e7c7832ff3fe03187b27af4c38bd73b6739cf9e5e5942c8d3ff1181eeee55719

Analysis

user interaction
yes
max time kernel
40s
max time network
44s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 01:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BlurAutoClicker_3.9.1_x64-setup.exe
Size 6.7MB
Sample260801-blcp8avbnd
SHA256 e7c7832ff3fe03187b27af4c38bd73b6739cf9e5e5942c8d3ff1181eeee55719
MD5 5716f737595d5b3fd799fd1b7ccb3052
SHA1 03569a5c44ab52f6045fadb5aa5cb335d602c19c
SHA512 179e4e7012ad4421cf3527dd3b70855aa8a785d56f935cbc7993d4d2873df8d77f9a383ffeb1b8f7b626d1447a935adb0f470a9b9ea9bc4b979220b011e5016e
SSDEEP 196608:tQkwJpekV80EqH7tYvBRr/atQGqhG2NyuJR:tLf7p9/sQG2G2YU
TLSH
T11366334977F80A56C7BE1A71244F29B19D939C17BF50EEC362C2FD19784A28E6D3A301
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
4572	BlurAutoClicker.exe
1100	BlurAutoClicker.exe

Loads dropped DLL 7 IoCs

pid	Process
4352	BlurAutoClicker_3.9.1_x64-setup.exe
4352	BlurAutoClicker_3.9.1_x64-setup.exe
4352	BlurAutoClicker_3.9.1_x64-setup.exe
4352	BlurAutoClicker_3.9.1_x64-setup.exe
4352	BlurAutoClicker_3.9.1_x64-setup.exe
4352	BlurAutoClicker_3.9.1_x64-setup.exe
4352	BlurAutoClicker_3.9.1_x64-setup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	BlurAutoClicker.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	BlurAutoClicker.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BlurAutoClicker_3.9.1_x64-setup.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Modifies system certificate store 2 TTPs 5 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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	BlurAutoClicker.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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	BlurAutoClicker.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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	BlurAutoClicker.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 5c0000000100000004000000800100006b00000001000000200000004ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a030000000100000014000000d1cbca5db2d52a7f693b674de5f05a1d0c957df01d0000000100000010000000280cf6042c30a2646644ba7286a3aa971400000001000000140000003ae10986d4cf19c29676744976dce035c663639a0b00000001000000180000005300650063007400690067006f00200045004300430000006200000001000000200000004ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a53000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f00000001000000300000000b043572c899dec43efd590cfce610cf443a6315925ebfe589f7506907e44824608489581c7ca0e041458514cf15761419000000010000001000000076935b5c5a037216daaf8aac76df42c12000000001000000930200003082028f30820215a00302010202105c8b99c55a94c5d27156decd8980cc26300a06082a8648ce3d040303308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f726974793076301006072a8648ce3d020106052b81040022036200041aac545aa9f96823e77ad5246f53c65ad84babc6d5b6d1e67371aedd9cd60c61fddba08903b80514ec57ceee5d3fe221b3cef7d48a79e0a3837e2d97d061c4f199dc259163ab7f30a3b470e2c7a1339cf3bf2e5c53b15fb37d327f8a34e37979a3423040301d0603551d0e041604143ae10986d4cf19c29676744976dce035c663639a300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300a06082a8648ce3d040303036800306502303667a11608dce49700411d4ebee16301cf3baa421164a09d94390211795c7b1dfa64b9ee1642b3bf8ac209c4ece4b14d023100e92a61478c524a4b4e1870f6d644d66ef583ba6d58bd24d95648eaefc4a24681886a3a46d1a99b4dc961dad15d576a18	BlurAutoClicker.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0	BlurAutoClicker.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4352	BlurAutoClicker_3.9.1_x64-setup.exe
4352	BlurAutoClicker_3.9.1_x64-setup.exe
4572	BlurAutoClicker.exe
4572	BlurAutoClicker.exe
1100	BlurAutoClicker.exe
1100	BlurAutoClicker.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3808	msedgewebview2.exe
5836	msedgewebview2.exe
3808	msedgewebview2.exe
5836	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeImpersonatePrivilege	4352	BlurAutoClicker_3.9.1_x64-setup.exe
Token: SeImpersonatePrivilege	4352	BlurAutoClicker_3.9.1_x64-setup.exe

