Analysis

  • max time kernel
    149s
  • max time network
    157s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    17/10/2026, 11:13

General

  • Target
    xyzs-asr.exe
  • Size 7.4MB
  • Sample261017-nbfeksd18j
  • SHA256 2fed84112be4e8ee840b61a34efbda94dd7f840e6786ae6f9597fbdbf3920958
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 12 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Windows directory 14 IoCs
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
  • Suspicious use of WriteProcessMemory 35 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\xyzs-asr.exe
    "C:\Users\Admin\AppData\Local\Temp\xyzs-asr.exe"
    1⤵
    • Checks whether UAC is enabled
    • Reads the TCP/IP host and domain name from the registry
    • Suspicious use of WriteProcessMemory
    PID:2736
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=xyzs-asr.exe --webview-exe-version=1.0.2610+12 --user-data-dir="C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --use-fake-ui-for-media-stream --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=2736.4544.1760936215180766700 /pfhostedapp:3ff2ca229719db9d52e83ef1f3a4b8931c22353b
      2⤵
      • Drops file in Windows directory
      • Enumerates system info in registry
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:4212
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView /prefetch:4 /pfhostedapp:3ff2ca229719db9d52e83ef1f3a4b8931c22353b --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7fff3c145fd8,0x7fff3c145fe4,0x7fff3c145ff0
        3⤵
          PID:3452
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView" --webview-exe-name=xyzs-asr.exe --webview-exe-version=1.0.2610+12 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1788 --field-trial-handle=1792,i,6280168392536231066,15825303445912949186,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:3ff2ca229719db9d52e83ef1f3a4b8931c22353b
          3⤵
            PID:2524
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView" --webview-exe-name=xyzs-asr.exe --webview-exe-version=1.0.2610+12 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2208 --field-trial-handle=1792,i,6280168392536231066,15825303445912949186,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:3ff2ca229719db9d52e83ef1f3a4b8931c22353b
            3⤵
              PID:4404
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView" --webview-exe-name=xyzs-asr.exe --webview-exe-version=1.0.2610+12 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2240 --field-trial-handle=1792,i,6280168392536231066,15825303445912949186,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:3ff2ca229719db9d52e83ef1f3a4b8931c22353b
              3⤵
                PID:2256
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView" --webview-exe-name=xyzs-asr.exe --webview-exe-version=1.0.2610+12 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --use-fake-ui-for-media-stream --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3392 --field-trial-handle=1792,i,6280168392536231066,15825303445912949186,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:3ff2ca229719db9d52e83ef1f3a4b8931c22353b /prefetch:1
                3⤵
                  PID:1340
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView" --webview-exe-name=xyzs-asr.exe --webview-exe-version=1.0.2610+12 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4464 --field-trial-handle=1792,i,6280168392536231066,15825303445912949186,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:3ff2ca229719db9d52e83ef1f3a4b8931c22353b
                  3⤵
                    PID:3544
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView" --webview-exe-name=xyzs-asr.exe --webview-exe-version=1.0.2610+12 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=1100 --field-trial-handle=1792,i,6280168392536231066,15825303445912949186,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:3ff2ca229719db9d52e83ef1f3a4b8931c22353b
                    3⤵
                      PID:1028
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView" --webview-exe-name=xyzs-asr.exe --webview-exe-version=1.0.2610+12 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4584 --field-trial-handle=1792,i,6280168392536231066,15825303445912949186,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:3ff2ca229719db9d52e83ef1f3a4b8931c22353b
                      3⤵
                        PID:1652
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView" --webview-exe-name=xyzs-asr.exe --webview-exe-version=1.0.2610+12 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4480 --field-trial-handle=1792,i,6280168392536231066,15825303445912949186,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:3ff2ca229719db9d52e83ef1f3a4b8931c22353b
                        3⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:2716
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView" --webview-exe-name=xyzs-asr.exe --webview-exe-version=1.0.2610+12 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3952 --field-trial-handle=1792,i,6280168392536231066,15825303445912949186,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:3ff2ca229719db9d52e83ef1f3a4b8931c22353b
                        3⤵
                          PID:3244
                      • C:\Windows\system32\tar.exe
                        "tar" -xf C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\audio-v0.9.0-bin-windows-x64-cuda13.3.zip -C C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract
                        2⤵
                          PID:2436
                        • C:\Users\Admin\AppData\Local\Temp\engine\audiocpp_cli.exe
                          "C:\Users\Admin\AppData\Local\Temp\engine\audiocpp_cli.exe" --list-devices
                          2⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          PID:2576
                        • C:\Users\Admin\AppData\Local\Temp\engine\audiocpp_cli.exe
                          "C:\Users\Admin\AppData\Local\Temp\engine\audiocpp_cli.exe" --list-devices
                          2⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          PID:4836
                        • C:\Users\Admin\AppData\Local\Temp\engine\audiocpp_cli.exe
                          "C:\Users\Admin\AppData\Local\Temp\engine\audiocpp_cli.exe" --list-devices
                          2⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          PID:1556
                        • C:\Users\Admin\AppData\Local\Temp\engine\audiocpp_cli.exe
                          "C:\Users\Admin\AppData\Local\Temp\engine\audiocpp_cli.exe" --list-devices
                          2⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          PID:1968
                        • C:\Users\Admin\AppData\Local\Temp\engine\audiocpp_cli.exe
                          "C:\Users\Admin\AppData\Local\Temp\engine\audiocpp_cli.exe" --list-devices
                          2⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          PID:6020
                        • C:\Users\Admin\AppData\Local\Temp\engine\audiocpp_server.exe
                          "C:\Users\Admin\AppData\Local\Temp\engine\audiocpp_server.exe" --config C:\Users\Admin\AppData\Local\Temp\cache\server.runtime.json --no-ui --host 127.0.0.1 --port 50336 --device 0 --threads 2
                          2⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          PID:3244

