Overview

overview

8

Static

static

1

Kleberiano...í.mp3

windows11-21h2-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    1259s
  • max time network
    1255s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    08/08/2026, 17:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Kleberiano - Não Tô Nem Aí.mp3
  • Size 3.9MB
  • Sample260808-vreljsan61
  • SHA256 71eec328070066f737f8a9dc28f9c5624d50d291b26f102497c13953608309cb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistenceransomware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Contacts third-party web service commonly abused for C2 1 TTPs 8 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 48 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Probable phishing domain 1 TTPs 1 IoCs
  • Drops file in Windows directory 2 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 11 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 53 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 44 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files (x86)\Windows Media Player\wmplayer.exe
    "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\Kleberiano - Não Tô Nem Aí.mp3"
    1⤵
    • Enumerates connected drives
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:4920
    • C:\Windows\SysWOW64\unregmp2.exe
      "C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4108
      • C:\Windows\system32\unregmp2.exe
        "C:\Windows\SysNative\unregmp2.exe" /AsyncFirstLogon /REENTRANT
        3⤵
        • Enumerates connected drives
        • Suspicious use of AdjustPrivilegeToken
        PID:5020
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4920 -s 1204
      2⤵
      • Program crash
      PID:4420
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s upnphost
    1⤵
    • Drops file in Windows directory
    PID:1120
  • C:\Windows\SysWOW64\werfault.exe
    werfault.exe /h /shared Global\7640b111762e4382b0fd8bf9201835c0 /t 5024 /p 4920
    1⤵
      PID:2616
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 556 -p 4920 -ip 4920
      1⤵
        PID:236
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe"
        1⤵
        • Checks SCSI registry key(s)
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:4172
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffceae1c728,0x7ffceae1c734,0x7ffceae1c740
          2⤵
            PID:1396
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2072,i,7533814498382577850,14248342346439256306,524288 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2084 /prefetch:11
            2⤵
            • System Time Discovery
            PID:3924
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1656,i,3043239530427385141,7094825583318618411,262144 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=1916 /prefetch:2
            2⤵
              PID:1532
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2372,i,15001475155031859489,2017906745937048278,524288 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2404 /prefetch:13
              2⤵
                PID:2604
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3212,i,2506070262277985551,8495560210173680496,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3260 /prefetch:1
                2⤵
                  PID:3616
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3284,i,1597597768228153621,17334660345714526991,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3460 /prefetch:1
                  2⤵
                    PID:4292
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4276,i,6182804180484906920,199554027302167395,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4272 /prefetch:9
                    2⤵
                      PID:1252
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4676,i,5020301063286488703,7191411782957707926,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4704 /prefetch:1
                      2⤵
                        PID:4224
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4904,i,12390693880163427964,4100732071524727181,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4908 /prefetch:1
                        2⤵
                          PID:4844
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5748,i,10424938307942702888,16945131027403737911,524288 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5760 /prefetch:14
                          2⤵
                            PID:2316
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5836,i,13994335998137705992,7412491984624546403,524288 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3648 /prefetch:14
                            2⤵
                              PID:4944
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3664,i,9589468116764007,10982583726141281385,524288 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3608 /prefetch:14
                              2⤵
                                PID:4404
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5792,i,16606080682909309012,12351385755761245720,524288 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5772 /prefetch:14
                                2⤵
                                  PID:4032
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4392,i,14922762504723342635,2257346128011731878,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3636 /prefetch:1
                                  2⤵
                                    PID:4620
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4404,i,5430268881896641350,13384868446964067216,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4408 /prefetch:1
                                    2⤵
                                      PID:1588
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3496,i,3765380405682535043,5715405542725282551,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4320 /prefetch:1
                                      2⤵
                                        PID:3236
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5860,i,8139060246444833354,11864855058034916746,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5920 /prefetch:1
                                        2⤵
                                          PID:1708
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6080,i,3795870388150851582,9385435192792888278,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6076 /prefetch:1
                                          2⤵
                                            PID:4840
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6244,i,5247520192917076464,13684248486462202203,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6216 /prefetch:1
                                            2⤵
                                              PID:1344
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6080,i,6140137746738498317,2473046553226823828,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6104 /prefetch:1
                                              2⤵
                                                PID:1516
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6096,i,4694102887976437612,15034924409687435724,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6152 /prefetch:1
                                                2⤵
                                                  PID:3464
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6720,i,8722346907792230228,1525934882365706642,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5756 /prefetch:1
                                                  2⤵
                                                    PID:3000
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6900,i,49449210631651377,5846083800866141091,524288 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6872 /prefetch:14
                                                    2⤵
                                                    • NTFS ADS
                                                    PID:4608
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6524,i,15811040966273104450,12828682114113041384,262144 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5980 /prefetch:10
                                                    2⤵
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:2656
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=3212,i,11481680147541820443,16067335747767745520,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6868 /prefetch:1
                                                    2⤵
                                                      PID:5336
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6856,i,18417642278070602203,7100632390170702093,524288 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4556 /prefetch:14
                                                      2⤵
                                                        PID:5284
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7048,i,4275628011109675788,11986686367663300910,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6500 /prefetch:1
                                                        2⤵
                                                          PID:5544
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7260,i,2754140422207646567,17748728050884943708,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7176 /prefetch:1
                                                          2⤵
                                                            PID:5776
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=7172,i,12293871234945937803,14992269527367047050,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7356 /prefetch:1
                                                            2⤵
                                                              PID:5288
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7600,i,16878842340472701086,10032450152263229276,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7720 /prefetch:1
                                                              2⤵
                                                                PID:5876
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=7748,i,6048159789084276647,3466945541032705098,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=1424 /prefetch:1
                                                                2⤵
                                                                  PID:6920
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=7108,i,15114480386004904219,10988621854179086969,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5944 /prefetch:1
                                                                  2⤵
                                                                    PID:5908
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=7236,i,4869730656121381379,4492673514532268866,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5992 /prefetch:1
                                                                    2⤵
                                                                      PID:6596
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=7956,i,1125275069726800304,12889001128817093543,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7976 /prefetch:1
                                                                      2⤵
                                                                        PID:6428