Suspicious use of FindShellTrayWindow 14 IoCs

pid	Process
4572	BlurAutoClicker.exe
4572	BlurAutoClicker.exe
4572	BlurAutoClicker.exe
4572	BlurAutoClicker.exe
4572	BlurAutoClicker.exe
4572	BlurAutoClicker.exe
1100	BlurAutoClicker.exe
1100	BlurAutoClicker.exe
1100	BlurAutoClicker.exe
1100	BlurAutoClicker.exe
1100	BlurAutoClicker.exe
1100	BlurAutoClicker.exe
4572	BlurAutoClicker.exe
1100	BlurAutoClicker.exe

Suspicious use of SendNotifyMessage 10 IoCs

pid	Process
4572	BlurAutoClicker.exe
4572	BlurAutoClicker.exe
4572	BlurAutoClicker.exe
4572	BlurAutoClicker.exe
1100	BlurAutoClicker.exe
1100	BlurAutoClicker.exe
1100	BlurAutoClicker.exe
1100	BlurAutoClicker.exe
4572	BlurAutoClicker.exe
1100	BlurAutoClicker.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4572	BlurAutoClicker.exe
4572	BlurAutoClicker.exe
1100	BlurAutoClicker.exe
1100	BlurAutoClicker.exe

Suspicious use of WriteProcessMemory 43 IoCs

description	pid	Process	procid_target
PID 4572 wrote to memory of 3808	4572	BlurAutoClicker.exe	91
PID 3808 wrote to memory of 5744	3808	msedgewebview2.exe	93
PID 3808 wrote to memory of 5700	3808	msedgewebview2.exe	94
PID 3808 wrote to memory of 5700	3808	msedgewebview2.exe	94
PID 3808 wrote to memory of 5700	3808	msedgewebview2.exe	94
PID 3808 wrote to memory of 5700	3808	msedgewebview2.exe	94
PID 3808 wrote to memory of 3952	3808	msedgewebview2.exe	95
PID 3808 wrote to memory of 4884	3808	msedgewebview2.exe	96
PID 3808 wrote to memory of 4884	3808	msedgewebview2.exe	96
PID 3808 wrote to memory of 4884	3808	msedgewebview2.exe	96
PID 3808 wrote to memory of 2452	3808	msedgewebview2.exe	97
PID 3808 wrote to memory of 2452	3808	msedgewebview2.exe	97
PID 3808 wrote to memory of 2452	3808	msedgewebview2.exe	97
PID 3808 wrote to memory of 2452	3808	msedgewebview2.exe	97
PID 3808 wrote to memory of 2452	3808	msedgewebview2.exe	97
PID 4572 wrote to memory of 5836	4572	BlurAutoClicker.exe	98
PID 5836 wrote to memory of 3500	5836	msedgewebview2.exe	99
PID 5836 wrote to memory of 4316	5836	msedgewebview2.exe	100
PID 5836 wrote to memory of 4316	5836	msedgewebview2.exe	100
PID 5836 wrote to memory of 4316	5836	msedgewebview2.exe	100
PID 5836 wrote to memory of 4316	5836	msedgewebview2.exe	100
PID 5836 wrote to memory of 3196	5836	msedgewebview2.exe	101
PID 5836 wrote to memory of 4504	5836	msedgewebview2.exe	102
PID 5836 wrote to memory of 4504	5836	msedgewebview2.exe	102
PID 5836 wrote to memory of 4504	5836	msedgewebview2.exe	102
PID 5836 wrote to memory of 4416	5836	msedgewebview2.exe	103
PID 5836 wrote to memory of 4416	5836	msedgewebview2.exe	103
PID 5836 wrote to memory of 4416	5836	msedgewebview2.exe	103
PID 5836 wrote to memory of 4416	5836	msedgewebview2.exe	103
PID 5836 wrote to memory of 4416	5836	msedgewebview2.exe	103
PID 1100 wrote to memory of 3148	1100	BlurAutoClicker.exe	105
PID 3148 wrote to memory of 576	3148	msedgewebview2.exe	106
PID 3808 wrote to memory of 428	3808	msedgewebview2.exe	107
PID 3808 wrote to memory of 428	3808	msedgewebview2.exe	107
PID 3808 wrote to memory of 428	3808	msedgewebview2.exe	107
PID 3808 wrote to memory of 428	3808	msedgewebview2.exe	107
PID 3808 wrote to memory of 428	3808	msedgewebview2.exe	107
PID 1100 wrote to memory of 4348	1100	BlurAutoClicker.exe	108
PID 5836 wrote to memory of 1944	5836	msedgewebview2.exe	110
PID 5836 wrote to memory of 1944	5836	msedgewebview2.exe	110
PID 5836 wrote to memory of 1944	5836	msedgewebview2.exe	110
PID 5836 wrote to memory of 1944	5836	msedgewebview2.exe	110
PID 5836 wrote to memory of 1944	5836	msedgewebview2.exe	110