                      Network

                            MITRE ATT&CK Enterprise v16

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            LICENSE

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\LICENSE
                            • Size 10KB
                            • SHA256 7e125adced85b7f84c04371179d15d51fbd702cefd060a37043fe38d6eb1722e
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            audiocpp_cli.exe

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\audiocpp_cli.exe
                            • Size 22.2MB
                            • SHA256 3319380ff1a51a15a2dab4bac0a10dea0908b3a465ea0e80636c04e0aedd6f9b
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            audiocpp_gguf.exe

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\audiocpp_gguf.exe
                            • Size 981KB
                            • SHA256 7c823ce6b9ae723e020be88b21dab46b1fd22d7590ab10c66b7d24271bf50dd2
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            audiocpp_server.exe

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\audiocpp_server.exe
                            • Size 30.2MB
                            • SHA256 5ffba749dc87be651e045a3bbae82478c84bb8d723d8902bec80ba032a05bf95
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            ggml-base.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\ggml-base.dll
                            • Size 631KB
                            • SHA256 0b14a902948cb43366a0ef61387a0a0f098421bf7cfa9d8aa33d4d3f44ac62d8
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            ggml-cpu-alderlake.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\ggml-cpu-alderlake.dll
                            • Size 900KB
                            • SHA256 7277755b1308f348fba93ffb0318291b90fa4ee4a8b2c124d21c112ed28fe811
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            ggml-cpu-cannonlake.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\ggml-cpu-cannonlake.dll
                            • Size 1002KB
                            • SHA256 6501c1685eb4243d09f659546874444fe3dc420a928b9cfe41a603f6e3680838
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            ggml-cpu-cascadelake.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\ggml-cpu-cascadelake.dll
                            • Size 1001KB
                            • SHA256 7fa3c3ecc1b259202f5f6e4f603d1c4b9148e41af185b60164bd04250254ea00
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            ggml-cpu-haswell.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\ggml-cpu-haswell.dll
                            • Size 902KB
                            • SHA256 4829b638b1fc598dbae239728d34f552b1d8168a1abdfa80902a058d3bddb14b
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            ggml-cpu-icelake.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\ggml-cpu-icelake.dll
                            • Size 1001KB
                            • SHA256 2c201e051f26e8bd9a2a7ebe5aa6289cc3e0506729b67935959edef7e7dd46bd
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            ggml-cpu-sandybridge.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\ggml-cpu-sandybridge.dll
                            • Size 844KB
                            • SHA256 a80bf80b2eb1deb1b559dd7343f7825b5a909cf4294350649385c3cf545d952c
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            ggml-cpu-skylakex.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\ggml-cpu-skylakex.dll
                            • Size 1002KB
                            • SHA256 b2a3b07680be767e9185ce6f1b4be586d90bd615d650f53c73093be06b4bb6d9
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            ggml-cpu-sse42.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\ggml-cpu-sse42.dll
                            • Size 767KB
                            • SHA256 0653e1f259084c22cf30ef9f01b6cc29ab94006bac1c85542aa21291cbe3b8f4
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            ggml-cpu-x64.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\ggml-cpu-x64.dll
                            • Size 768KB
                            • SHA256 afcb5f15e9e4ab076f9be5ffe52598853f00760e2ccf03195800a4c4ca02ae0d
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            ggml.dll