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7232,i,6645982355354038275,15638742700153113751,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7216 /prefetch:1
                                                                        2⤵
                                                                          PID:5444
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=7208,i,3509037297075056000,15722034172686050411,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7380 /prefetch:1
                                                                          2⤵
                                                                            PID:3368
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7900,i,14172087008743654043,6786294252348249950,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7420 /prefetch:1
                                                                            2⤵
                                                                              PID:7072
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=7648,i,7350527758783779390,740363821997123616,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7180 /prefetch:1
                                                                              2⤵
                                                                                PID:7100
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=7460,i,15078087981815051014,6444057138709974055,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7844 /prefetch:1
                                                                                2⤵
                                                                                  PID:5112
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=7276,i,1436068002034789805,16345774032980509188,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7600 /prefetch:1
                                                                                  2⤵
                                                                                    PID:6744
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=7992,i,13516673804291594683,5033415954047406150,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=6104 /prefetch:1
                                                                                    2⤵
                                                                                      PID:4976
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=7596,i,7347686716036772458,8396576700864842087,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7612 /prefetch:1
                                                                                      2⤵
                                                                                        PID:6684
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=8008,i,10403911017053078081,7617854712999273530,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7340 /prefetch:1
                                                                                        2⤵
                                                                                          PID:5636
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=7908,i,9514198537859356426,5813264278141410452,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3880 /prefetch:1
                                                                                          2⤵
                                                                                            PID:5260
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=8088,i,15414912081564434899,4818489161553411034,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7268 /prefetch:1
                                                                                            2⤵
                                                                                              PID:6912
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=8140,i,483090410704069814,4065287619583888700,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=8116 /prefetch:1
                                                                                              2⤵
                                                                                                PID:6772
                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=7696,i,1094072493355600291,12124743769486690775,2097152 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7912 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:4892
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=8108,i,7310729103081076354,11532566365482830962,524288 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=7684 /prefetch:14
                                                                                                  2⤵
                                                                                                  • Modifies registry class
                                                                                                  PID:1140
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=7312,i,11631090629717832327,4711578150262849841,524288 --field-trial-handle=1924,i,18128039841425329887,6843217438459066217,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=8092 /prefetch:12
                                                                                                  2⤵
                                                                                                    PID:4504
                                                                                                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                  1⤵
                                                                                                    PID:2136
                                                                                                  • C:\Windows\system32\svchost.exe
                                                                                                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                    1⤵
                                                                                                      PID:828
                                                                                                    • C:\Windows\System32\rundll32.exe
                                                                                                      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                      1⤵
                                                                                                        PID:1136
                                                                                                      • C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe
                                                                                                        "C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe"
                                                                                                        1⤵
                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                        • Suspicious use of WriteProcessMemory
                                                                                                        PID:1136
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord.gg/xe-no
                                                                                                          2⤵
                                                                                                          • Enumerates system info in registry
                                                                                                          • Modifies registry class
                                                                                                          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                          • Suspicious use of FindShellTrayWindow
                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                          PID:652
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x328,0x7ffcdbebc188,0x7ffcdbebc194,0x7ffcdbebc1a0
                                                                                                            3⤵
                                                                                                              PID:4296
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1512,i,17072327501432348762,6721152789089365368,262144 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
                                                                                                              3⤵
                                                                                                                PID:5228
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1640,i,8800285825838082063,16120109912094467949,524288 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:11
                                                                                                                3⤵
                                                                                                                • System Time Discovery
                                                                                                                PID:5236
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,9403788777343619807,10402563505005271451,524288 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:13
                                                                                                                3⤵
                                                                                                                  PID:5256
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3536,i,2145129965783328016,7496106382319028507,2097152 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
                                                                                                                  3⤵
                                                                                                                    PID:5396
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3540,i,4455164304616080499,15244640926121482135,2097152 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
                                                                                                                    3⤵
                                                                                                                      PID:5404
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,15697183662410736702,18253962413451258087,2097152 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
                                                                                                                      3⤵
                                                                                                                        PID:5588
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,3403437665965031212,8262368482319828839,2097152 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:9
                                                                                                                        3⤵
                                                                                                                          PID:5596
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4232,i,10266885508072255131,9770287920513424288,2097152 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