C:\Users\Admin\AppData\Local\Temp\BlurAutoClicker_3.9.1_x64-setup.exe
"C:\Users\Admin\AppData\Local\Temp\BlurAutoClicker_3.9.1_x64-setup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4352
- C:\Users\Admin\AppData\Local\BlurAutoClicker\BlurAutoClicker.exe
  "C:\Users\Admin\AppData\Local\BlurAutoClicker\BlurAutoClicker.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4572
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.1 --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4572.1480.14828435830818011556 /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:3808
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView /prefetch:4 /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffb7ba45fd8,0x7ffb7ba45fe4,0x7ffb7ba45ff0
      4⤵
      PID:5744
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1752 --field-trial-handle=1756,i,4089567428972955843,14904054461752422556,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb
      4⤵
      PID:5700
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2120 --field-trial-handle=1756,i,4089567428972955843,14904054461752422556,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb
      4⤵
      PID:3952
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2280 --field-trial-handle=1756,i,4089567428972955843,14904054461752422556,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb
      4⤵
      PID:4884
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3520 --field-trial-handle=1756,i,4089567428972955843,14904054461752422556,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb /prefetch:1
      4⤵
      PID:2452
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3540 --field-trial-handle=1756,i,4089567428972955843,14904054461752422556,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb /prefetch:1
      4⤵
      PID:428
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.1 --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4572.1480.3685746199710493824 /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:5836
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView /prefetch:4 /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x19c,0x7ffb7ba45fd8,0x7ffb7ba45fe4,0x7ffb7ba45ff0
      4⤵
      PID:3500
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1804 --field-trial-handle=1816,i,15136346057626173562,17283000723329065880,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab
      4⤵
      PID:4316
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2272 --field-trial-handle=1816,i,15136346057626173562,17283000723329065880,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab
      4⤵
      PID:3196
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2400 --field-trial-handle=1816,i,15136346057626173562,17283000723329065880,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab
      4⤵
      PID:4504
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3468 --field-trial-handle=1816,i,15136346057626173562,17283000723329065880,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab /prefetch:1
      4⤵
      PID:4416
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView" --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4044 --field-trial-handle=1816,i,15136346057626173562,17283000723329065880,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab /prefetch:1
      4⤵
      PID:1944

C:\Users\Admin\AppData\Local\BlurAutoClicker\BlurAutoClicker.exe
"C:\Users\Admin\AppData\Local\BlurAutoClicker\BlurAutoClicker.exe"
1⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1100
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.1 --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=1100.2996.10411999585496733839 /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3148
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView /prefetch:4 /pfhostedapp:7e1f3440eb8002d84762801c2001a60bfc4389cb --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x19c,0x7ffb7ba45fd8,0x7ffb7ba45fe4,0x7ffb7ba45ff0
    3⤵
    PID:576
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=BlurAutoClicker.exe --webview-exe-version=3.9.1 --user-data-dir="C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=1100.2996.2339053963203301846 /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab
  2⤵
  PID:4348
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView /prefetch:4 /pfhostedapp:c7c22851b588f47dafdfb3a31ee98c103359b7ab --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x144,0x1c0,0x7ffb7ba45fd8,0x7ffb7ba45fe4,0x7ffb7ba45ff0
    3⤵
    PID:3944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

