 13B
                                                                                  • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                  • Size 2KB
                                                                                  • SHA256 77b6bfe593a1a92b4dfe6e5d511b662cdc156deceda535080ff4ab8c183f064c
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  68b66564-4b39-4a2f-99f1-b50463a6fdf1.tmp
                                                                                  • Path C:\Users\Admin\AppData\Local\Mullvad VPN\68b66564-4b39-4a2f-99f1-b50463a6fdf1.tmp
                                                                                  • Size 93B
                                                                                  • SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  data_0
                                                                                  • Path C:\Users\Admin\AppData\Local\Mullvad VPN\GPUCache\data_0
                                                                                  • Size 8KB
                                                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                  Submit Download

                                                                                  data_1
                                                                                  • Path C:\Users\Admin\AppData\Local\Mullvad VPN\GPUCache\data_1
                                                                                  • Size 264KB
                                                                                  • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                  Submit Download

                                                                                  data_2
                                                                                  • Path C:\Users\Admin\AppData\Local\Mullvad VPN\GPUCache\data_2
                                                                                  • Size 8KB
                                                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                  Submit Download

                                                                                  data_3
                                                                                  • Path C:\Users\Admin\AppData\Local\Mullvad VPN\GPUCache\data_3
                                                                                  • Size 8KB
                                                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                  Submit Download

