Analysis

  • max time kernel
    898s
  • max time network
    838s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    28/08/2026, 21:43

General

  • Target
    Brutal_Box_0.9.7_WIN10 (1).exe
  • Size 65.6MB
  • Sample260828-1k8hyaec27
  • SHA256 8596322722d45320e0f91307655b08c8a8db1e1642fcab7e6e311b1991456b02
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 1 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
  • Suspicious use of WriteProcessMemory 36 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Brutal_Box_0.9.7_WIN10 (1).exe
    "C:\Users\Admin\AppData\Local\Temp\Brutal_Box_0.9.7_WIN10 (1).exe"
    1⤵
    • Checks whether UAC is enabled
    • Suspicious use of WriteProcessMemory
    PID:2260
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=2260.1372.2379807320383094155
      2⤵
      • Drops file in Program Files directory
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:4764
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x118,0x16c,0x7ff9e9a1b078,0x7ff9e9a1b084,0x7ff9e9a1b090
        3⤵
          PID:1940
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1724,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=1716 /prefetch:2
          3⤵
            PID:3296
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1876,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=2016 /prefetch:3
            3⤵
              PID:3240
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1720,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:8
              3⤵
                PID:4864
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3608,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
                3⤵
                  PID:2916
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4036,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:8
                  3⤵
                    PID:2200
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4624,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:8
                    3⤵
                      PID:700
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4652,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:8
                      3⤵
                        PID:4544
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4752,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:8
                        3⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:4756
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4636,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=4716 /prefetch:8
                        3⤵
                          PID:416
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4072,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:8
                          3⤵
                            PID:1996
                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=932,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=1280 /prefetch:8
                            3⤵
                              PID:4208
                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4768,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:8
                              3⤵
                                PID:2864
                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4792,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:8
                                3⤵
                                  PID:3736
                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4280,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
                                  3⤵
                                    PID:3612
                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4276,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:8
                                    3⤵
                                      PID:1052
                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2228,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:8
                                      3⤵
                                        PID:2276
                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView" --webview-exe-name="Brutal_Box_0.9.7_WIN10 (1).exe" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4632,i,9249753998931621984,17416865966807698767,262144 --variations-seed-version --mojo-platform-channel-handle=1284 /prefetch:8
                                        3⤵
                                          PID:3156

                                    Network

                                          MITRE ATT&CK Enterprise v16

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          manifest.json

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_1104258004\manifest.json
                                          • Size 76B
                                          • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                                          • MD5 SHA1 SHA512 TLSH

                                          manifest.json

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_1149005030\manifest.json
                                          • Size 69B
                                          • SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
                                          • MD5 SHA1 SHA512 TLSH

                                          manifest.json

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_1256310216\manifest.json
                                          • Size 102B
                                          • SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
                                          • MD5 SHA1 SHA512 TLSH

                                          manifest.json

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_1400530756\manifest.json
                                          • Size 43B
                                          • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                          • MD5 SHA1 SHA512

                                          manifest.json

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_1463054149\manifest.json
                                          • Size 113B
                                          • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                          • MD5 SHA1 SHA512 TLSH

                                          manifest.json

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_154941243\manifest.json
                                          • Size 116B
                                          • SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
                                          • MD5 SHA1 SHA512 TLSH

                                          manifest.fingerprint

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_1641907765\manifest.fingerprint
                                          • Size 66B
                                          • SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
                                          • MD5 SHA1 SHA512 TLSH

                                          manifest.json

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_1641907765\manifest.json
                                          • Size 135B
                                          • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                          • MD5 SHA1 SHA512 TLSH

                                          hyph-as.hyb

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_1729118912\hyph-as.hyb
                                          • Size 703B
                                          • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                          • MD5 SHA1 SHA512 TLSH

                                          hyph-hi.hyb

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_1729118912\hyph-hi.hyb
                                          • Size 687B
                                          • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                          • MD5 SHA1 SHA512 TLSH

                                          hyph-nb.hyb

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_1729118912\hyph-nb.hyb
                                          • Size 141KB
                                          • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          manifest.json

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_1729118912\manifest.json
                                          • Size 82B
                                          • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                          • MD5 SHA1 SHA512 TLSH