09EC553619BC82A45E441B5D9BEB4136

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\09EC553619BC82A45E441B5D9BEB4136
Size 282B
SHA256 c12eb4843af7b0e35197eb7a94883c1e98f06a2226b5be555c5b0b01b2769099
MD5 6104bc0ff8f70f25d350813e438f36f2
SHA1 9b1f5d8979e214cf2012b3715f1789ed68e42a13
SHA512 20a4f48ed45c62ff99481fe3853a9a2ccc2cff695d33dc34b4d02f142f616e21392de82d051af37c24da3c6d563ae09a5e31f8c4c20d51e9fca88f952a8ecb7f
TLSH
T156D02BD996B678E37E73DF8045EAA978380262B311911A215C18812F5B27535970A511
MD5 SHA1 SHA512 TLSH

Submit Download

09EC553619BC82A45E441B5D9BEB4136

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\09EC553619BC82A45E441B5D9BEB4136
Size 488B
SHA256 09e2296d8e86589bcce4a2d4a75d83e401c932067096a060b8af05032a1a2834
MD5 b37db872b225afad3f3f80af4ced89c4
SHA1 0baff8c98c317aebab56259726d9ba857d3a20af
SHA512 1fce5474ae548ee2bc901c59bd337ad8368d4251c5e19b60c7d1e470add9ca724a1bad209dfbf6e2ad3ee6ccef4a482e011900c032586ea25cf5dc905a837e69
TLSH
T1E6F02318347C4018E0B2CC74C7E1B129A838F104BC146AAA07E3110C6B45C010E9763D
MD5 SHA1 SHA512 TLSH

Submit Download

BlurAutoClicker.exe

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\BlurAutoClicker.exe
Size 18.3MB
SHA256 9efe0b0665c531d37fdc0e1f494f43ee0e69ce3df02a339176b62daaf62c21fa
MD5 43fb99db76636afa669213f719ae5959
SHA1 404caa6b1812ad67a32e5470acdec0efc33204b9
SHA512 f9b713543df30ea2520a4b6de99b5f9f63d858f4e0309e272a15a3a5d1003f38d49624a3597d0f25b05214502dcd5190505804653d8db7450343200766a9a2d4
SSDEEP 196608:K1vFag9334FEvl+93IeaRpHqLpmkMtT8KkSEeAw+0g:2Fag9333ZlN8Kkzvv
TLSH
T169170A916F5B95A8F196C8F083964D7FAF2038CB0A3575AB0494613C2F7F7E06A38359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session.log

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\Diagnostics\Logs\session.log
Size 986B
SHA256 41371520500a126e0c3e18960f7561097abb0088d078b4dfb4addf251db2b8c1
MD5 b152be37178021abb591dbe7d940f5c0
SHA1 393078d897b29fc2e3d21d0d1e59264b209b6d1f
SHA512 b4b0cbd6e9b2ee042f0e1873aaf2d55cc54742668e77f87dfdd8461ac749273a3f29474867f1d322377bcf70b5bb95d114e706a93563ed2d8f59d47ece9382ea
TLSH
T163115980F0EEC02BED3B0E1D8B23AA918F287717C9841EE4BF3C45673D94A065650E40
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 60c23a00e7093091e52df9d6fab0a20211b6b3af7c0346a60762528c1f12a440
MD5 960327716c4b358061db2d2da52a051c
SHA1 3deb6846294bb875439c4d56d3d05406802f2172
SHA512 2341145d3896b1d88c24f7ab3f7db30d0c82308df3359b9440a171df1d108ebb1cbb22bbae1ae734775070cb347b2d0ec3f2eff29fefb3b4df7549d6a835eae0
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 a829c17326320ecf5e733191e8a5dc5e61bad10145b8e5b8e1b513b06fbe46b7
MD5 3e828b81550fa141178a06006a6a8553
SHA1 59c6098e59de59a96ac23fee22ddf05384d2f7a3
SHA512 d3113fc06eb64c0e8bf43ea8df4a5043a4392f514a21720e907cc04eca9134fa33ee1c62bb24b9f8775aee8db96e42a2fc6254436cf2213a504be43d81ffa7e3
TLSH
T1AFD0121633120234C11031730003670C1900C50B9005400C542C979E9A4805C0902455
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 9d2080ee10ab9ceb13683505e1a670dd897dade15e1e9c0320d04336e120aab0
MD5 de53db8c11dc2a97e87e8251df56038c
SHA1 cd4b5a4ed2565fc47ce3fafdcc080b97f50ebdd1
SHA512 9615383c70d7c14666c55d693692bd7eb02303b7486c87add7ce4a6a27c16f1ff06d1c23c803837977a25935c9fce7d095b9a66f7a48c821a0aeef09d45fdd0e
TLSH
T176D02B6623260630C31472734082E74C2500C51F5006400C1E3DFB9D8A840ED0C81845
MD5 SHA1 SHA512 TLSH