                                                                                  MANIFEST-000001
                                                                                  • Path C:\Users\Admin\AppData\Local\Mullvad VPN\Local Storage\leveldb\MANIFEST-000001
                                                                                  • Size 41B
                                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  Network Persistent State~RFe5a26b3.TMP
                                                                                  • Path C:\Users\Admin\AppData\Local\Mullvad VPN\Network\Network Persistent State~RFe5a26b3.TMP
                                                                                  • Size 59B
                                                                                  • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  CURRENT
                                                                                  • Path C:\Users\Admin\AppData\Local\Mullvad VPN\Session Storage\CURRENT
                                                                                  • Size 16B
                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  fbaf94e759052658216786bfbabcdced1b67a5c2.tbres
                                                                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\TokenBroker\Cache\fbaf94e759052658216786bfbabcdced1b67a5c2.tbres
                                                                                  • Size 2KB
                                                                                  • SHA256 501fec07472cf8867548e2e7cf4c23645da0a4a9e21cb5ff5b65e0352649d439
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  net_mullvad_vpn
                                                                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\net_mullvad_vpn
                                                                                  • Size 36KB
                                                                                  • SHA256 92b1cc825fc3eb250fc01f552be6346ed520f098e875e476a2bdd9b426b6e392
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  AppCache134282319936980099.txt
                                                                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134282319936980099.txt
                                                                                  • Size 84KB
                                                                                  • SHA256 2e2bb0724765656561c619cb4dc967f334c1c100f865f0ab9cbc8e3145499858
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  SettingsCache.txt
                                                                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\SettingsCache.txt
                                                                                  • Size 670KB
                                                                                  • SHA256 4aa1fa29fd0a2d15b9204426cfee2e348dcf65f5b444b53fc5425a0418a3fdcd
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  LICENSE.electron.txt
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\LICENSE.electron.txt
                                                                                  • Size 1KB
                                                                                  • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  LICENSES.chromium.html
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\LICENSES.chromium.html
                                                                                  • Size 14.4MB
                                                                                  • SHA256 f9c475876b01bb4d654b8f630f11219cc96198efe91d7f2602a97f0f3c86c3cb
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  chrome_200_percent.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\chrome_200_percent.pak
                                                                                  • Size 182KB
                                                                                  • SHA256 aafc61b89748d17fcbc9fecd9844a77be2c584529a81714c98e0c4d453ea9496
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  d3dcompiler_47.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\d3dcompiler_47.dll
                                                                                  • Size 4.5MB
                                                                                  • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  dxcompiler.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\dxcompiler.dll
                                                                                  • Size 24.9MB
                                                                                  • SHA256 17afc13607ffd6b7f8df79cb744c3e4deda388efcfe9faa43fec36c8971450cf
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  dxil.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\dxil.dll
                                                                                  • Size 1.4MB
                                                                                  • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  ffmpeg.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\ffmpeg.dll
                                                                                  • Size 2.9MB
                                                                                  • SHA256 254b008debcba0a3d4b728dd7fd256576ba2373a94bb4534a8f4b255f3f19532
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  icudtl.dat
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\icudtl.dat
                                                                                  • Size 10.0MB
                                                                                  • SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  libEGL.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\libEGL.dll
                                                                                  • Size 492KB
                                                                                  • SHA256 6b9f036b3f9fb96c1941a9871ec84b319be1b773de2ec2b0dc66855080d7e77d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  libGLESv2.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\libGLESv2.dll
                                                                                  • Size 8.0MB
                                                                                  • SHA256 083f5ee786a4f24c01085605deffa59e5b06811e6dc69cb07c75b406110f9cfd
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  af.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\af.pak
                                                                                  • Size 568KB
                                                                                  • SHA256 ca253121434ef430661c30672e1097e6d238e42821585b700776b56977c05d97
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  am.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\am.pak
                                                                                  • Size 921KB
                                                                                  • SHA256 1f126a64a58ece296209d24c36ae416e3187996765027b1198ee01dead17394c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  ar.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\ar.pak
                                                                                  • Size 1016KB
                                                                                  • SHA256 cf46d1687d01d8ba58512ea7082aedbaa14ff0e748eae295fbcdae464b271b77
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  bg.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\bg.pak
                                                                                  • Size 1.0MB
                                                                                  • SHA256 f2a46c4ee04330ef49f6acc62c26ed7ec57dfe124aa386e08c5b582832c4000e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  bn.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\bn.pak
                                                                                  • Size 1.3MB
                                                                                  • SHA256 b4ada9665be5c9d9fe4254bff291978dfb50c2b22a7149faf9b9c3f470f0d32f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  ca.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\ca.pak
                                                                                  • Size 640KB
                                                                                  • SHA256 252c097b90fc3ba9096c519a6ab2e91b441f11cce65c7c47777542959dbf6c34
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  cs.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\cs.pak
                                                                                  • Size 663KB
                                                                                  • SHA256 5e9385505f9507d4a57f7a5960ceb35b5fba92c662b53bda4e4dc0d63245059a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  da.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\da.pak
                                                                                  • Size 598KB
                                                                                  • SHA256 054849037db8f9672ab80606dd7163f25b18710ee7f777e7eeaa68d24447aee6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  de.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\de.pak
