Overview

overview

9

Static

static

1

odin4

windows10-ltsc_2021-x64

9

Analysis

  • user interaction
    yes
  • max time kernel
    1798s
  • max time network
    1802s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    11/07/2026, 14:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    odin4
  • Size 3.6MB
  • Sample260711-rkkmfaes21
  • SHA256 6754aa54f2abe6e99ece32414cd34c8b23b28dbddde537a33203036813637c3b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
discoveryinstallerpersistenceransomware

Malware Config

Signatures

  • Contacts a large (4050) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 26 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 4 IoCs

    Inno Setup installer

    installer
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 8 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\odin4
    1⤵
      PID:2916
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\DenyWrite.mht
      1⤵
      • Suspicious use of WriteProcessMemory
      PID:3888
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument C:\Users\Admin\Desktop\DenyWrite.mht
        2⤵
        • Loads dropped DLL
        • Drops file in Windows directory
        • Checks processor information in registry
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Modifies registry class
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:2264
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x25c,0x260,0x264,0x258,0x280,0x7ffa17e4c188,0x7ffa17e4c194,0x7ffa17e4c1a0
          3⤵
            PID:4868
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,7807251799464181460,15260478962483668651,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
            3⤵
            • Downloads MZ/PE file
            • System Time Discovery
            PID:2372
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,5631162628258995310,15892371115968410544,262144 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:2
            3⤵
              PID:1204
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,9206727394242208147,11104990988816563133,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:8
              3⤵
                PID:2256
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,10556636494405747892,6172400549060408891,2097152 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
                3⤵
                  PID:1176
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,14395547067864084399,18087543135802013290,2097152 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
                  3⤵
                    PID:544
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,8524343529154933029,12592429809469007561,2097152 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
                    3⤵
                      PID:4648
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,2192827574088063547,10508287966155426793,2097152 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
                      3⤵
                        PID:1160
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4572,i,2784464785095555849,11162231188735691562,2097152 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:1
                        3⤵
                          PID:1980
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,7750001929728736848,3798232167029368435,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:8
                          3⤵
                            PID:3908
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3608,i,6253681536992583076,7894375219637595313,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:8
                            3⤵
                              PID:2408
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,17691538775199057168,11458744295913560548,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:8
                              3⤵
                                PID:4456
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3544,i,7791061995465310188,17044665557296906807,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:8
                                3⤵
                                  PID:5008
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,10635275108232539101,2639294724907473843,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
                                  3⤵
                                    PID:4756
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,10635275108232539101,2639294724907473843,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
                                    3⤵
                                      PID:4808
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,10836540291167290421,2410955196321837037,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
                                      3⤵
                                        PID:3372
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,7297310792870042910,1267901737780125465,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
                                        3⤵
                                          PID:4296
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,12990400982861905937,14903029388396739571,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
                                          3⤵
                                            PID:4772
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,14723305016499637734,18223672176744273811,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
                                            3⤵
                                              PID:1412
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,3129801971981432076,386900883553845543,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
                                              3⤵
                                                PID:1368
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4516,i,14490591616611396424,2218883892704399033,2097152 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:1
                                                3⤵
                                                  PID:6120
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=4884,i,13603489502213901185,698540341276910143,2097152 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:1
                                                  3⤵
                                                    PID:3996
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6676,i,3915091751077136355,16685801967265634950,2097152 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:1
                                                    3⤵
                                                      PID:3648
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6344,i,15313813175669832145,3733958506779946985,2097152 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:1
                                                      3⤵
                                                        PID:5244
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6676,i,6348547291697289058,8806070656523733192,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:8
                                                        3⤵
                                                          PID:2080
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=4424,i,1447116005126659891,5412800728107668791,2097152 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:1
                                                          3⤵
                                                            PID:4512
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6468,i,12577149884692368610,2460393837073641413,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:8
                                                            3⤵
                                                              PID:6008
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=596,i,1960906359987028519,3193785919156602356,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:8
                                                              3⤵
                                                                PID:5780
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6724,i,14510432376469844379,5875741792715091795,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:8
                                                                3⤵
                                                                  PID:5816
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6752,i,17554657087958108128,9062554007418363371,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:8
                                                                  3⤵
                                                                    PID:4788
                                                                  • C:\Users\Admin\Downloads\SoulseekQt-2026-4-30-64bit.exe
                                                                    "C:\Users\Admin\Downloads\SoulseekQt-2026-4-30-64bit.exe"
                                                                    3⤵
                                                                    • Executes dropped EXE
                                                                    • System Location Discovery: System Language Discovery
                                                                    PID:2148
                                                                    • C:\Users\Admin\AppData\Local\Temp\is-5L89B.tmp\SoulseekQt-2026-4-30-64bit.tmp
                                                                      "C:\Users\Admin\AppData\Local\Temp\is-5L89B.tmp\SoulseekQt-2026-4-30-64bit.tmp" /SL5="$E0042,18681688,832512,C:\Users\Admin\Downloads\SoulseekQt-2026-4-30-64bit.exe"
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • Drops file in Program Files directory
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      • Suspicious use of FindShellTrayWindow
                                                                      PID:1620
                                                                      • C:\Program Files\SoulseekQt\SoulseekQt.exe
                                                                        "C:\Program Files\SoulseekQt\SoulseekQt.exe"
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        • Suspicious behavior: AddClipboardFormatListener
                                                                        • Suspicious behavior: GetForegroundWindowSpam
                                                                        • Suspicious use of FindShellTrayWindow
                                                                        • Suspicious use of SendNotifyMessage
                                                                        • Suspicious use of SetWindowsHookEx
                                                                        PID:4736
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,16124785460994450517,13104782654987849792,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
                                                                    3⤵
                                                                      PID:6012
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5716,i,10254204982737328852,2588315442815128835,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:8
                                                                      3⤵
                                                                        PID:2580
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=800,i,1960706638943576183,16997691792633491247,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:8