Submit Download

49ca7627-a455-49f9-b5c1-cd959515199b.tmp

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Default\49ca7627-a455-49f9-b5c1-cd959515199b.tmp
Size 6KB
SHA256 c1801eecf4c97ffc3022d9084e2d3433f9d9f78013dc5e542adeee6c249b3775
MD5 a8afa7c47cd16c6048f68090aa315d55
SHA1 aa0ab82ac9d2e540dd12d1107fca040de2bcacdc
SHA512 bf654c264683ee76f0fccfd4e465f4074ee26b502b31961d942b2d62695ce2f13d5dfd08afe4972ab079823a6d7450e349041647721deaecef96cab0ddb910a1
SSDEEP 96:stx/dyaGOHlNb9Tkfo5h16Z0Zs7/x+6MhmuecJCCMkkjeGUK+gXI8XM1C7K:stlL5l70onZsV+FdCCwjZtg6K
TLSH
T149D1A5416E28797B8CC6F518BB257A06D3F9503274D11E68EBF8452C09EBADD2317D07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Default\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Local State
Size 3KB
SHA256 38bd1318d096a548b3eac16420415a5819f7959b804dda3121803ba861a082af
MD5 b4d08295f4c21b70317798a7b7d1b9a9
SHA1 8c3daaade833d5451a313778537f11f7640a94da
SHA512 6f389ebd0c47ef534c67d52ec37ddb2e9add369cd250ea4932601d475b9af6c0636ce21bd1a5a0a47c7093bbe631e230f71e83be5f35a003179215a8c32d8904
TLSH
T1D78163776974A9378DF29A047A463F12BBA49063A5862FA9D6EC0F1C02E72991342C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Local State
Size 2KB
SHA256 bc310424ab26ee1ce788f9e8aa190a542f559cbb159f23e59e83c5799c5ed5ec
MD5 0df955cc17f93c9a48d11763aa04589a
SHA1 83a3c649dc841a4f89c993b3c2ab79a8a2733159
SHA512 b085347298bd77e59ac128b8cc0f8d38d4136311e961b613812d81cbdd8fe1f9eb90c2e7cd437f06300e7928539ee4cffa8580fdc17286f8bfc8a86ff5881636
TLSH
T1335197B369185737CDF25B147A4A3F139FB491B2A9921F2096EC1B1C01E716D1742C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Local State
Size 15KB
SHA256 6a717495964f11e83105fa957f3db25edb0142c8cc2ab1fa4f6b85cf83b5a6c1
MD5 f0b00fbd39a3b2605d37f5eed1fd2e8a
SHA1 e7dfb14520c82526bb4019abe2c9f88b06fed53b
SHA512 e3f5dbda3659c7d5912e2ab1408e8e6d2cca7c792c5d9599c48c4921bb6530cdf7a28d3eca1b04487a4b952eb590fd6a4f7f0ed6326e8d033ea6ee47165691ab
SSDEEP 384:v+aQikB+z/xvxjg/qhEY3NBSJeWmgq1DAVdpnq09z5:+/UxvxjgC+YGVk1DUnq0F5
TLSH
T14E729E2755693E37D9F3AA153A591B8BDFF494B350C22EB84AFD5F1D02D72E80302816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Local State
Size 3KB
SHA256 de7fa4de4b403968da13df5cb2f7ce578a3347bc10d6aa336fec6b3b5133a6ff
MD5 6b98475f5bb5ad8347c36879a442174d
SHA1 d2e4d6c6e977defb25dd6821f8817caff61a1884
SHA512 da3bbf15e76c343f1fc613b0501894238acca68abd73adbf82d7754c6d24f84589dd528694cba9e1c296bda1f1ac0d5e8eaafe2bedca40878b983cc32cd6a294
TLSH
T18261967769649A3BCDF29A1479863B16BBE05033E4C13F64C6EC0F1C01D72981342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe598728.TMP