                                                                                                                          3⤵
                                                                                                                            PID:5604
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4252,i,6071915715327754118,10696263181529266514,2097152 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:9
                                                                                                                            3⤵
                                                                                                                              PID:5624
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,2759065515245795890,15215075914881557719,524288 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:14
                                                                                                                              3⤵
                                                                                                                                PID:5872
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5448,i,1314067943684212907,10733681100524520772,2097152 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:1
                                                                                                                                3⤵
                                                                                                                                  PID:5188
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,11155883424637257247,8470015656500766923,524288 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:14
                                                                                                                                  3⤵
                                                                                                                                    PID:6728
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,1807604337431128797,1125220365588573186,524288 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:14
                                                                                                                                    3⤵
                                                                                                                                      PID:6732
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,11679775419112491082,11170570936657481871,524288 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
                                                                                                                                      3⤵
                                                                                                                                      • Modifies registry class
                                                                                                                                      PID:7060
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,2711558981834721681,12437926328669755856,524288 --field-trial-handle=2332,i,11734411140653236088,14940841146295395500,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:12
                                                                                                                                      3⤵
                                                                                                                                        PID:7068
                                                                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=1136.664.14468262776622787380
                                                                                                                                      2⤵
                                                                                                                                      • Enumerates system info in registry
                                                                                                                                      • Modifies data under HKEY_USERS
                                                                                                                                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                                      PID:2264
                                                                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x140,0x164,0x168,0x108,0x194,0x7ffcdb89b078,0x7ffcdb89b084,0x7ffcdb89b090
                                                                                                                                        3⤵
                                                                                                                                          PID:2952
                                                                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1956,i,5322248623515794525,15724604044693701319,262144 --variations-seed-version --mojo-platform-channel-handle=1940 /prefetch:2
                                                                                                                                          3⤵
                                                                                                                                            PID:8
                                                                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2160,i,5322248623515794525,15724604044693701319,262144 --variations-seed-version --mojo-platform-channel-handle=1868 /prefetch:11
                                                                                                                                            3⤵
                                                                                                                                              PID:1332
                                                                                                                                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=1664,i,5322248623515794525,15724604044693701319,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:13
                                                                                                                                              3⤵
                                                                                                                                                PID:5212
                                                                                                                                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView" --webview-exe-name=Xeno.exe --webview-exe-version=1.3.60+87ae4f96f8a0927052c1120167982fb069afd1b4 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3540,i,5322248623515794525,15724604044693701319,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
                                                                                                                                                3⤵
                                                                                                                                                  PID:6248
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                              1⤵
                                                                                                                                                PID:5356
                                                                                                                                              • C:\Windows\system32\taskmgr.exe
                                                                                                                                                "C:\Windows\system32\taskmgr.exe" /7
                                                                                                                                                1⤵
                                                                                                                                                • Checks SCSI registry key(s)
                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                • Suspicious use of FindShellTrayWindow
                                                                                                                                                • Suspicious use of SendNotifyMessage
                                                                                                                                                PID:2488
                                                                                                                                              • C:\Windows\system32\sihost.exe
                                                                                                                                                sihost.exe
                                                                                                                                                1⤵
                                                                                                                                                  PID:6872
                                                                                                                                                  • C:\Windows\explorer.exe
                                                                                                                                                    explorer.exe /LOADSAVEDWINDOWS
                                                                                                                                                    2⤵
                                                                                                                                                    • Boot or Logon Autostart Execution: Active Setup
                                                                                                                                                    • Enumerates connected drives
                                                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                                                    • Modifies registry class
                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                    PID:7104
                                                                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                  1⤵
                                                                                                                                                  • Modifies registry class
                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                  PID:5028
                                                                                                                                                • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                                  "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                                  1⤵
                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                  • Modifies registry class
                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                  PID:3008