                                                                        3⤵
                                                                          PID:3760
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4032,i,4628653136911314694,16645438560565327260,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:8
                                                                          3⤵
                                                                            PID:4180
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7004,i,15087954319971824731,5279189434882866002,262144 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3004 /prefetch:8
                                                                            3⤵
                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                            PID:1376
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,17003753007536802679,7496138227945607771,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:8
                                                                            3⤵
                                                                              PID:520
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,7952797925498549904,11876777349792434272,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3408 /prefetch:8
                                                                              3⤵
                                                                                PID:3816
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,17853065147522920420,783251973672072532,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8
                                                                                3⤵
                                                                                  PID:528
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4036,i,15636204641579456277,1710215238393587509,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
                                                                                  3⤵
                                                                                    PID:5900
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7080,i,11566303255738971517,9644669969957430619,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3360 /prefetch:8
                                                                                    3⤵
                                                                                      PID:5108
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7020,i,13007243289548628395,8179966956203740659,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=1044 /prefetch:8
                                                                                      3⤵
                                                                                        PID:4716
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,4026693785668313345,5706729794205387306,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3004 /prefetch:8
                                                                                        3⤵
                                                                                          PID:1456
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,2669679597508720669,4106434960904837545,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:8
                                                                                          3⤵
                                                                                            PID:1236
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,11931832608926512128,13586550112987153825,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:8
                                                                                            3⤵
                                                                                              PID:4936
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,609358496334701516,2622482099100872955,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:8
                                                                                              3⤵
                                                                                                PID:2344
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,925545834284818400,16777919783977687682,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:8
                                                                                                3⤵
                                                                                                  PID:5100
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6836,i,9911880632012703900,5954386586453881074,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:8
                                                                                                  3⤵
                                                                                                    PID:5524
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7160,i,8529196034513998728,9664815745123095267,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:8
                                                                                                    3⤵
                                                                                                      PID:5496
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3100,i,720240525263163916,11409994469157923461,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:8
                                                                                                      3⤵
                                                                                                        PID:1856
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6748,i,11187259811287247785,6739645732059581556,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:8
                                                                                                        3⤵
                                                                                                          PID:3868
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3352,i,15580945381914053641,12270081977836208937,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:8
                                                                                                          3⤵
                                                                                                            PID:5600
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6872,i,15920266538997626937,1616896080877231397,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:8
                                                                                                            3⤵
                                                                                                              PID:2652
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3352,i,9305935613466396208,5099939483357226450,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:8
                                                                                                              3⤵
                                                                                                                PID:5444
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,17401280592612002823,9449448600974058478,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:8
                                                                                                                3⤵
                                                                                                                  PID:4848
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6848,i,11958804362862475890,8035784753018344707,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:8
                                                                                                                  3⤵
                                                                                                                    PID:5228
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7096,i,13542826001184299765,5709110111005788120,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:8
                                                                                                                    3⤵
                                                                                                                      PID:5512
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2204,i,2245211830088346752,5482977818591206746,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3104 /prefetch:8
                                                                                                                      3⤵
                                                                                                                        PID:3544
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,4725055860599070262,1464593871917398251,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3104 /prefetch:8
                                                                                                                        3⤵
                                                                                                                          PID:4820
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6864,i,6962825068470171496,17199065092591349181,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6856 /prefetch:8
                                                                                                                          3⤵
                                                                                                                            PID:4400
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,6855797351717486539,9751431581539176137,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:8
                                                                                                                            3⤵
                                                                                                                              PID:5124
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,11238278600953301135,7711677860859597040,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:8
                                                                                                                              3⤵
                                                                                                                                PID:776
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,10428444733102263247,17351885812016427605,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:8
                                                                                                                                3⤵
                                                                                                                                  PID:4440
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6864,i,10319821158150655045,16570132444783799426,524288 --field-trial-handle=2284,i,11793586701742819740,16403270627135877933,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:8
                                                                                                                                  3⤵
                                                                                                                                    PID:5096
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                1⤵
                                                                                                                                  PID:5012