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView-overlay\EBWebView\Local State~RFe598728.TMP
Size 1KB
SHA256 d12b83280082f446a0f455a8836652d39dc52ae431afe3a5a566956612efc4f4
MD5 e548f49d742952814915e72359516fac
SHA1 2ea429617dded50e765dbb052fb5c60beccd9aea
SHA512 fb5b59331ec8541402cd3fed580d73f2affbfc94757ce1417fc229de542707a02b3c5879e3ea9ae3153ce33d9ddee8c725c0f7ab3ff2471b4d875fe98f56a3a6
TLSH
T1142195F3D9A84B73DC91275532467F572FA050B781810E04A6ED4B2C02EB2AD9626C33
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 49ac90643b9efa797471378863d9eea3d373f041d18a2615d315739be5888fc3
MD5 a8d7c96da2a52b3dc5d36b74a52b61d9
SHA1 d9a3027369ad86f16c1a6e6801e1ab5ddce5d2c4
SHA512 ade75a7ad10a7f946e32e0d8a13fe7d1451b987129b23d7f3c7fd7c8f8ec9fe355f0b937139d9a6ce1983980fd203c4b5cf528fff35cc9ce2063957bdbcb0504
TLSH
T162D02B7372550635D710B13F4081F9881100C61F000E4400DE3DFD1C4A440F10D81841
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 79740406a793b216d563ccb7c3728c9b43c804f5447e3aa8d08832217ff93917
MD5 6bddd438ce9431d3979146e76d617c8b
SHA1 2b7a74f81b69fdcb3a84122cc73155146c5b0cb3
SHA512 4b4b90520a73b311a254de91cd2ac80bbffd9dfa1eff8e45236b639107432855d0444eb381b946a165dbb72944d9200fd5765ab2ff2500105d41a5fb14dccc10
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 bdbe44cf88922da0eca9b67d4d88ce33c8030c9e54cc7bb4dff6fdd808304ddd
MD5 d54c05ac61e138607c9ab6a041c2547b
SHA1 cfa0e311f594caf21dba3baae8615c79f8681118
SHA512 a0a915298de23096ee210e15f836e2f50e1dca238a7091c8fccebf1ee9eb6257db14aad81a9ca4bd484c13ed7c33cd2779ac3b09cc3966aa1c278430d4169e8e
TLSH
T1A1D01223B2810238D510743B100279480500D60F400D4000D43CCD1D5A180601A02441
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 384B
SHA256 cedd3efb15e67694383e0cf00c013e23f1647a0cb51a7aa19170e43c4964e1f3
MD5 1d92e68978c93be25f3435217c70b807
SHA1 7a2508d248a48b963241b5007e7e406a5142fea7
SHA512 7fdbfab822bf43c4d4a1652cc8f57742ba41e65639cae40b79d1b0608b700b4b2d45e6f4c48e568b90884a0f53ae2cb9eaab0860535c848357d2d0d52ade7de9
TLSH
T17FE0C21790C21920E37389B09E9244D16E641C95C2B22FC04D3AF169A666BD65905888
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c3b4.TMP

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59c3b4.TMP
Size 48B
SHA256 b0efc09776ae14b0207b687f9fe14102083b2ad70bcb63b9d5033e0ec43c90ea
MD5 1eb042b4d27f59bcf6014d488c16e544
SHA1 5b667dd65fcee412d1b5dfd61446da21a5470af6
SHA512 29a2b7c0cb9634af00f8e1e625de908145daf0960720881d2456a1b0807568e8a649cc5ab73e1c02e2e34a87ce3fb50c618384d37416a5bae61d7f9cae11b4fa
MD5 SHA1 SHA512