                                                                                                                                                Network

                                                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                                                      Replay Monitor

                                                                                                                                                      Loading Replay Monitor...

                                                                                                                                                      Downloads

                                                                                                                                                      BookmarkMergedSurfaceOrdering
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                      • Size 6B
                                                                                                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                      Submit Download

                                                                                                                                                      BrowsingTopicsState
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                                                      • Size 414B
                                                                                                                                                      • SHA256 37ee4ad9395d9c193cb9ff27124f7bfd0ba36c9057b6ee53d6009e6d323ca06f
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_000007
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
                                                                                                                                                      • Size 331KB
                                                                                                                                                      • SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_00000f
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
                                                                                                                                                      • Size 436KB
                                                                                                                                                      • SHA256 0b320d2cf00e9215763a5377904e2301b2edb7a5d299bd319259714cf8bcd9a9
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_000010
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
                                                                                                                                                      • Size 50KB
                                                                                                                                                      • SHA256 442a44e753951376a4ba17e5ed226ed83546e5c294d9d2987e97e318c26829cf
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_000011
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
                                                                                                                                                      • Size 57KB
                                                                                                                                                      • SHA256 32e0d8b648d438e7f9f719d20b199757948631ca6b9aea134300abd8994fb4a8
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_000012
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
                                                                                                                                                      • Size 61KB
                                                                                                                                                      • SHA256 ced9ba7c53959ba4e19ed5fa33719248f19f1f58acb302907821b2f6bb017f4e
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_000020
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
                                                                                                                                                      • Size 34KB
                                                                                                                                                      • SHA256 31a64daacf233e97b078d33fa693c77a1c11e76ad289098a47d965bbf8406b2c
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_00004d
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004d
                                                                                                                                                      • Size 61KB
                                                                                                                                                      • SHA256 bb1d8e7b856d085e64974ae874541ca7f1183d58bd3a6b4c00c7482eb3ec05c7
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_000052
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000052
                                                                                                                                                      • Size 158KB
                                                                                                                                                      • SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_000065
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000065
                                                                                                                                                      • Size 21KB
                                                                                                                                                      • SHA256 cd5c3999d7d153b7b8e1a2effd1dd354ddebbf9c3974b8063e6429ef479c6972
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_000077
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000077
                                                                                                                                                      • Size 22KB
                                                                                                                                                      • SHA256 8a29164c52109a487957feb42433363ce62bd7b17c7ccec1f0225b7e9bad3c84
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_00007a
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007a
                                                                                                                                                      • Size 165KB
                                                                                                                                                      • SHA256 c334a9f2c35c03b6e15617727b335b585e47acaba726be910c77343544ffb0c7
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_00007b
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007b
                                                                                                                                                      • Size 20KB
                                                                                                                                                      • SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_00007e
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007e
                                                                                                                                                      • Size 22KB
                                                                                                                                                      • SHA256 a98d0d4af945bf8ffa1b1c1158986d30b5204ed4f3f5f246ee45a24c1de4b276
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_00007f
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007f
                                                                                                                                                      • Size 21KB
                                                                                                                                                      • SHA256 76bb772510b6c189f97315d7de2cdd0e669bc7a42a870d59a883831d235fd60f
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_000083
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000083
                                                                                                                                                      • Size 65KB
                                                                                                                                                      • SHA256 b828aab688cb063ab86af028a2080e6caea9f945f6172ec924fde72c86623c50
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_000088
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000088
                                                                                                                                                      • Size 41KB
                                                                                                                                                      • SHA256 6b23e94dfa260fe97e76f3c1c043a5186edb3d0990e78e2e8a56b5583c202320
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_000089
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000089
                                                                                                                                                      • Size 23KB
                                                                                                                                                      • SHA256 06df011163bc2147a0b8dbf5d412f24bfe7ebaaa1654a2d4ac2c68cc71373ddd
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_00008b
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00008b
                                                                                                                                                      • Size 117KB
                                                                                                                                                      • SHA256 f0859cb85de0093284a2a621d70181215d83fb694ef7cbf236748309904b5779
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_00008c
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00008c
                                                                                                                                                      • Size 23KB
                                                                                                                                                      • SHA256 941843f8433cb7cbf5b3397cd680ddfe4859463d6b8a765a6c8f04bcaccb6934
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_00008e
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00008e
                                                                                                                                                      • Size 25KB
                                                                                                                                                      • SHA256 d9540eb1443a2baa58d3b021f2ea8eedb61a3ff7d89f75eebcf7d65d7be4f302
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      f_00009c
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00009c
                                                                                                                                                      • Size 127KB
                                                                                                                                                      • SHA256 e5f1dabe89a7a1d0ae94bd8e14a273cb5144a6541c34a54192411677c18c43a2
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      fe8b7ca011cc9644_0
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fe8b7ca011cc9644_0
                                                                                                                                                      • Size 301B
                                                                                                                                                      • SHA256 d0c3a87e5750d88ea3d9136795be4a569a7a5dbb0acaa56ec655ac984cebb309
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      the-real-index
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 54803d6e721a815cbd87a273910352d8756e185c88f51da4968d8000440d834e
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      the-real-index
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                      • Size 6KB
                                                                                                                                                      • SHA256 76a2d751e5da9a643631201d88379b9476991b5a724ba1dc38df5057bea8e2e0
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      the-real-index
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                      • Size 3KB
                                                                                                                                                      • SHA256 c46c4af1235abc2ecbe0fbbee116d1c0e25f3cc0ed2e5d9a81673ac33b389e17
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Network Persistent State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                      • Size 45KB
                                                                                                                                                      • SHA256 a38a6912a4475a59fb5e2cb6daf305e13d0f72e6f6fc3cf3b75f16a0341ca810
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Network Persistent State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                      • Size 40KB
                                                                                                                                                      • SHA256 9f5f82f85063078abf30af8bae1742c864cc71841ed01286e5bb8c0efee0c107
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Network Persistent State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                      • Size 50KB
                                                                                                                                                      • SHA256 7d58b20e5eb08c4e06efc0ef7729936ab00ec4d87edde0638f204d1bcea9310b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Network Persistent State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                      • Size 25KB
                                                                                                                                                      • SHA256 e92a2fc3de20eb4bf3f62666c0c18930c769d39a7bb315807274b2f5d8747365
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Network Persistent State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                      • Size 6KB
                                                                                                                                                      • SHA256 b8535539f237e2a58c6709b764b6b0bb636233cd44d28c78a54d86dfe439a3bd
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      SCT Auditing Pending Reports
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                      • Size 2B
                                                                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                      Submit Download