                                                                                  • Size 640KB
                                                                                  • SHA256 404975e6b3af1f4e40be3905da1850c3e87e29bd03d0866185ff85c06861ba68
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  el.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\el.pak
                                                                                  • Size 1.1MB
                                                                                  • SHA256 dc27d24e9afd24124abca6dca1a362462851267902fe6493ff3165a1c5aab69f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  en-GB.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\en-GB.pak
                                                                                  • Size 518KB
                                                                                  • SHA256 ee6fc979d1fff0c1a4d6bca929691733665c5df7e7a43cc54f1165ea14cffa67
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  en-US.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\en-US.pak
                                                                                  • Size 524KB
                                                                                  • SHA256 bfa782c9efae2c9cd2c0214dae1bbb3c259d4d4c38d920b06677b9c4cf4f813d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  es-419.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\es-419.pak
                                                                                  • Size 631KB
                                                                                  • SHA256 2b728123b590c5570a46ec2da7d4e620cb81559629f933ee5d71386fa142e02b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  es.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\es.pak
                                                                                  • Size 628KB
                                                                                  • SHA256 4801312dd5d7e3d62db05b8fe326d982f3887c65ac9faa7621009853c0d3b0b1
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  et.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\et.pak
                                                                                  • Size 573KB
                                                                                  • SHA256 488a91b53d17ca8b52e25f143197875aef7dd50e1bd51bad749f559c17f52aec
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  fa.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\fa.pak
                                                                                  • Size 946KB
                                                                                  • SHA256 cfd05fb194e5c43c2c65e7803eca72fde4f5629e849cf2dbb8f6f62156485aba
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  fi.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\fi.pak
                                                                                  • Size 584KB
                                                                                  • SHA256 c04f5e2b7f30e8e350feefd6cc45f266dbeacf11837cc774c977bf76e9b403a7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  fil.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\fil.pak
                                                                                  • Size 662KB
                                                                                  • SHA256 48884f90e800b0b0803ddaa0bbebbea1292bf8e1bb5ee8f035a79371bef7ac2b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  fr.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\fr.pak
                                                                                  • Size 682KB
                                                                                  • SHA256 e311ebdf49828d313760453a01ad1335bac955b4b8b291accf038714c91ebc03
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  gu.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\gu.pak
                                                                                  • Size 1.3MB
                                                                                  • SHA256 11e4ab3cfa421ea0d4d0971b038a6e7a254094fa6dfe9b8f65fd1572f36bcabb
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  he.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\he.pak
                                                                                  • Size 829KB
                                                                                  • SHA256 30409b7264418b9b9852b2419669bb8da6f489b58d4eeb1007b39d5cc978621d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  hi.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\hi.pak
                                                                                  • Size 1.4MB
                                                                                  • SHA256 59ae1278d1b58da7c0a11e5a23bf69ea31c674aebbc24fcd537a84769efe9d69
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  hr.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\hr.pak
                                                                                  • Size 639KB
                                                                                  • SHA256 36d9939cd9d89baae124fc930cc050e386df2b8fd0eda0fb48882a2929b94a76
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  hu.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\hu.pak
                                                                                  • Size 684KB
                                                                                  • SHA256 501569c5e74285231b41d067e0ea28972ef0ab7b269886485cf1b42cd78cbd1d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  id.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\id.pak
                                                                                  • Size 565KB
                                                                                  • SHA256 09d4dd7cbe4eb1b7730a80a3a3cd0606139f4b9647b0a04b49314638680b0a31
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  it.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\it.pak
                                                                                  • Size 619KB
                                                                                  • SHA256 901a28a4cd0b1d545f0c2e4aa54914029adc03801859761db30c81947de63f92
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  ja.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\ja.pak
                                                                                  • Size 754KB
                                                                                  • SHA256 8250b4783dcc389fa96fdf79e8188e439ffe5fc01325f32ab8c322c4d27f20a4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  kn.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\kn.pak
                                                                                  • Size 1.5MB
                                                                                  • SHA256 847c5e6abcddf120b4dbc34e28dcd1c2e93f94ab1d6f016d0c1504a58cfd5b93
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  ko.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\ko.pak
                                                                                  • Size 640KB
                                                                                  • SHA256 b8ecd18ce8601686ef64129c77f5307d0c60656d27eede7a23b4f3947647b302
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lt.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\lt.pak
                                                                                  • Size 694KB
                                                                                  • SHA256 6d648211ff3a6801e049c9a3931afaf3007857b2872e55ae11e19849180d19da
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lv.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\lv.pak
                                                                                  • Size 692KB
                                                                                  • SHA256 0c0663909339a1f4edf09355a67eea0fcfe821c78d4891604eee31695ce20b37
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  ml.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\ml.pak
                                                                                  • Size 1.5MB
                                                                                  • SHA256 2bc35d18af85b3c7004a6e1e02591f5db4430a2f334f5c4be3c0a0e04837d9ae
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  mr.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\mr.pak
                                                                                  • Size 1.3MB
                                                                                  • SHA256 5dee369e9366bfcc4fc95aec6c58b915933efd72c718d56802e35e8af5a880a0
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  ms.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\ms.pak
                                                                                  • Size 595KB
                                                                                  • SHA256 5af99080b311e15a19f9988779a1cdd939a7fb9b98bf093fca324eeb58b39602
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  nb.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\nb.pak
                                                                                  • Size 572KB