                                          manifest.json

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_393579406\manifest.json
                                          • Size 78B
                                          • SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
                                          • MD5 SHA1 SHA512 TLSH

                                          manifest.json

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_705891871\manifest.json
                                          • Size 1002B
                                          • SHA256 dca3cd7a673d0776a085c0b8958a85bdd8392923db21a0b55f4d37210f752322
                                          • MD5 SHA1 SHA512 TLSH

                                          manifest.json

                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4764_818932469\manifest.json
                                          • Size 132B
                                          • SHA256 de864bf0ab8abacfba536d4e9764eca658f903bd2457f955e128c4ee181c7e58
                                          • MD5 SHA1 SHA512 TLSH

                                          protocols.json

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
                                          • Size 3KB
                                          • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                                          • MD5 SHA1 SHA512 TLSH

                                          crl-set

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
                                          • Size 22KB
                                          • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          settings.dat

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Crashpad\settings.dat
                                          • Size 280B
                                          • SHA256 63573970dba29a31b1a206e1ee84058ca65375a8457313a83b20b903491215be
                                          • MD5 SHA1 SHA512

                                          settings.dat

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Crashpad\settings.dat
                                          • Size 280B
                                          • SHA256 20d0b3f56e310852b08fc03d64a2666e0687d673f15df1858863edc2275b4257
                                          • MD5 SHA1 SHA512 TLSH

                                          throttle_store.dat

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Crashpad\throttle_store.dat
                                          • Size 20B
                                          • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                          • MD5 SHA1 SHA512

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                          • Size 216B
                                          • SHA256 6384e887b589342a1422646e431fd7557f6e56947c7c990a2a6f6dccb1438acf
                                          • MD5 SHA1 SHA512 TLSH

                                          the-real-index~RFe5873b4.TMP

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5873b4.TMP
                                          • Size 48B
                                          • SHA256 471d0aead55f7a5636806f15688e71be8202ca069d0b64b81465e48b9f1cef3c
                                          • MD5 SHA1 SHA512

                                          data_1

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Default\DawnGraphiteCache\data_1
                                          • Size 264KB
                                          • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                          • MD5 SHA1 SHA512 SSDEEP

                                          data_0

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Default\DawnWebGPUCache\data_0
                                          • Size 8KB
                                          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                          • MD5 SHA1 SHA512 SSDEEP

                                          data_2

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Default\DawnWebGPUCache\data_2
                                          • Size 8KB
                                          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                          • MD5 SHA1 SHA512 SSDEEP

                                          data_3

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Default\DawnWebGPUCache\data_3
                                          • Size 8KB
                                          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                          • MD5 SHA1 SHA512 SSDEEP

                                          MANIFEST-000001

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
                                          • Size 41B
                                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                          • MD5 SHA1 SHA512

                                          Network Persistent State

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Default\Network\Network Persistent State
                                          • Size 993B
                                          • SHA256 e46200f3bf6fe75a33c55005b03673d3d764a80aa2946ad669541aa68aa2e5f3
                                          • MD5 SHA1 SHA512 TLSH

                                          Network Persistent State~RFe592a04.TMP

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Default\Network\Network Persistent State~RFe592a04.TMP
                                          • Size 59B
                                          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                          • MD5 SHA1 SHA512 TLSH

                                          SCT Auditing Pending Reports

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                                          • Size 2B
                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                          • MD5 SHA1 SHA512

                                          Preferences

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Default\Preferences
                                          • Size 6KB
                                          • SHA256 66d52c90b8fcd7613c2c1bcdc5a1aca47d1f2dfdbdb751a40b9fb3a6322495fa
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Preferences

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Default\Preferences
                                          • Size 6KB
                                          • SHA256 e0514126c0921a9718e6e86204fc19c35a2cd2e835a9631843b973ce97fb33d7
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Preferences~RFe58ac1a.TMP

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Default\Preferences~RFe58ac1a.TMP
                                          • Size 6KB
                                          • SHA256 85120828c79f91e2c7a9e038c9dbdc11876e1cb954b040b81a632b2faaab9244
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          CURRENT

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
                                          • Size 16B
                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                          • MD5 SHA1 SHA512

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Local State
                                          • Size 1KB
                                          • SHA256 070b0a22b825c9866aab739365f5a95d88cbe63f5aa7184fff33f25ffc789a26
                                          • MD5 SHA1 SHA512 TLSH