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\ggml.dll
                            • Size 65KB
                            • SHA256 cfd810c98149d87066874790b833b29602bec45f8465a9b0ff6f19f7dc6e0355
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            ace_step.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\ace_step.json
                            • Size 9KB
                            • SHA256 6055437594ba192fae1aa48d3ab8b0cde77327d85deb505600f5853eb63426da
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            apollo.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\apollo.json
                            • Size 2KB
                            • SHA256 ff4611d20ae0138c13fd8edff36ee673bb75411881f0ac7ef4665ff13a56ef4f
                            • MD5 SHA1 SHA512 TLSH

                            audio8_asr.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\audio8_asr.json
                            • Size 5KB
                            • SHA256 4678483ed74d44f1c6a83db76aee623a8962d9cfb75c3f6d23a01dd6d559a0ea
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            audio8_tts.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\audio8_tts.json
                            • Size 6KB
                            • SHA256 f009ccccaa860197418f78807797e6de0f8ec506ad7bf17da4ba4b81db2f2d81
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            audiosr.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\audiosr.json
                            • Size 3KB
                            • SHA256 e6194df49a60f0a888f9ef887a5b76d3c93ad428b2ad7d9143eb7a0894527de6
                            • MD5 SHA1 SHA512 TLSH

                            auk.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\auk.json
                            • Size 7KB
                            • SHA256 4cab19f674030bb18edc8fa14213e6c1d37337a1b8097a935e25c45fd4921bbe
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            breeze_tts.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\breeze_tts.json
                            • Size 7KB
                            • SHA256 3b4f2cfb91f3e426737054ec58113abb9e546288c99a8fd3fe17c0eeee5e5efe
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            bs_roformer.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\bs_roformer.json
                            • Size 2KB
                            • SHA256 ebb30cf584cecae0154098a87e754f0ef132be853311734dd09a682e964fcf24
                            • MD5 SHA1 SHA512 TLSH

                            builtin_audio_utils.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\builtin_audio_utils.json
                            • Size 1KB
                            • SHA256 79796f785b76df7fa7b0d34d1b94a3a9364fafce1d53dff2969968ca568f9b4b
                            • MD5 SHA1 SHA512 TLSH

                            canary_asr.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\canary_asr.json
                            • Size 4KB
                            • SHA256 98d1c3b0ad108dc571f9ca755ba43c1a0bf38498c21d0b1373891781dff6d020
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            chatterbox.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\chatterbox.json
                            • Size 4KB
                            • SHA256 35b8c4c5229f805a549988eaa6b292dfe1f4385daf461dcee97390592a56ec15
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            chatterbox_turbo.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\chatterbox_turbo.json
                            • Size 2KB
                            • SHA256 50a52c735cee939d5d616a1b7365c59d43debd6928c50be66813e695e68c9db2
                            • MD5 SHA1 SHA512 TLSH

                            citrinet_asr.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\citrinet_asr.json
                            • Size 1KB
                            • SHA256 e7bdc1a4744c689bfc4ddb16d8edafc47ae3cd5079192eb561d77e6d8b31fc85
                            • MD5 SHA1 SHA512 TLSH