                                                                                                                                                      TransportSecurity
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                      • Size 5KB
                                                                                                                                                      • SHA256 db63ecff9c9da6fd9d0bac3fd1e524a4c20319780bd5451c1243021cfc18f212
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Preferences
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                      • Size 17KB
                                                                                                                                                      • SHA256 16e8d3b63f9ae3616d5b9c744d053c7bc7f53a1e542785a7ce622777bea7727d
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Preferences
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                      • Size 12KB
                                                                                                                                                      • SHA256 6a8079be58802128efaf5c6dc89ffb1ba43cba8c55ec190d7c156204fb558d7f
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Preferences
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                      • Size 14KB
                                                                                                                                                      • SHA256 74ab8695f53d4977b340c8aa3b7f05064f39ba2bb4363215c4411ce6461bc3a2
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Preferences
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                      • Size 14KB
                                                                                                                                                      • SHA256 271103977efaab9838f785b7be943cc6674f4e411b6a81f031a2c2e673ad1e21
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Preferences
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                      • Size 16KB
                                                                                                                                                      • SHA256 eb21552f11187a195132378ecba19dc4b4ea2ac6c909f5480ceb3f82359b34ea
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Preferences
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                      • Size 12KB
                                                                                                                                                      • SHA256 a8f2c3903e1b33a95933ea0ca55dde79c9b665a10cadf02e40e30e06d9dc54de
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Preferences
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                      • Size 14KB
                                                                                                                                                      • SHA256 0fb30c60f0273392936d8480ccd618b70381fdb604edfbbfa3255a73288d57a3
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Preferences
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                      • Size 16KB
                                                                                                                                                      • SHA256 bb845312cbeb1bffac8cbaf1acc71dbfd328a58cfc8381d3b817ad384618c06c
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Secure Preferences
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                      • Size 17KB
                                                                                                                                                      • SHA256 87abfd6483e055ddeb2f8fc2f483f91af443de3130ad7f6cceeeecc94a6c2511
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      b6c28cea6ed9dfc1_0
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_0
                                                                                                                                                      • Size 45KB
                                                                                                                                                      • SHA256 933ed0af338f500031944ee1be0791e843185865db0d530ed10cdab929e76e2f
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      b6c28cea6ed9dfc1_1
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_1
                                                                                                                                                      • Size 86KB
                                                                                                                                                      • SHA256 2efa655f5c5a795ecf24022bfbb199c4255bf8966f096947b490ae6b3b7e11c7
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      the-real-index
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                      • Size 168B
                                                                                                                                                      • SHA256 4cba6e41d9cc05b8ccc82f7bd2ac5c18f8be43a3e93bb4967966f112ee8970f8
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      the-real-index
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                      • Size 120B
                                                                                                                                                      • SHA256 f3dcd2d2f42c9ebaf3004a4109dca43d0d1cca397199edba76c4998d6a0b0e7c
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      the-real-index
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                      • Size 144B
                                                                                                                                                      • SHA256 78fb649f76f30175328b39fef9762d23068d9825abad8aabce960cfef23b3db5
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      the-real-index~RFe592d8e.TMP
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe592d8e.TMP
                                                                                                                                                      • Size 96B
                                                                                                                                                      • SHA256 d2c58d1cc2d4db46c142ba1ccf543bdad6292d352d7d816b712975d60bbf2031
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      5d8ee767d4d9c0cf_0
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\5d8ee767d4d9c0cf_0
                                                                                                                                                      • Size 255KB
                                                                                                                                                      • SHA256 995c2a3fc36d555d427c0623f2ab44fefd63c54ccde9f0a38be478fc399d6698
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      the-real-index
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                      • Size 96B
                                                                                                                                                      • SHA256 af897bd129e874b9b00cec3dc8a1201fcda98ee01c9b34f771fe7c7c659ec77b
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      the-real-index
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                      • Size 120B
                                                                                                                                                      • SHA256 3c8e8d591d7ae94e96ad39a82da9e337e529c19d88e44ebdc5de18cc97c63358
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                      • Size 236KB
                                                                                                                                                      • SHA256 96c7e4133eef7ea9aaa3c00492079a8cacbd8336ffb55abe002e0237dd090499
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                      • Size 235KB
                                                                                                                                                      • SHA256 db2bf672864ba4c706936d205b3aa0771703e1a88fa4fe78c5f1e151e1f9920f
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                      • Size 236KB
                                                                                                                                                      • SHA256 2d6e1d1751f80ede7759a2b33ba84487b5184a4efcc7da0595454e6e1a0784df
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                      • Size 236KB
                                                                                                                                                      • SHA256 8d0b3f3a8db4906627fb120e193d5a02b0b4de9a212eeefb0a9f7b4a19f4cedd
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                      • Size 236KB
                                                                                                                                                      • SHA256 add78432796f07eed09bb7747228f6716dba9b38ad67b1aae5831d0abe32f88b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                      • Size 235KB
                                                                                                                                                      • SHA256 8b94c72517dc662b353ef90fa5cf2bc96404ba9d4b48fe20f74ad1d3584e24ee
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                      • Size 236KB
                                                                                                                                                      • SHA256 111c6c2e36581e2a68b9dd286a3205062fefa15c45c3c07c72f939d8a8d91974
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                      • Size 236KB
                                                                                                                                                      • SHA256 c1f27c4def21bafeaa83a936e6b33452ead53f4df8c50e83c1e8d4b7137e641c
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                      • Size 236KB
                                                                                                                                                      • SHA256 1f12dedecdc10e0f837a982002f1bd3a13b82c4eb9df3cc4c1b6753645d2404f
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      aeb61b04-00f7-42aa-bf7c-f1691b948497.tmp
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\aeb61b04-00f7-42aa-bf7c-f1691b948497.tmp
                                                                                                                                                      • Size 115KB
                                                                                                                                                      • SHA256 8bac8fdcd135116e390f1aeddf38a42f206c9a0bf8d8eaed5db72f78bffdae79
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      settings.dat
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                      • Size 280B
                                                                                                                                                      • SHA256 8ea7e0fecea3cff3eed1b2465f8ac10dd32c4c4f4907b953d2427b6a8542537b
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      settings.dat
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                      • Size 280B
                                                                                                                                                      • SHA256 5116dd98c2b23ba5b09db7653ab553aa29b175fa64b8b9ed64ecd21beb5831c6
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      settings.dat
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                      • Size 280B
                                                                                                                                                      • SHA256 e8c11bffd04a845e6747271563ae4a847b510ffe734f41902fbd4b2f062eee45
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      the-real-index
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                      • Size 4KB
                                                                                                                                                      • SHA256 b1db76743dd048beaddefc30e0c52eba7a48f78f89249e1aa90f315507a0fe9f
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      the-real-index~RFe5ae3ca.TMP
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5ae3ca.TMP
                                                                                                                                                      • Size 3KB
                                                                                                                                                      • SHA256 31bf09704cfcce8eea4392c57af566930a53857bdd3fba893c4495e148f19beb
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      2bf07900-22be-494e-9085-e2a43d9d5f5a.tmp
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\2bf07900-22be-494e-9085-e2a43d9d5f5a.tmp
                                                                                                                                                      • Size 2B
                                                                                                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                      Submit Download