                                                                                  • SHA256 11e798ef612a1d22b90450c547998bf0b23ccc4ca5265f27f1924c8b09f22937
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  nl.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\nl.pak
                                                                                  • Size 594KB
                                                                                  • SHA256 bf2a7d52d8c061b5f5543e7c4e20b4eac96e65e02a967752af873c3ec30034b2
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  pl.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\pl.pak
                                                                                  • Size 663KB
                                                                                  • SHA256 7a464e196878d304c7358e7ea457e5d2a17e3065ab02f29b8402803c401d747f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  pt-BR.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\pt-BR.pak
                                                                                  • Size 621KB
                                                                                  • SHA256 6cb59658b372d605c4dac61711b56abf5555ed69e7b9ab0916f9185af48e66ec
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  pt-PT.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\pt-PT.pak
                                                                                  • Size 625KB
                                                                                  • SHA256 b727b377a6ccf25952189c59ef175c213dd1e29e896b6b5fdfacd024c711ac93
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  ro.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\ro.pak
                                                                                  • Size 648KB
                                                                                  • SHA256 205ea8cc0b368426f06c533b636a2845e66e3f7932aa6a680645e79de15edff3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  ru.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\ru.pak
                                                                                  • Size 1.0MB
                                                                                  • SHA256 54f1bc4ffc72547a655d4737d2c7260a71794dda56fbffd13e6e8cc313c5520c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  sk.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\sk.pak
                                                                                  • Size 675KB
                                                                                  • SHA256 eb91fe27fd087433da4d21dc1c387a816bed0de3e6a140b4597caa90f4921fda
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  sl.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\sl.pak
                                                                                  • Size 646KB
                                                                                  • SHA256 52426fb8fc82d1ed28797ccb62b7fe14f123cddf011f5d5875b076cdb0c33695
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  sr.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\sr.pak
                                                                                  • Size 993KB
                                                                                  • SHA256 92dc15bac0e96ede33a7055994f3558605b3147b890ee0414314274216dbaf80
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  sv.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\sv.pak
                                                                                  • Size 577KB
                                                                                  • SHA256 51f5cfc915aef54ffa11077d00021c99aac1c86f04076ba70f43608b11486199
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  sw.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\sw.pak
                                                                                  • Size 610KB
                                                                                  • SHA256 e3bf553f18a0008dc5ac86e001a0ffb190f885260a7bf06feaf34822f0dde36a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  ta.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\ta.pak
                                                                                  • Size 1.5MB
                                                                                  • SHA256 d3849b163ddca28155194a3b68583e115943d087a4d0bdb90ea815eff618cb73
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  te.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\te.pak
                                                                                  • Size 1.4MB
                                                                                  • SHA256 4038e8dda796e26e5101da4af24a2a9c212637fec1e7633458b821d38023751b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  th.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\th.pak
                                                                                  • Size 1.2MB
                                                                                  • SHA256 e4e627969668d8672cc5212b9b3a1f3c42fe0c5d90d15ee893ff0bce8cf7c2c3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  tr.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\tr.pak
                                                                                  • Size 621KB
                                                                                  • SHA256 eafa2065b5dc4a3c95e5f0207fc31dc54f63aee65a8fe79925ac62a15161ee68
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  uk.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\uk.pak
                                                                                  • Size 1.1MB
                                                                                  • SHA256 4b65c4e32609f29eebe8fefa25b0fa861c05cfb51131d5ba64e1878666a0bd24
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  ur.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\ur.pak
                                                                                  • Size 933KB
                                                                                  • SHA256 c0d81e0446bae6d62b496f5268222ad53fe5e6f7325c19bdb7685974967beb3b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  vi.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\vi.pak
                                                                                  • Size 737KB
                                                                                  • SHA256 3db088338da5890b390d6bdc047bd038ef2b2f3d982c74f546784895dd0d9b18
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  zh-CN.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\zh-CN.pak
                                                                                  • Size 529KB
                                                                                  • SHA256 e0eb2457c1edb82ab19f484e45d3e029ad0c5b5cc07d68a82faf6bab55f52e52
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  zh-TW.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\locales\zh-TW.pak
                                                                                  • Size 523KB
                                                                                  • SHA256 a5847062b32872a9a9b77361aa1a1e7f8734f6547adaa62f312a78baf20ef5c4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  resources.pak
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources.pak
                                                                                  • Size 6.0MB
                                                                                  • SHA256 40af4117b0bd35da141aa599255b879013bfda5968401feccb5c43cb372cdae6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  CHANGELOG.md
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\CHANGELOG.md
                                                                                  • Size 136KB
                                                                                  • SHA256 04d382ac77fb8087c07e4bc7f4bce698882cb040c20792e1f9bf7b60c901cfdf
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  app.asar
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar
                                                                                  • Size 35.4MB
                                                                                  • SHA256 8f4f066f277fbe6998c0145edec113bd71c0550acc263bbacbed815f3fc076c7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-1.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-1.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 aed3e508b486742fd6eedce95b5128eaf24ad792155b4c16f455f96922080f7f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-10.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-10.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 1c8cd57cf7d603b41729ea44922b052d74111397eebfc8e456620b9346d1907f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-10_black.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-10_black.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 035dc4a44020eac4f4d7ad8faab5fb1fdb65069e5b6606ab94bf9c37b5c06b0c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-10_black_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-10_black_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 f3a377ce9104594ca7d01b0247daa8ddbd2809b800c0f3710713b7dd6f569cf6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-10_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-10_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 da89304c4aa1dffd7ff5ec2593ec70a4baecaf06882558d48e30b82d152981bf