Submit Download

19bc7a5d-e4d4-47cc-9ae8-8c722cfd8ae7.tmp

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Default\Network\19bc7a5d-e4d4-47cc-9ae8-8c722cfd8ae7.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Default\Preferences
Size 6KB
SHA256 d258f6ec0d3097d08a6d8cc8ee91a1060855c562669e68373ea89d671ef7ba26
MD5 8d035a603cb25f1d3f845c150c75d188
SHA1 b508120abbb51c5c553c6ba6973260ed58d4ae79
SHA512 4abd91e42e47ea42cb3c7e7999dc71ff2d6f12a7839be24652ceba4c32626259897b6bf9110bb9fdcb974eaa2683fc5a35b07d8276d20350aaa3f703a852d191
SSDEEP 96:stj/d9HCQb9dk+Lo5h16Z0Ks7/x+6MhmuecJn/DhjMje5K+gSOPI8XM1C7K:stbbt3onKsV+Fdn/DhIj3wsg6K
TLSH
T1B3D195025E28B57B8CC6F10DBB39BA16E3F9503265D01E58E7F8452C05D76DD630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe59c3b4.TMP

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Default\Preferences~RFe59c3b4.TMP
Size 6KB
SHA256 f0206356443724b367f6ec0a0ee0e85ea8f00d2b317eda2cb2938256d0848335
MD5 7dd5d9fcc650b083527a08b07aaa0ee5
SHA1 b278da353da76cf7630ccaca637f58080740b72a
SHA512 9a1b903918bddc1c489fef0021cdad0948f87e30678e65c3b1b961d28884d5bc13790270eea2003da9b624309d46c56f750f79b4b433279c0fa457878109499a
SSDEEP 96:stj/dpHCQb9dk6o5h16Z0Ks7/x+6MhmuecJweMkkje5K+gL28XM1C7K:stbvtNonKsV+Fdwewj39G6K
TLSH
T177D1A6425E28797B8CC6F109BB397A16E2F5503261D51E58E7F8862C08EA6DD2317D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Local State
Size 3KB
SHA256 79f47cab8bcf3281a93bf459f2910293ffd4be10caed811fc6f3f519eab30a93
MD5 d227ea31c80c79effec401397bc011f4
SHA1 8582835bcb62d88c3de76d8fd2d243b148451fb2
SHA512 960d84b0258255872e813960c5d4eb82c7f94663759bb7944a5fe403c45ddc380498063d56e6fa097f45951db1fd935d6d5576da0bed952231a0302f4132d519
TLSH
T1D88164B66871A9378EF3D905B9563F12ABE45063A4853FA9D6FC0F1C02E729D1342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Local State
Size 15KB
SHA256 857c680565316994671795cac054aaddc2d95b95aa5000f11f98c41ac8bfadf1
MD5 c39eb1b05fe54ae932d5272f5cebc052
SHA1 de6c33b656f9e0b56b95744c154b5d681b628cb6
SHA512 c5bc300cec74abee49d49605725ea20a4c5bab8d57767b2ad2cc8bd6fd80524b5d6326203e4b3c51f474773f14a7a6c837b7fe6e99ce1695278cd27d7c402b57
SSDEEP 384:T+aQikB+z/xvxjg/qhEF3NBSLlA+UAVdpLqH9zL:y/UxvxjgC+F6hUULqHFL
TLSH
T1F8729E2754693E33E5F7EA057A5D5B8BCFF894B250812EB84AFD5F0D06D72E81302816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Local State
Size 2KB
SHA256 86c8c86794a52cafb9504489a6a6a40384f7936c65f323d3ca603a0fcdcb5324
MD5 7a0d07283943862b11398ec0905eee2e
SHA1 86484a6a5cc359a104691c0b7afe71e271881261
SHA512 4af340878a1ac96d0059831e6836df986dd654debefdca719265790b210c3880481af6a9f14c04e2e783b5f6c6a03d00ec658e437b8e575f8b5d3f6f04a49568
TLSH
T1D65174B368106B37CAF39A047A1B7F23CEB8416299561F20D6EC1B1C01D626D2706C36
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Local State
Size 3KB
SHA256 0c58f890aa24f42896cc24f1003a8e7747ed7ee699ae726541617b02f5e65996
MD5 099d5748d1740c5b7fe65baddb643c8a
SHA1 6e75cd9dab2636507b2a8ca36863f9660f11923d
SHA512 265d73d006a30376ca5ee5975056bcaeef5af99fe4efb42e34cd09e52bb0750640ad5d074556ff2a8f912f619b9b9b68525fe7689bc67ef8c173b250d7a8c5cb
TLSH
T1F16164B76860AA378EF3DA04B9862F16ABE54133E4853F65D6EC1F0C01D72981301C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Local State
Size 16KB
SHA256 9856b8494db454b830479ee0ed0db97a02f46813e29d034f555ab7515791cfab
MD5 ac7ab50fae8ca95f946647b65adfd13d
SHA1 18051560228f9103750061aa15aa409b612ad358
SHA512 68ce3310ec05d50962ac1b67cefbccd17ccb639b79c2c669188cf9f9531bf1362608840488fbfa3818a46830fb9632179436f059dd669142a4c134e13935feb2
SSDEEP 384:e+aQikB+z/xvxjg/qhEx3NBSLYA+6AVdpLqH9zL:p/UxvxjgC+xVh6ULqHFL
TLSH
T130729E2758693E33E5F3EA057A5D5B8BCFF884B250812EA44AFD5F0D06D72E81302816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe598042.TMP