                                                                                                                                                      Edge Profile.ico
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                      • Size 70KB
                                                                                                                                                      • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Network Persistent State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 409e83205675f5637a047bdf42643b99e7e53c4e99b444ed98739a30762a66ee
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Preferences
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                      • Size 13KB
                                                                                                                                                      • SHA256 4f262d3405e2bc47eb5968fb77da5f18b986db1281c3d1e10b8e305293bd9720
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Secure Preferences
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                      • Size 31KB
                                                                                                                                                      • SHA256 a56a4eb7bd95d84af1e4812b15509281291a3b75d2e8f7d9b13e1b3aa2e025be
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      index.txt
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                                                                                                      • Size 233B
                                                                                                                                                      • SHA256 402a4895b0b3a1ea5612f86c723ddd6190d968209d01602ff32ddaa5cc7bde83
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      index.txt
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                                                                                                      • Size 226B
                                                                                                                                                      • SHA256 e758c00779690c660122d978fcb2ccc18991cea1b79df7def8f6ec0f3310e702
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      index.txt~RFe5adf17.TMP
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5adf17.TMP
                                                                                                                                                      • Size 138B
                                                                                                                                                      • SHA256 5dad62ddc1efb97f50c60d76353b8b25bfc405127c66a6a16a5c1de1ec41705c
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 17KB
                                                                                                                                                      • SHA256 c2437e01ee08029f6e8879f1dc7ff3e88447dc612234fb48b467b508fc3b2704
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 8KB
                                                                                                                                                      • SHA256 649d7143afcfa2cdfbf3f8e61eb6c472b25ca0bc0f28ac0c2333d6059cbb0a3a
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                      • Size 8KB
                                                                                                                                                      • SHA256 47841186c1c9f4abfd4f73faaeac19fdbe9f0c55d492677d6c04b22b6993a7d3
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      8f6341c4-b9ae-4285-9984-4d59916e0d30.tmp
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8f6341c4-b9ae-4285-9984-4d59916e0d30.tmp
                                                                                                                                                      • Size 13B
                                                                                                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                      Submit Download