                                                                                                                                Network

                                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                                      Replay Monitor

                                                                                                                                      Loading Replay Monitor...

                                                                                                                                      Downloads

                                                                                                                                      Qt5Core.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\Qt5Core.dll
                                                                                                                                      • Size 6.1MB
                                                                                                                                      • SHA256 45cfcea0a1ed9e3cae15241adfd31a9a5e7af770e65d9651d6e7717f5c39d860
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Qt5Gui.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\Qt5Gui.dll
                                                                                                                                      • Size 6.2MB
                                                                                                                                      • SHA256 bf5c35736c1a2df3a9697a83203746e7738c01e53d1bac4bdd81c8805b0c9cbf
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Qt5Multimedia.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\Qt5Multimedia.dll
                                                                                                                                      • Size 954KB
                                                                                                                                      • SHA256 6c4ced36465a0a167ff3552ad2c877d271be1c61e081fae5b43ffa343189963b
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Qt5Network.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\Qt5Network.dll
                                                                                                                                      • Size 1.6MB
                                                                                                                                      • SHA256 0b6959abe25aea27ca6c17c562983495bdfca6ec0302b1c075774a8516655ed4
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Qt5Widgets.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\Qt5Widgets.dll
                                                                                                                                      • Size 5.4MB
                                                                                                                                      • SHA256 862b1ec18164922f3b818f43e13b4d6cb3fafe134eb89b7af3ca33b25e7985bb
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      SoulseekQt.exe
                                                                                                                                      • Path C:\Program Files\SoulseekQt\SoulseekQt.exe
                                                                                                                                      • Size 3.1MB
                                                                                                                                      • SHA256 e9e4374e677e740e1d3b653cb796c927515b49d8a8a0cc4e64dae8b4edc6e969
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      qgenericbearer.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\bearer\qgenericbearer.dll
                                                                                                                                      • Size 103KB
                                                                                                                                      • SHA256 ff1b3c7098b616c61a4bf1a937aa35e31c7a6f173d4c1b765ef57b4f329426dc
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      qsvgicon.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\iconengines\qsvgicon.dll
                                                                                                                                      • Size 49KB
                                                                                                                                      • SHA256 9dc8ef3b95da5ef2071487cf1edab567e04b938c5fdc86805815c4b3c3e0ab6e
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      qgif.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\imageformats\qgif.dll
                                                                                                                                      • Size 44KB
                                                                                                                                      • SHA256 b78602469db714b6117d0c45f1a704d99f8f04914eb736a7cb0278a3aef702ed
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      qicns.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\imageformats\qicns.dll
                                                                                                                                      • Size 52KB
                                                                                                                                      • SHA256 13d90e9de9d8abd1e145c6475e7731294ed5a4b2b0971de2092fe414b0df824a
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      qico.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\imageformats\qico.dll
                                                                                                                                      • Size 43KB
                                                                                                                                      • SHA256 9c0d61cccf2bc8075a41dad0e1c414292ee4417fae1879e3cd2b93a688dd47b5
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      qjpeg.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\imageformats\qjpeg.dll
                                                                                                                                      • Size 409KB
                                                                                                                                      • SHA256 e244f263ec2b6ae095f788a7f7f1586986752e4a9211245906cdcda10e3c3fc8
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      qsvg.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\imageformats\qsvg.dll
                                                                                                                                      • Size 36KB
                                                                                                                                      • SHA256 b29d9967afd0d1e63364eaefb34277474bf49b05c994c3d00f78b126e938632f