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-10_white.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-10_white.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 1fa5e87b1e82ec83442de8c14034c0ee9bffc7d2b6402209095b6f53eb46bb8b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-10_white_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-10_white_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 ef2ccbdd3efc0e2ba10fb9398456e7de7ba78089ebfb2c256007f2e748e3d2a4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-1_black.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-1_black.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 fc31484a045fcb91cfd54de763aa9d7a6a225a8947f8420ff1e3a45ad1efd713
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-1_black_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-1_black_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 202a66e13ab49275c9f4f051e1f404a757b86712a8b99606a5f3fe52b7930122
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-1_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-1_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 2a996d6311d9fdf83f8498e3e6758249ecd2c4769bd95b4b24c290730a0cb749
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-1_white.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-1_white.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 760ce5040c4e3ca4877c58eec51e76773a1673c37573b80c38658de8bb5a3c5d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-1_white_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-1_white_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 cbff6262f069741febf105bd548590bc7be0f8957eb295bf6045c10cf305b1d5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-2.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-2.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 3dc68d7d624183567febbe8410afc1d14ec376ce2d718b2c7f11f5ff262a3e97
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-2_black.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-2_black.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 6bbf6d385201793dcefe09b2660b105e63e444bb2812839dbeebd1654135bc85
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-2_black_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-2_black_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 7698f47d8bcabc51552284ebb2a45bd5c6ab4d22ccf9d2a049293426f921322a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-2_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-2_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 875e35037ffaf16049330e41204a084ddf2d2ba563641cb54dc0ff51bd16fe1d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-2_white.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-2_white.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 fdcf2536cd5dcff81833796a81ea93c42844dea65229bb7a09049a132b3072e6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-2_white_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-2_white_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 0f4c13f6bd57b47f1c724865347f3c32f766fab583b5e70dd9e65f442eee4511
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-3.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-3.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 746f16709a3aa269f6ed144ad029c770157c34847223421d151c572d4507594d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-3_black.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-3_black.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 e8f3874feccdaa1dcc6598df228e4213ee7e85743764c432200c3180daa23c81
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-3_black_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-3_black_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 271ee031248c5041a54ea5aefc9adba7b9ddcffa976293d7b4462ec1000d6f55
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-3_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-3_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 9df78d867a83f68509a732eada2de0558b4395e86fd8aa49e8a99973f382327c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-3_white.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-3_white.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 7854306e4f34643979b4910b6951a74c9daf9eb3ac5011805c04194f5997f9ae
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-3_white_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-3_white_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 c7864f330a7519898322dbb8309d3bee7a1ec879107bae29eb417f73a620ed99
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-4.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-4.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 c0cf549d0072397af6c677c619adc39eb22435f31bc646617b7a6e0ef18bfb56
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-4_black.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-4_black.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 29c2e35ff664c1cdf30756d3df199478ddd3465fee9d161a0ced1d084f954d04
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-4_black_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-4_black_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 35d0641c38944694d8d6dd703729a31618d24e1ba1389f94d9a3863f4756cd44
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-4_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-4_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 31b184f4783251c19d8a00c27479c56a4abae4b8f3c1db3d1f8e7a8c3c55e8b4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-4_white.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-4_white.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 2ff534e0b3919293ad7271ea604ec6f336946d15d948356e9b2e28bd8cb6c0f8
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-4_white_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-4_white_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 4a9fc6ed96c67753ab615da96cde8d0d205edae074ee3a8abdcab449e118870b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-5.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-5.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 42860ba89acb468f273d5e7c81717f0dc465c6201bdee2fe4665cbf638201ab9
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-5_black.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-5_black.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 15b61167e1994a477a17bb0e2c2f44784bdfa0e2959b3b7a2612cb98565df058
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-5_black_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-5_black_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 c46a1c877863ec8ec28eaa3c08cd3868804ad91793b21b1d5c5befaaeb0f6705
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-5_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-5_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 2ca2e802543fde697d2ec37e6d9f5a2b7785757e808fd9ad4ba126e665f47bbf
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-5_white.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-5_white.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 4069017689d0dc068b16617273477b9b1455c97988b314b53f09cc8c65e96695
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-5_white_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-5_white_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 d2d3b5e8dddd5b6905032e8351991c964441c912d97cb3d4ff76792470233565
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-6.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-6.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 553f2767549296ee516066f1e49015a5b8061e13487b33d514f6421d3b76c447
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-6_black.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-6_black.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 d61c4eefb946a723a56bd74123ae719c0dd8d53a6c80e1d189cd31ef38b8b91a
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-6_black_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-6_black_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 636f2a28129467e15ddf3524866df053cb12b621cc95df6ca909b272280e7dbf
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-6_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-6_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 c7d9a579cbf70963a1beea420ac8c8696da2bacff53d3aa1d39f0fa69d93bd42
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-6_white.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-6_white.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 b33a3cd9af7550095de887557b643cbfedb344411c0f3e18ae103f0f4075587b
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-6_white_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-6_white_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 294392240db88d20722494f4b2d3019199caa88bdd76ec453605da0c5f51735d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-7.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-7.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 04f3c2d0ee884f01931ea1d96ba7fd7908b97930e22209b057c1c186965f7cfb
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-7_black.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-7_black.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 056133085de811431a7fe886616bb6584dc2cd457fed225e7774103b235bf61f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-7_black_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-7_black_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 7976b6a4ae9070f2c0c93571dd3b6a8969ec09734e4b74cff290dbb6ff2dd923