                                                                                                                                                      CurrentDatabase_400.wmdb
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb
                                                                                                                                                      • Size 896KB
                                                                                                                                                      • SHA256 4fc8d6a736a80a712ea0cd0ecd02c5ff2d466c5c3350851b3c335d8612467af0
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      CurrentDatabase_400.wmdb
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb
                                                                                                                                                      • Size 1024KB
                                                                                                                                                      • SHA256 9f0d988ae0d97eb49d3390c77c0f47ba147b738bc03ef02a073a14551a1c5874
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      WMSDKNS.DTD
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD
                                                                                                                                                      • Size 498B
                                                                                                                                                      • SHA256 644fbcdc20086e16d57f31c5bad98be68d02b1c061938d2f5f91cbe88c871fbf
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      WMSDKNS.XML
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML
                                                                                                                                                      • Size 9KB
                                                                                                                                                      • SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      www.bing[2].xml
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\2KEI6GG0\www.bing[2].xml
                                                                                                                                                      • Size 7KB
                                                                                                                                                      • SHA256 7075a03f622fc6aec5fc2cdfaf02582e036de91c9d4432fc6fca7061267878d1
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      wmsetup.log
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\wmsetup.log
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 b64362f87f02892628593f3a4a9276cdecf9cfe511c586c321c14029071ed077
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      XENO_CACHE.bin
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Xeno\XENO_CACHE.bin
                                                                                                                                                      • Size 36B
                                                                                                                                                      • SHA256 3bab55816f9c1c63b26bee8027a74983736938cfa748d9c91230391d4bacfb88
                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                      Submit Download

                                                                                                                                                      settings.json
                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Xeno\settings.json
                                                                                                                                                      • Size 101B
                                                                                                                                                      • SHA256 88e5c8567b1cad0fa2a42a21ac273a1ffb8a6992be41e5de548d11f281f4c373
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      default.dic
                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                                                      • Size 2B
                                                                                                                                                      • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                      Submit Download

                                                                                                                                                      Xeno-v1.3.60.zip
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60.zip
                                                                                                                                                      • Size 6.8MB
                                                                                                                                                      • SHA256 e8ea6ee3a8936390ca866af0340c8512df663bd7ffc71407ee01cb021dbbcf36
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Xeno-v1.3.60.zip:Zone.Identifier
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60.zip:Zone.Identifier
                                                                                                                                                      • Size 26B
                                                                                                                                                      • SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                      Submit Download

                                                                                                                                                      settings.dat
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Crashpad\settings.dat
                                                                                                                                                      • Size 280B
                                                                                                                                                      • SHA256 984b1057d0575060ca3293eddb197a7d9c485a4e571c151c0a83efdb3cfdaf12
                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                      Submit Download

                                                                                                                                                      settings.dat
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Crashpad\settings.dat
                                                                                                                                                      • Size 280B
                                                                                                                                                      • SHA256 46323f3812b11d5c9ae8b86604a71f4b128d408281ca3636ec6ec1149cbe6af5
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      throttle_store.dat
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Crashpad\throttle_store.dat
                                                                                                                                                      • Size 20B
                                                                                                                                                      • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                      Submit Download

                                                                                                                                                      MANIFEST-000001
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
                                                                                                                                                      • Size 41B
                                                                                                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                      Submit Download