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      qtga.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\imageformats\qtga.dll
                                                                                                                                      • Size 34KB
                                                                                                                                      • SHA256 2908d8b079592a7a1ef0a341f315748f8d9d9e6b743e6123f5605e92e7bff5fb
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      qtiff.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\imageformats\qtiff.dll
                                                                                                                                      • Size 513KB
                                                                                                                                      • SHA256 203a02b7a9e2a16744fe78863ae324aa5282446fe5cd1550bbf1066500f1336f
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      libgcc_s_seh-1.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\libgcc_s_seh-1.dll
                                                                                                                                      • Size 711KB
                                                                                                                                      • SHA256 cb96718f7ef83319472e4ca3fcdf6d002226d3a6ff4d0d64b6e221aba58016a3
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      libstdc++-6.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\libstdc++-6.dll
                                                                                                                                      • Size 2.2MB
                                                                                                                                      • SHA256 d747bb93d4e936ddd57b6258355a977e210ad308c0f832d3d47fab6f9191c2ce
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      libwinpthread-1.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\libwinpthread-1.dll
                                                                                                                                      • Size 85KB
                                                                                                                                      • SHA256 8ae45c5928698df7da6780e282bc5053a7b1a87a1cba0a2083aa26c473c3f7f9
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      qwindows.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\platforms\qwindows.dll
                                                                                                                                      • Size 1.8MB
                                                                                                                                      • SHA256 2e7daacb512065e19751e0cce40b23506ec7e1a2f0c6d541b85061868995ad56
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      qwindowsvistastyle.dll
                                                                                                                                      • Path C:\Program Files\SoulseekQt\styles\qwindowsvistastyle.dll
                                                                                                                                      • Size 177KB
                                                                                                                                      • SHA256 38cb1b99d86cb0dcb443627ef659b40879a5d3308931ac410308a672894ff6c3
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      blocklist
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                      • Size 105KB
                                                                                                                                      • SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      settings.dat
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                      • Size 280B
                                                                                                                                      • SHA256 ce9a45431fb053f46812395470c2ff6c9ccd1803075551fd01e4a51c3c4ecd4b
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      settings.dat
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                      • Size 280B
                                                                                                                                      • SHA256 c0f239c7ed32f1c492df19d463edf2073ad4d721081b4a3b14c372062cca32ba
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      LOG.old
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                      • Size 334B
                                                                                                                                      • SHA256 a582d4c5abf6a76e5154ecdec4b9735171300f289b931416ea7e7b0df0a6daaf
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      LOG.old
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                      • Size 352B
                                                                                                                                      • SHA256 d525f5ca857ddd536c5a64b5bb9b130a7323cbcc8975c555623fdabf6220f24c
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      BookmarkMergedSurfaceOrdering
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                      • Size 6B
                                                                                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      the-real-index
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                      • Size 3KB
                                                                                                                                      • SHA256 5ec21c4f6148d190395d82b150225a04ebc85373ca05aa975cfb1d0e3d215991
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      the-real-index
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                      • Size 3KB
                                                                                                                                      • SHA256 e5abf33b5fe8e4be1d9737390ca46b24d0ebb5d123ad2368efe68ab2ffdfa70c
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      the-real-index~RFe585ce0.TMP
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe585ce0.TMP
                                                                                                                                      • Size 3KB
                                                                                                                                      • SHA256 fbe0d6c62255c5fb7394c9530453f53751e99c89561769171a1f39192064f12d
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      SiteList-Enterprise.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                      • Size 2B