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Local State
                                          • Size 2KB
                                          • SHA256 1aa7e7939f12980861185b0dc16b5a472a4e0fef29618db471557ef4163838f3
                                          • MD5 SHA1 SHA512 TLSH

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Local State
                                          • Size 3KB
                                          • SHA256 6f5425ccfb09f60b5d789b1afba977df0d8011fa9500bfba4e30fb50bb38eff5
                                          • MD5 SHA1 SHA512 TLSH

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Local State
                                          • Size 4KB
                                          • SHA256 8fb6f25ba0082f474e2f264cd5911a13707c769c3bb3b80e0bf340f422326e2f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Local State
                                          • Size 4KB
                                          • SHA256 cccf2bb938b05acf7f05812db314652cbc6d925fba3ac64d61bf2a033a5080c4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Local State
                                          • Size 17KB
                                          • SHA256 42642a42b5eb07b2a68514235778bbf56986dffa89b6394b1ce3ea8e4b1d303b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Local State~RFe580cbd.TMP

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Local State~RFe580cbd.TMP
                                          • Size 1KB
                                          • SHA256 6da2eb2e1f1c4c0d8cfa0bbb68c9a2fe39cefed93efc1700bafa8968f9d1bff9
                                          • MD5 SHA1 SHA512 TLSH

                                          crs.pb

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\PKIMetadata\46.0.0.0\crs.pb
                                          • Size 233KB
                                          • SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          ct_config.pb

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\PKIMetadata\46.0.0.0\ct_config.pb
                                          • Size 16KB
                                          • SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          kp_pinslist.pb

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\PKIMetadata\46.0.0.0\kp_pinslist.pb
                                          • Size 10KB
                                          • SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Filtering Rules

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
                                          • Size 2.1MB
                                          • SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          LICENSE

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
                                          • Size 24KB
                                          • SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Advertising

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Advertising
                                          • Size 19KB
                                          • SHA256 231be4e0be45f588b161634c816b9a5a49f530c0dcb55461d37715a94482dca1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Analytics

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Analytics
                                          • Size 3KB
                                          • SHA256 bba2063d20d70f4ab06dc2ae04c2564cc2b8c631b6dab68248957dbdf107fdd2
                                          • MD5 SHA1 SHA512 TLSH

                                          CompatExceptions

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\CompatExceptions
                                          • Size 689B
                                          • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                          • MD5 SHA1 SHA512 TLSH

                                          Content

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Content
                                          • Size 4KB
                                          • SHA256 9a63f38e22b8573cbd47a4ef7b67ccb0934b87239e075c5cfafc7a1014e340c6
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Cryptomining

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Cryptomining
                                          • Size 552B
                                          • SHA256 bdee796bf07922c152d770cd5928955f1b12c12515c4db6fc0ab8d2ad0c44c4e
                                          • MD5 SHA1 SHA512 TLSH

                                          Entities

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Entities
                                          • Size 68KB
                                          • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Fingerprinting

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Fingerprinting
                                          • Size 1KB
                                          • SHA256 05b29240a28bb75b4535d558edc510eb92df0ac27e9502498b99cdbc576b8298
                                          • MD5 SHA1 SHA512 TLSH

                                          LICENSE

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\LICENSE
                                          • Size 34KB
                                          • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Social

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Social
                                          • Size 754B
                                          • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                          • MD5 SHA1 SHA512 TLSH

                                          Staging

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\Staging
                                          • Size 36B
                                          • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                          • MD5 SHA1 SHA512

                                          TransparentAdvertisers

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Mu\TransparentAdvertisers
                                          • Size 105B
                                          • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                          • MD5 SHA1 SHA512 TLSH

                                          Advertising

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Advertising
                                          • Size 21KB
                                          • SHA256 5c62ee354070033dba1bad40dcde115a81db45943b2274fae7059a5aa5c61d33
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Analytics

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Analytics
                                          • Size 3KB
                                          • SHA256 d303be86132f8d7131941d41736694c2e29647ebaeccb38c0976fe66616ec8af
                                          • MD5 SHA1 SHA512 TLSH