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-7_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-7_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 e0bf75bf75197f45fd227e4b13ff17270add9fc9c90a8b03d768d257741e05ed
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-7_white.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-7_white.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 df4a46cd449819c2a0e6efd4f32913063171968badbf5ddce8b1df1bf752ec3c
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-7_white_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-7_white_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 e2eeaa7d5d0d57e2a4c0800b851b1c6b64d0e8aa59179a393f7e3d2ce8deb2d7
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-8.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-8.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 c969e4d044d5c01a8d1d565ceacd5baf2a09e01098760bf3d81939db944d5d7f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-8_black.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-8_black.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 53ebb88cc17955e2934affebe5296aa705e817b1fc5941ba330f210c7abc18f6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-8_black_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-8_black_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 898803bfef82fd573d5b683ce364d7f75ef21ef4f6b593274409a7d332b689cb
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-8_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-8_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 1c4575800a0e8af0a90fad02dc63aa7cadb7ae83caa9d819c71f392be0836685
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-8_white.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-8_white.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 3afc3bed984d3e67bcc9ba355b216c3423fd03df87a3d938e7b00cdc80392a48
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-8_white_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-8_white_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 a23a5d46abb77b12fd38da4a9003c7d74d6e16795e6e7b4eff3e2b7515895437
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-9.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-9.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 35fac7b86c394825a3ec21d88fc634ea0b194270fd9d2fd70666f2bf726468a4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-9_black.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-9_black.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 2e199b6ca00b80a514b2ffad04bd8c088f5eb0e3c6c7f93986fb153d42ea9e84
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-9_black_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-9_black_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 bf153562376c526dae11f62c20763f71215d83855e11df7154d0977d4558faf8
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-9_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-9_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 f9d16dfd9daff120420e662e76b78994f4392fd8828b15cdcbff329c267993f8
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-9_white.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-9_white.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 633cea2e1c3c24e4b351965480dd09807f47a20af8ca19d4f835b5832450e3e5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  lock-9_white_notification.ico
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\build\assets\images\menubar-icons\win32\lock-9_white_notification.ico
                                                                                  • Size 44KB
                                                                                  • SHA256 04dd427b9686d43e9e28dae203d3f0e74e99df686d33f5f9c9e7cf39612c0258
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  Cargo.toml
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\Cargo.toml
                                                                                  • Size 634B
                                                                                  • SHA256 a723ef05cf7e016689e1a42572141a5efbb4406ab452f51b5bac0e77d7e1034e
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  index.node
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\dist\win32-arm64-msvc\index.node
                                                                                  • Size 335KB
                                                                                  • SHA256 feea2e57886033a6156a6bd30b69c1537a194a4e4664a23aba4f2bd1720ef3d5
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  index.node
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\dist\win32-x64-msvc\index.node
                                                                                  • Size 346KB
                                                                                  • SHA256 d5efde32026db725889557150d8285a351d451f258534911089c51b71ebf4bb6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  eslint.config.mjs
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\eslint.config.mjs
                                                                                  • Size 116B
                                                                                  • SHA256 6ea80e9b70e892381bfda0a9d8292edefb076e12433787b6bcc5d893a7ebcf3d
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  index.cjs
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\lib\index.cjs
                                                                                  • Size 1KB
                                                                                  • SHA256 ace40d17f3e7b29d7ce0c4c5e745dd80a815df2c4163f94c56c2a8aa31c4d9df
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  index.d.cts
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\lib\index.d.cts
                                                                                  • Size 496B
                                                                                  • SHA256 5631f1ae3f5299d0fd996645f26d89929d44c7f12b359871983a9de897315cb5
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  index.d.mts
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\lib\index.d.mts
                                                                                  • Size 29B
                                                                                  • SHA256 367b9e4e891801071f84072950f452e70bb63372ab988d06479cfb0d2e848983
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  index.mjs
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\lib\index.mjs
                                                                                  • Size 84B
                                                                                  • SHA256 36958d9b1a52bb0e2c7eb6c1ff18715596a5c3d0b802a6902518d9a35fadb08c
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  load.cjs
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\lib\load.cjs
                                                                                  • Size 489B
                                                                                  • SHA256 ca628860af1019d27cfaa24a47a1478518bf03f50a878f91599a46f8e395a8eb
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  load.d.cts
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\lib\load.d.cts
                                                                                  • Size 11B
                                                                                  • SHA256 8e609bb71c20b858c77f0e9f90bb1319db8477b13f9f965f1a1e18524bf50881
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  package.json
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\package.json
                                                                                  • Size 1KB
                                                                                  • SHA256 ba0218790a526bf877fe276d5326454fc81d2717738c0c430ed7d99484e1ff69
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  index.cts
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\src\index.cts
                                                                                  • Size 784B
                                                                                  • SHA256 b6df7fbd727bcc317928ff64022cc9ebae8c817d3d6c7ffa887be9b4e4f1478f
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  index.mts
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\src\index.mts
                                                                                  • Size 85B
                                                                                  • SHA256 970e3db6be99fa63f7c08b2131888b4b5fad6e1a3eac5637c07e5312767f01e4
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  load.cts
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\src\load.cts
                                                                                  • Size 399B
                                                                                  • SHA256 08a63a0b0ba1003ee8c50dc634ec1327d7e47b9558c3da72bb05b241a6bc514a
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  tsconfig.json
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\tsconfig.json
                                                                                  • Size 158B
                                                                                  • SHA256 0e26ad511ca4f5bcebd90ff65e7821932b0f07185ab1413ec7e2a475b5f13cc8
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  fs.rs
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\windows-utils-rs\fs.rs
                                                                                  • Size 1KB