                                                                                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      Edge Profile.ico
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                      • Size 70KB
                                                                                                                                      • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      HubApps
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                                      • Size 106KB
                                                                                                                                      • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Network Persistent State
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 59413f5c2c7b779015b56de8d230044b0a04b4aa168c63d1f8593d90a548cd47
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Network Persistent State
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                      • Size 111B
                                                                                                                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Network Persistent State
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 c92fcc34be709362ba7d1272f9d37d3a61d4d03943cdaeeea6bf5dd8d43c1096
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      SCT Auditing Pending Reports
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                      • Size 2B
                                                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      Preferences
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                      • Size 13KB
                                                                                                                                      • SHA256 3c2b42e48b9d0f4a2bd5301ead7e892f8b3e06ae60da43d77456a72aa7605173
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Preferences
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                      • Size 14KB
                                                                                                                                      • SHA256 28f729fbd9bb0839e79c5d607d827d27f167bc8160cb6bc30c9d3062dbf206cd
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Preferences
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                      • Size 14KB
                                                                                                                                      • SHA256 b1d74fe04c9e33d2b8021242d46c290a47c89cc2aab24eb87120ac1b6551ef16
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Preferences
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                      • Size 14KB
                                                                                                                                      • SHA256 d579c299272ccbf6e0809229f0eb89f25c4e707886b1ea951ab3e3ca6f9975fa
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Secure Preferences
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                      • Size 35KB
                                                                                                                                      • SHA256 f6ccd76ce1bb0e9b590baff339970e4d438f59aed71f669b14e9d88a13150ace
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      the-real-index~RFe5ca2df.TMP
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6265b350-bfe0-4fa4-9770-1f37078466b1\index-dir\the-real-index~RFe5ca2df.TMP
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 c5438234b8da344ad71cdf1fe579c49ac5fdae1856680a76774ae189b2e300a7
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      index.txt
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                      • Size 371B
                                                                                                                                      • SHA256 6259ff8be0bcc040b08f994aae58b22233463a40542e6c9c5c89031ce4316611
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      sync_diagnostic.log
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                      • Size 4KB
                                                                                                                                      • SHA256 09064dbe9eb7accab53eff3551df6348181b14fd14d437647d207d869aa8e63e
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      4d287f08-da65-484b-b588-1040a10cb0dc.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4d287f08-da65-484b-b588-1040a10cb0dc.tmp
                                                                                                                                      • Size 22KB
                                                                                                                                      • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Local State
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                      • Size 30KB
                                                                                                                                      • SHA256 56397d404938b7e1fa58a2d9dda8d32269fa6279d6578a414c50537e87a830e6
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Local State
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                      • Size 19KB
                                                                                                                                      • SHA256 b0f81db0bbe7a71e15fb80ea05267374057a174081d35f4c1a6b0047367de863
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Local State
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                      • Size 8KB
                                                                                                                                      • SHA256 a4ff3a90110d02e7dfdc2d4ba725c7c382272f64c4c5d29f44a33c0fdae4f518
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Local State
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                      • Size 19KB
                                                                                                                                      • SHA256 eeffe51e56448a0a25b1a871a61206c1df28a5355d4b224f10ab77051d1b8c29
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Local State
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                      • Size 19KB
                                                                                                                                      • SHA256 d24126028d909ebb4df7f59bfc43baa1508fcbe9dea158398faf45f69392f77d
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Local State
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                      • Size 8KB
                                                                                                                                      • SHA256 81ee3022bbd8d282e1baf4ed35297b1af759c63fdbaf106c5842e61e169afbae
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 492B