                                          Content

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Content
                                          • Size 5KB
                                          • SHA256 70c295600066e9d3feeacd6bfc735bbcac6243694e4259477822d3db252729e1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Cryptomining

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Cryptomining
                                          • Size 32B
                                          • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                          • MD5 SHA1 SHA512

                                          Entities

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Entities
                                          • Size 128KB
                                          • SHA256 a5409d2c6a8cbd9339a95a5e09fcaedd4546a49d47fc4ebeda2d8749cfc66987
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          Fingerprinting

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Fingerprinting
                                          • Size 2KB
                                          • SHA256 5306139881e81eebffd97de016130fdbb04e3ae976d94ad7a74e5dee63fbafcd
                                          • MD5 SHA1 SHA512 TLSH

                                          LICENSE

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\LICENSE
                                          • Size 66B
                                          • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                          • MD5 SHA1 SHA512 TLSH

                                          Other

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Other
                                          • Size 34B
                                          • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                          • MD5 SHA1 SHA512

                                          Social

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Social
                                          • Size 3KB
                                          • SHA256 28ac79097cf67587a228fdfe4746a1a9b31dae94d5a63bb3fcaa82443d69e7af
                                          • MD5 SHA1 SHA512 TLSH

                                          Staging

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Staging
                                          • Size 1KB
                                          • SHA256 f90f4cb0976a046e93978971b58fba24bc93b0129e8612fdd0e5646a1bebed22
                                          • MD5 SHA1 SHA512 TLSH

                                          manifest.fingerprint

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\manifest.fingerprint
                                          • Size 66B
                                          • SHA256 403e6e5965571238c03bb289a9e533261775fe381e5a91300788cd37e465b4a2
                                          • MD5 SHA1 SHA512 TLSH

                                          keys.json

                                          • Path C:\Users\Admin\AppData\Local\Brutal Box\WebView2\EBWebView\TrustTokenKeyCommitments\2026.8.3.1\keys.json
                                          • Size 8KB
                                          • SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                          memory/2916-127-0x00007FF9F8030000-0x00007FF9F8031000-memory.dmp