                                                                                                                                                      Network Persistent State
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Network\Network Persistent State
                                                                                                                                                      • Size 229B
                                                                                                                                                      • SHA256 153938ecc186cd98a2f1ebd1f53ae88cfe9d9884bd470e9166a53348a071fb2b
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Network Persistent State~RFe5b179b.TMP
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Network\Network Persistent State~RFe5b179b.TMP
                                                                                                                                                      • Size 59B
                                                                                                                                                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Preferences
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Preferences
                                                                                                                                                      • Size 6KB
                                                                                                                                                      • SHA256 5cc91c3b44de53c766926b0a4f4ab7c00ddf78006952c8dbc61d5a65a3575fa2
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Preferences~RFe5b173e.TMP
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Preferences~RFe5b173e.TMP
                                                                                                                                                      • Size 6KB
                                                                                                                                                      • SHA256 2238ac6b5c9b5e95f81c0043095ea50ceae224b047e4f532d50580e33dfa693a
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      index
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Shared Dictionary\cache\index
                                                                                                                                                      • Size 24B
                                                                                                                                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                      Submit Download

                                                                                                                                                      CURRENT
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Default\Sync Data\LevelDB\CURRENT
                                                                                                                                                      • Size 16B
                                                                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                      Submit Download

                                                                                                                                                      data_0
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\GrShaderCache\data_0
                                                                                                                                                      • Size 8KB
                                                                                                                                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                      Submit Download

                                                                                                                                                      data_1
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\GrShaderCache\data_1
                                                                                                                                                      • Size 264KB
                                                                                                                                                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                      Submit Download

                                                                                                                                                      data_2
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\GrShaderCache\data_2
                                                                                                                                                      • Size 8KB
                                                                                                                                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                      Submit Download

                                                                                                                                                      data_3
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\GrShaderCache\data_3
                                                                                                                                                      • Size 8KB
                                                                                                                                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Local State
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 132b9583e8cc4ef28b526f7d16ddff86bdb341c629e43eab4d1ff27da43b9d9a
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Local State
                                                                                                                                                      • Size 2KB
                                                                                                                                                      • SHA256 98416e38f0f41023b03c28c92e1739340cfaab463e96cfb80a8e99f310a47ccf
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Local State
                                                                                                                                                      • Size 3KB
                                                                                                                                                      • SHA256 e6da2064a3921463ef724cfd4b29d04f213ab89ea3b77286f85caa3aeebba634
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Local State
                                                                                                                                                      • Size 16KB
                                                                                                                                                      • SHA256 97b09eb4c734fb2d5af74acb42cad74dc48ca74e71608124635961411a823a09
                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      Local State~RFe5ad66c.TMP
                                                                                                                                                      • Path C:\Users\Admin\Downloads\Xeno-v1.3.60\Xeno-v1.3.60\Xeno.exe.WebView2\EBWebView\Local State~RFe5ad66c.TMP
                                                                                                                                                      • Size 1KB
                                                                                                                                                      • SHA256 50647a7e6203464b671eb97cbc6e3e6681d068fbdf3fb26296efe10f78ee771b
                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                      Submit Download

                                                                                                                                                      memory/8-1250-0x0000029C6A8C0000-0x0000029C6A96F000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/8-814-0x00007FFD093B0000-0x00007FFD093B1000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/2488-1431-0x000001EE80E80000-0x000001EE80E81000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/2488-1433-0x000001EE80E80000-0x000001EE80E81000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/2488-1416-0x000001EE80E80000-0x000001EE80E81000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/2488-1428-0x000001EE80E80000-0x000001EE80E81000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/2488-1429-0x000001EE80E80000-0x000001EE80E81000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/2488-1430-0x000001EE80E80000-0x000001EE80E81000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/2488-1415-0x000001EE80E80000-0x000001EE80E81000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/2488-1434-0x000001EE80E80000-0x000001EE80E81000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/2488-1432-0x000001EE80E80000-0x000001EE80E81000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/2488-1417-0x000001EE80E80000-0x000001EE80E81000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/3008-2282-0x0000025A50970000-0x0000025A50A70000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/3008-2280-0x0000025A3EC50000-0x0000025A3ED50000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/3008-2295-0x0000025B626E0000-0x0000025B62700000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/3008-2297-0x0000025A62120000-0x0000025A62140000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/3008-2376-0x0000025B642B0000-0x0000025B643B0000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/4920-29-0x0000000004930000-0x0000000004940000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/4920-30-0x0000000004930000-0x0000000004940000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/4920-32-0x0000000004930000-0x0000000004940000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/4920-31-0x0000000004930000-0x0000000004940000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/4920-33-0x0000000004930000-0x0000000004940000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/4920-34-0x0000000004930000-0x0000000004940000-memory.dmp
                                                                                                                                                      Download

                                                                                                                                                      memory/6248-907-0x00007FFD093B0000-0x00007FFD093B1000-memory.dmp
                                                                                                                                                      Download