                                                                                                                                      • SHA256 9107e613905835c00077a499d2faa20bb70b974e6309d1f2f33ae52933318f07
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 132B
                                                                                                                                      • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 612B
                                                                                                                                      • SHA256 98d9b184e4c7220b5aaf7ae412b0c1b3f32e3dc4933afcf852538b8082017b9e
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 252B
                                                                                                                                      • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 1d590f1765c6036928c180dc5eeeec4434f8c3ebfc52389dcaffbe7771e97c90
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 732B
                                                                                                                                      • SHA256 a5548ca519cf47ecb420c8f1299a8a50517fa463459a704ef2ff17c4db35117a
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 21075672ed04fcc0ad86c96036a015a0479bc539f9eb22ed2ee07d5f51ed51d5
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 8f05feb27187e1276ba99ffaabdbe9b34ba874b4b4f64d3da692fb090d8992e7
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 852B
                                                                                                                                      • SHA256 142a7cc7a4933a976aae32a9d04e1758464486092207243f09edbbad51f1d934
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 7ae3abeff1a7ac2b396b3e38dc9d2900c37a4fa3623cd6a74cdc34b502978149
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 2b7c607fd6a639934c6f7311f36aa760dd4a600f84b9f8e2d066832856488091
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 df444b5ed91161c5d2e84013e91e57a28fbbd1e4302590bddff64bc98663199a
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 923bb621b6d18617e36607e30a4140ce9dfc454d77c4d62326e61d694a9daa19
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 166a1602b5aab25c872b60bb3fcdfb4bac1814ce5f135943ddbeaf0f1c3d8073
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 972B
                                                                                                                                      • SHA256 590065152acec5cf42dffc28eb04749514feaa899eb2ae04edce7d38a148fbda
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 ae32d9950928870c88235c4c17204b62b83ed38c436c2dd65ff80e018454fd14
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 1165cf9acd5fc666f61d051d7b9597343ab6408353578b54e9d2811a699c004e
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 9983273f7eef2d04c9ab1fb2b5d5fd9648cf654933369aed9783e0c069f3a1b9
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 56e6bc2a88f4682081c647ea33365ddd22aa8151036ab3236f802f4d46b7e3d0
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 f53e88d85c64374a92a1e831367d9b16a4989214e12d2fb39256af58144f212b
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 230c6d79d8669f245e19ec6bfc4af43145c70a1372804715379b894f34705d85
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 472f896c7124f0420e70d9aff554a8bfc3d11e615830a5e839bfda134f32816b
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 757c40068c8b44526fedddbae76f4ef49d46e6f99e9c5b6ac7daee04f31c52bc
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 d02b5f1e8385826e0891921746b321b7462edc777efc704e57be220890498c35
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      metadata.json
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                      • Size 372B
                                                                                                                                      • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      f15fd375-4017-4139-aaf3-b453d3982d35.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f15fd375-4017-4139-aaf3-b453d3982d35.tmp
                                                                                                                                      • Size 13B
                                                                                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 545b370c29527499c6f0eccf68ed2b9c6dfe42f045b961602d67a3cc6ea6d9f4
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      291d5d0c-d54b-4edd-b4f8-da4d2ca3086d.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\291d5d0c-d54b-4edd-b4f8-da4d2ca3086d.tmp
                                                                                                                                      • Size 1B
                                                                                                                                      • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      SoulseekQt-2026-4-30-64bit.tmp
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-5L89B.tmp\SoulseekQt-2026-4-30-64bit.tmp
                                                                                                                                      • Size 3.0MB
                                                                                                                                      • SHA256 e1850b5c977c6de54772b6948ebd83cd9b90a0357c886b7e44faf5ef1a973bb2
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      content_new.js
                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2264_1575942360\CRX_INSTALL\content_new.js
                                                                                                                                      • Size 10KB
                                                                                                                                      • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      SoulseekQt-2026-4-30-64bit.exe.crdownload
                                                                                                                                      • Path C:\Users\Admin\Downloads\SoulseekQt-2026-4-30-64bit.exe.crdownload
                                                                                                                                      • Size 18.7MB
                                                                                                                                      • SHA256 4ba32e37bbd804ee69a88af018c3b9b49dd1bf772b65ad7c268718d0ed93eb29
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      Staging
                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2264_1286078915\Mu\Staging
                                                                                                                                      • Size 36B
                                                                                                                                      • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                      Submit Download