                                          memory/3296-206-0x00000267CC810000-0x00000267CC812000-memory.dmp

                                          memory/3296-285-0x00000267CCD90000-0x00000267CCD94000-memory.dmp

                                          memory/3296-286-0x00000267CCD60000-0x00000267CCD68000-memory.dmp

                                          memory/3296-288-0x00000267CCDA0000-0x00000267CCDA3000-memory.dmp

                                          memory/3296-289-0x00000267CCD90000-0x00000267CCD96000-memory.dmp

                                          memory/3296-292-0x00000267CCDA0000-0x00000267CCDA4000-memory.dmp

                                          memory/3296-291-0x00000267CCDB0000-0x00000267CCDB2000-memory.dmp

                                          memory/3296-294-0x00000267CD4C0000-0x00000267CD4C4000-memory.dmp

                                          memory/3296-282-0x00000267CCD60000-0x00000267CCD64000-memory.dmp

                                          memory/3296-283-0x00000267CCD30000-0x00000267CCD38000-memory.dmp

                                          memory/3296-280-0x00000267CCD70000-0x00000267CCD86000-memory.dmp

                                          memory/3296-270-0x00000267CCD00000-0x00000267CCD03000-memory.dmp

                                          memory/3296-271-0x00000267CCCB0000-0x00000267CCCB5000-memory.dmp

                                          memory/3296-273-0x00000267CCD30000-0x00000267CCD39000-memory.dmp

                                          memory/3296-274-0x00000267CCD40000-0x00000267CCD51000-memory.dmp

                                          memory/3296-276-0x00000267CCD30000-0x00000267CCD32000-memory.dmp

                                          memory/3296-279-0x00000267CCD60000-0x00000267CCD6B000-memory.dmp

                                          memory/3296-277-0x00000267CCD00000-0x00000267CCD04000-memory.dmp

                                          memory/3296-268-0x00000267CCD10000-0x00000267CCD28000-memory.dmp

                                          memory/3296-267-0x00000267CCD00000-0x00000267CCD0C000-memory.dmp

                                          memory/3296-264-0x00000267CCCB0000-0x00000267CCCB2000-memory.dmp

                                          memory/3296-265-0x00000267CCCA0000-0x00000267CCCA4000-memory.dmp

                                          memory/3296-262-0x00000267CCCE0000-0x00000267CCCF2000-memory.dmp

                                          memory/3296-261-0x00000267CCCB0000-0x00000267CCCB9000-memory.dmp

                                          memory/3296-259-0x00000267CCCC0000-0x00000267CCCD6000-memory.dmp

                                          memory/3296-258-0x00000267CCCB0000-0x00000267CCCBB000-memory.dmp

                                          memory/3296-252-0x00000267CCC90000-0x00000267CCC98000-memory.dmp

                                          memory/3296-255-0x00000267CCCA0000-0x00000267CCCA2000-memory.dmp

                                          memory/3296-256-0x00000267CCC90000-0x00000267CCC94000-memory.dmp

                                          memory/3296-253-0x00000267CCC80000-0x00000267CCC8F000-memory.dmp

                                          memory/3296-250-0x00000267CCC50000-0x00000267CCC51000-memory.dmp

                                          memory/3296-248-0x00000267CCC50000-0x00000267CCC53000-memory.dmp

                                          memory/3296-249-0x00000267CCC20000-0x00000267CCC25000-memory.dmp

                                          memory/3296-246-0x00000267CCC60000-0x00000267CCC76000-memory.dmp

                                          memory/3296-245-0x00000267CCC50000-0x00000267CCC5B000-memory.dmp

                                          memory/3296-242-0x00000267CCC20000-0x00000267CCC22000-memory.dmp

                                          memory/3296-243-0x00000267CCC10000-0x00000267CCC14000-memory.dmp

                                          memory/3296-239-0x00000267CCC20000-0x00000267CCC29000-memory.dmp

                                          memory/3296-240-0x00000267CCC30000-0x00000267CCC41000-memory.dmp

                                          memory/3296-237-0x00000267CCC00000-0x00000267CCC01000-memory.dmp

                                          memory/3296-235-0x00000267CCC00000-0x00000267CCC04000-memory.dmp

                                          memory/3296-236-0x00000267CC9E0000-0x00000267CC9E7000-memory.dmp

                                          memory/3296-233-0x00000267CC9F0000-0x00000267CC9F2000-memory.dmp

                                          memory/3296-231-0x00000267CC9D0000-0x00000267CC9D8000-memory.dmp

                                          memory/3296-230-0x00000267CC9E0000-0x00000267CC9E4000-memory.dmp

                                          memory/3296-205-0x00000267CC800000-0x00000267CC801000-memory.dmp

                                          memory/3296-208-0x00000267CC940000-0x00000267CC943000-memory.dmp

                                          memory/3296-209-0x00000267CC800000-0x00000267CC806000-memory.dmp

                                          memory/3296-213-0x00000267CC980000-0x00000267CC982000-memory.dmp

                                          memory/3296-214-0x00000267CC940000-0x00000267CC944000-memory.dmp

                                          memory/3296-216-0x00000267CC990000-0x00000267CC994000-memory.dmp

                                          memory/3296-219-0x00000267CC9A0000-0x00000267CC9A2000-memory.dmp

                                          memory/3296-220-0x00000267CC990000-0x00000267CC994000-memory.dmp

                                          memory/3296-222-0x00000267CC9B0000-0x00000267CC9B4000-memory.dmp

                                          memory/3296-223-0x00000267CC9A0000-0x00000267CC9A8000-memory.dmp

                                          memory/3296-225-0x00000267CC9C0000-0x00000267CC9C2000-memory.dmp

                                          memory/3296-227-0x00000267CC9D0000-0x00000267CC9D2000-memory.dmp

                                          memory/3296-228-0x00000267CC9B0000-0x00000267CC9B4000-memory.dmp

                                          memory/3296-217-0x00000267CC980000-0x00000267CC988000-memory.dmp

                                          memory/3296-211-0x00000267CC970000-0x00000267CC972000-memory.dmp

                                          memory/3296-25-0x00007FF9F8030000-0x00007FF9F8031000-memory.dmp

                                          memory/4864-75-0x00007FF9F8360000-0x00007FF9F8361000-memory.dmp

                                          memory/4864-76-0x00007FF9F7D90000-0x00007FF9F7D91000-memory.dmp