Path C:\Users\Admin\AppData\Local\BlurAutoClicker\EBWebView\Local State~RFe598042.TMP
Size 1KB
SHA256 b29125c5107a5f64811057761415ef49abe6837ff9acfbd16fb35a69a9b31833
MD5 8261f543cdaf10ee18a9bab24312e152
SHA1 10caa53497bf6a48c47eef185dce69ce63e13112
SHA512 1e8bb905f0c64c2d26fd36df3474c16cc47f9cf83390389978d9ac154b9ff0b2e72179ad41346e4f34ed539b1535c0674bd06001ae048a80e9fb22fb305956a2
TLSH
T1912165F3E8206F33DDA366057116BF579EA0007781454D00E1ED4B1C06E616DDB1AC32
MD5 SHA1 SHA512 TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsu33DA.tmp\System.dll
Size 12KB
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsu33DA.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsu33DA.tmp\nsDialogs.dll
Size 9KB
SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
MD5 8f0e7415f33843431df308bb8e06af81
SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
TLSH
T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsu33DA.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
SHA1 75197fee3c6a814fe035788d1c34ead39349b860
SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
TLSH
T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Roaming\BlurAutoClicker\settings.json
Size 7KB
SHA256 9ecc6ba6c7689b4d8642cb6fd1d4f943c962f5eaa55fee210f38f88c7026d0ad
MD5 880a56d96d0bd51521009a131e1fc882
SHA1 af3f6b87fe807eb2aed1ca89d91f723ea3904251
SHA512 14b73915d7688353d8970867823fb0fe5c297aa4b40d5fb9b26f9eeec00fc3d6b904a382ad9eb8a98b038793b152ce6b411d19db32c02d131acc62d197f59336
SSDEEP 96:8Uohf+gsWIB/tYoSOE8Fz9OuK1OV8CiDnH:hohf+gsWIB/vSeFz9a1I8CmnH
TLSH
T12DE16B69D2241CFA2095E675D879521B1A41E4638FD23C3CB24C849C1F1D97EA2F2EEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/428-490-0x000001AC60DA0000-0x000001AC60EB6000-memory.dmp

Download

memory/1944-501-0x000001C7E5460000-0x000001C7E5576000-memory.dmp

Download

memory/2452-156-0x00007FFB9A3C0000-0x00007FFB9A3C1000-memory.dmp

Download

memory/2452-464-0x000001159A630000-0x000001159A746000-memory.dmp

Download

memory/4316-479-0x000001E41A200000-0x000001E41A316000-memory.dmp

Download

memory/4416-476-0x0000029BB4B50000-0x0000029BB4C66000-memory.dmp

Download

memory/5700-80-0x00007FFB9A3C0000-0x00007FFB9A3C1000-memory.dmp

Download

memory/5700-459-0x0000018E19550000-0x0000018E19666000-memory.dmp

Download