                                                                                                                                      LICENSE
                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2264_1322744839\LICENSE
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      edge_checkout_page_validator.js
                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2264_66012770\edge_checkout_page_validator.js
                                                                                                                                      • Size 1009KB
                                                                                                                                      • SHA256 04047fbad72cb02b113ee3a1f1823227aac74e1615fc5fa359d11776c727259c
                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                      Submit Download

                                                                                                                                      miniwallet.bundle.js.LICENSE.txt
                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2264_688907123\Mini-Wallet\miniwallet.bundle.js.LICENSE.txt
                                                                                                                                      • Size 551B
                                                                                                                                      • SHA256 38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      notification.bundle.js.LICENSE.txt
                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2264_688907123\Notification\notification.bundle.js.LICENSE.txt
                                                                                                                                      • Size 1KB
                                                                                                                                      • SHA256 363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      strings.json
                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2264_688907123\json\i18n-tokenized-card\fr\strings.json
                                                                                                                                      • Size 2KB
                                                                                                                                      • SHA256 c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5
                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                      Submit Download

                                                                                                                                      memory/1620-698-0x0000000000400000-0x000000000071B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/1620-737-0x0000000000400000-0x000000000071B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/2148-689-0x0000000000400000-0x00000000004D8000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/2148-545-0x0000000000400000-0x00000000004D8000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/2148-738-0x0000000000400000-0x00000000004D8000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-749-0x000000006CC40000-0x000000006CC74000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-865-0x0000000061940000-0x0000000061F89000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-869-0x0000000000E00000-0x000000000136D000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-870-0x000000006A880000-0x000000006AA4B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-862-0x0000000068880000-0x0000000068EA3000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-908-0x000000006A880000-0x000000006AA4B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-900-0x0000000068880000-0x0000000068EA3000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-907-0x0000000000E00000-0x000000000136D000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-903-0x0000000061940000-0x0000000061F89000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-831-0x0000000000E00000-0x000000000136D000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-933-0x0000000061940000-0x0000000061F89000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-938-0x000000006A880000-0x000000006AA4B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-937-0x0000000000E00000-0x000000000136D000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-930-0x0000000068880000-0x0000000068EA3000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-959-0x0000000068880000-0x0000000068EA3000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-966-0x0000000000E00000-0x000000000136D000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-967-0x000000006A880000-0x000000006AA4B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-962-0x0000000061940000-0x0000000061F89000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-824-0x0000000068880000-0x0000000068EA3000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-1003-0x0000000061940000-0x0000000061F89000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-1008-0x000000006A880000-0x000000006AA4B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-1007-0x0000000000E00000-0x000000000136D000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-1000-0x0000000068880000-0x0000000068EA3000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-827-0x0000000061940000-0x0000000061F89000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-1030-0x0000000068880000-0x0000000068EA3000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-832-0x000000006A880000-0x000000006AA4B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-829-0x00007FFA099E0000-0x00007FFA09C18000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-781-0x000000006A880000-0x000000006AA4B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-775-0x0000000069700000-0x00000000698AB000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-776-0x0000000061940000-0x0000000061F89000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-772-0x0000000000400000-0x000000000072E000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-773-0x0000000068880000-0x0000000068EA3000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-783-0x0000000067580000-0x00000000675A2000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-780-0x0000000000E00000-0x000000000136D000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-741-0x000000006B480000-0x000000006B573000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-739-0x0000000000400000-0x000000000072E000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-740-0x0000000068880000-0x0000000068EA3000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-742-0x0000000069700000-0x00000000698AB000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-743-0x0000000061940000-0x0000000061F89000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-745-0x00007FFA099E0000-0x00007FFA09C18000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-747-0x0000000000E00000-0x000000000136D000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-748-0x000000006A880000-0x000000006AA4B000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-750-0x0000000067580000-0x00000000675A2000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-751-0x00000000014C0000-0x00000000014D3000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-752-0x000000006C600000-0x000000006C615000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-753-0x000000006E840000-0x000000006E853000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-754-0x00000000626C0000-0x000000006272E000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-756-0x0000000067740000-0x000000006779F000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-757-0x000000006B640000-0x000000006B651000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-758-0x000000006CF00000-0x000000006CF89000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-759-0x0000000066AC0000-0x0000000066AD1000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-760-0x00000000675C0000-0x0000000067650000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-755-0x0000000003D60000-0x0000000003D71000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-746-0x00007FFA189C0000-0x00007FFA189DD000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-744-0x00007FFA0A1F0000-0x00007FFA0A295000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-726-0x0000000067580000-0x00000000675A2000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-735-0x00000000014C0000-0x00000000014D3000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-736-0x0000000003D60000-0x0000000003D71000-memory.dmp
                                                                                                                                      Download

                                                                                                                                      memory/4736-719-0x0000000000E00000-0x000000000136D000-memory.dmp
                                                                                                                                      Download