                                                                                  • SHA256 8dcc939b1a3d37475e39958d0719d730edbee7a94891f8dfffc1ac242f294da1
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  lib.rs
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\windows-utils-rs\lib.rs
                                                                                  • Size 331B
                                                                                  • SHA256 dd7b758f1f141850180336bc04d9b96e042e5832dfad732be692df31bd797c80
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  shortcut.rs
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\app.asar.unpacked\node_modules\windows-utils\windows-utils-rs\shortcut.rs
                                                                                  • Size 6KB
                                                                                  • SHA256 66c8205b8632e737d98372fa315fdde893b9fa1de49f0ff727ccd4e2d80b18b3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  ca.crt
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\ca.crt
                                                                                  • Size 2KB
                                                                                  • SHA256 37182bc47c1cff334eb3c670c9a7d643d14774015178be5a3591b5633a77d597
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  elevate.exe
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\elevate.exe
                                                                                  • Size 105KB
                                                                                  • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  mullvad-daemon.exe
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\mullvad-daemon.exe
                                                                                  • Size 20.0MB
                                                                                  • SHA256 6618b63fcc575743db2478f64f4ac206d8e495b19c86cbde6ff9a2ec6950467e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  mullvad-problem-report.exe
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\mullvad-problem-report.exe
                                                                                  • Size 5.5MB
                                                                                  • SHA256 c89e7490dce4e0c2081c62d2523790a93b71f2c003fee55d9b28f7577314b97d
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  mullvad-split-tunnel.sys
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\mullvad-split-tunnel.sys
                                                                                  • Size 96KB
                                                                                  • SHA256 10cf25bbcfe51fd663a1fec88a98e9b858f3a579589bb2ec496b66e4fdd1b201
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  mullvad-wireguard.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\mullvad-wireguard.dll
                                                                                  • Size 784KB
                                                                                  • SHA256 222f42da46686ba2603337b2c5e90a3d68e46897e9dff79c3bf7cc9275cce298
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  mullvad.exe
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\mullvad.exe
                                                                                  • Size 6.7MB
                                                                                  • SHA256 1299777400729a0f39be2e331b8f64026f4222f9139c8f328f6ab1d7525b9fc6
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  relays.json
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\relays.json
                                                                                  • Size 611KB
                                                                                  • SHA256 fe86c9c168fb75e4f710851de47ffb6ea8fe57a5f9e84a2911427596ffd4b083
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  wintun.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\resources\wintun.dll
                                                                                  • Size 417KB
                                                                                  • SHA256 e5da8447dc2c320edc0fc52fa01885c103de8c118481f683643cacc3220dafce
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  snapshot_blob.bin
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\snapshot_blob.bin
                                                                                  • Size 394KB
                                                                                  • SHA256 eb484904e06c217beaafd2cd6847eb909225a5f0a4bf814cb1ec22653e6bd2e3
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  v8_context_snapshot.bin
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\v8_context_snapshot.bin
                                                                                  • Size 758KB
                                                                                  • SHA256 1fa1cdd08423809344fe15fac2d9d1ec604cc3ea5af4b944d89a51b1e98c8665
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  vk_swiftshader.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\vk_swiftshader.dll
                                                                                  • Size 5.4MB
                                                                                  • SHA256 a089801e624e1c6809f33f55b328b3ebce33d7cc6b80237541769dddf166c975
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  vk_swiftshader_icd.json
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\vk_swiftshader_icd.json
                                                                                  • Size 106B
                                                                                  • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  vulkan-1.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\7z-out\vulkan-1.dll
                                                                                  • Size 922KB
                                                                                  • SHA256 781d6bad9dc2ad30ede89a89a056e5538fed8e3b1d25c669201233c02ab7c1a4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  StdUtils.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\StdUtils.dll
                                                                                  • Size 100KB
                                                                                  • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  System.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\System.dll
                                                                                  • Size 12KB
                                                                                  • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  UAC.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\UAC.dll
                                                                                  • Size 14KB
                                                                                  • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  WinShell.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\WinShell.dll
                                                                                  • Size 3KB
                                                                                  • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  mullvad-setup.exe
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\mullvad-setup.exe
                                                                                  • Size 5.9MB
                                                                                  • SHA256 a1537c6a2230e3082dc842504292068cb2d587d74a8d6d0a72347302b6c63117
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  mullvad_nsis.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\mullvad_nsis.dll
                                                                                  • Size 343KB
                                                                                  • SHA256 60a74c5c5e74bda7c0df7093accaeca471f25219de6bb566b35c48e0aa53c39f
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  nsDialogs.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\nsDialogs.dll
                                                                                  • Size 9KB
                                                                                  • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  nsExec.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\nsExec.dll
                                                                                  • Size 6KB
                                                                                  • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  nsis7z.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\nsis7z.dll
                                                                                  • Size 424KB
                                                                                  • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  winfw.dll
                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy727D.tmp\winfw.dll
                                                                                  • Size 486KB
                                                                                  • SHA256 32c7a6ba5f36cbd9cdc67875d47ed4c03011df2ecc07f13ef6122ebc27763eb4
                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                  Submit Download

                                                                                  default.dic
                                                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                  • Size 2B
                                                                                  • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                  • MD5 SHA1 SHA512
                                                                                  Submit Download

                                                                                  Mullvad VPN.lnk
                                                                                  • Path C:\Users\Public\Desktop\Mullvad VPN.lnk
                                                                                  • Size 1KB
                                                                                  • SHA256 8355ba7530bab9d311a2d3c0e4f8de2a9a12b188a81aa5ea55f4377e45f73e38
                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                  Submit Download

                                                                                  memory/2596-1921-0x00007FFE898E0000-0x00007FFE898E1000-memory.dmp
                                                                                  Download

                                                                                  memory/2596-1922-0x00007FFE89F30000-0x00007FFE89F31000-memory.dmp
                                                                                  Download

                                                                                  memory/3976-1740-0x000000000DA70000-0x000000000DC89000-memory.dmp
                                                                                  Download

                                                                                  memory/3976-1590-0x0000000002EA0000-0x0000000002EA1000-memory.dmp
                                                                                  Download

                                                                                  memory/5792-3885-0x0000024D444B0000-0x0000024D444B1000-memory.dmp
                                                                                  Download

                                                                                  memory/5792-3890-0x0000024D444B0000-0x0000024D444B1000-memory.dmp
                                                                                  Download

                                                                                  memory/5792-3886-0x0000024D444B0000-0x0000024D444B1000-memory.dmp
                                                                                  Download

                                                                                  memory/5792-3887-0x0000024D444B0000-0x0000024D444B1000-memory.dmp
                                                                                  Download

                                                                                  memory/5792-3888-0x0000024D444B0000-0x0000024D444B1000-memory.dmp
                                                                                  Download

                                                                                  memory/5792-3889-0x0000024D444B0000-0x0000024D444B1000-memory.dmp
                                                                                  Download

                                                                                  memory/5792-3881-0x0000024D444B0000-0x0000024D444B1000-memory.dmp
                                                                                  Download

                                                                                  memory/5792-3880-0x0000024D444B0000-0x0000024D444B1000-memory.dmp
                                                                                  Download

                                                                                  memory/5792-3879-0x0000024D444B0000-0x0000024D444B1000-memory.dmp
                                                                                  Download

                                                                                  memory/5792-3891-0x0000024D444B0000-0x0000024D444B1000-memory.dmp
                                                                                  Download

                                                                                  memory/7056-1627-0x000002C8DB4E0000-0x000002C8DB500000-memory.dmp
                                                                                  Download

                                                                                  memory/7056-1592-0x000002C8DA100000-0x000002C8DA200000-memory.dmp
                                                                                  Download

                                                                                  memory/7056-1626-0x000002C8DADD0000-0x000002C8DADF0000-memory.dmp
                                                                                  Download

                                                                                  memory/7056-1596-0x000002C8DB120000-0x000002C8DB140000-memory.dmp
                                                                                  Download

                                                                                  memory/7056-1591-0x000002C8DA100000-0x000002C8DA200000-memory.dmp
                                                                                  Download

                                                                                  memory/7056-1593-0x000002C8DA100000-0x000002C8DA200000-memory.dmp
                                                                                  Download