                            cohere_asr.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\cohere_asr.json
                            • Size 4KB
                            • SHA256 eb9636a22574674a1b5bcd050bd452d0ddc27de61e60a76c62f5ce3fd1425123
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            confucius4_r2t2.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\confucius4_r2t2.json
                            • Size 8KB
                            • SHA256 e68565e510b68881c305e4aea730ab18fca75bfacc721942d4db767681957345
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            confucius4_tts.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\confucius4_tts.json
                            • Size 9KB
                            • SHA256 74f71754ffa3edde702ccb2fe2fc331447f69a8a8417e92adeeef468d945ba4f
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            controlfoley.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\controlfoley.json
                            • Size 4KB
                            • SHA256 eba234a4822ca3e699c49b724ff0bbb4365a0c425fc066124301e13aeca88708
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            cosyvoice3.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\cosyvoice3.json
                            • Size 6KB
                            • SHA256 a31976c888850be41868af6fd992bb1d61e94c221a57af25e18632b8f0a696f6
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            dots_tts.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\dots_tts.json
                            • Size 12KB
                            • SHA256 a5733ecdf011309476f469eb7d847dc1d023226a591a5e25c96bde310d231705
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            dramabox.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\dramabox.json
                            • Size 6KB
                            • SHA256 4993a9cd5d15d734b0364847abb05d7405ef83755d1e479efcb4d13d79aa786c
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            echo_tts.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\echo_tts.json
                            • Size 6KB
                            • SHA256 a64117f3ba1b14ed6c82723a85f37880476f08c78f26ae6152ef0e9ec831dc96
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            f5_tts.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\f5_tts.json
                            • Size 9KB
                            • SHA256 0f4155ebb6536a0f16d1547fb359705f55cd2edd6f84e40d4f2ffc376c6a1372
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            firered_audio.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\firered_audio.json
                            • Size 7KB
                            • SHA256 8d5412bd8a2bef8afd711b0a81e5bcddc2770e65b19a7e69cd4ac87b95176e14
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            fireredtts3.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\fireredtts3.json
                            • Size 8KB
                            • SHA256 4eb35215863e6b75ec904d8da38313492a41ed2cc197d695a56dfa545a9e5767
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            fish_audio.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\fish_audio.json
                            • Size 6KB
                            • SHA256 326c8605586a29dfe55ba9a5e045a53e1aad1a57cdac859b31c969d3f9df25ea
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            fun_asr_nano.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\fun_asr_nano.json
                            • Size 5KB
                            • SHA256 c1bbc4368ffe6aac443ab6f5d778f18878780b7e06035c60af059c18c81dc484
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            gigaam_asr.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\gigaam_asr.json
                            • Size 5KB
                            • SHA256 c1dd8d845e0090ba2330e6e193eaac5632845c445dad2b8784325fc571c8074b
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            glm_tts.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\glm_tts.json
                            • Size 7KB
                            • SHA256 aab0d5f49b32dbaac95a2087766637b5579a46c4d1ffff61d2efa798f43557e6
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            granite5asr.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\granite5asr.json
                            • Size 4KB
                            • SHA256 f032ede81789c98638e0c6d8065885b8204b6af6b6d0894e3b2c6f3024ced890
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            heartmula.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\heartmula.json
                            • Size 9KB
                            • SHA256 2e32e241276cb739b62e07e3bcf0f1bd415e3d574644ecb176888c8547f7feec
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            higgs_audio_stt.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\higgs_audio_stt.json
                            • Size 5KB
                            • SHA256 ca4c8993ca904b77f1c034ea174a7cb58f1a21572984958e9c9a35ed2de73e40
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            higgs_audio_tts.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\higgs_audio_tts.json
                            • Size 2KB
                            • SHA256 39016432a3aecbe5ba438e290ae653e270e87bedee80030d9874716385f1a491
                            • MD5 SHA1 SHA512 TLSH

                            htdemucs.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\htdemucs.json
                            • Size 2KB
                            • SHA256 e59f48160fbf56ed5b3a0272a551424aa700d0c9e6b2f8ae855ad8323bcba28a
                            • MD5 SHA1 SHA512 TLSH

                            htdemucs_6stems.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\htdemucs_6stems.json
                            • Size 2KB
                            • SHA256 1af46325fdfe9a5641855c2bac32eaac23838b560dcac2a43b14ca33c2f07514
                            • MD5 SHA1 SHA512 TLSH

                            hviske_asr.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\hviske_asr.json
                            • Size 6KB
                            • SHA256 c70ec2808d1edb88f2cbef550684c1a116e222520148a71d362c5415ce597998
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            index_tts2.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\index_tts2.json
                            • Size 7KB
                            • SHA256 2c47cde209a0a2a0b38f59c8c0bc2a7b672bef2bd4ad22cd5a7a7d2685340e87
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            inflect_v2.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\inflect_v2.json
                            • Size 3KB
                            • SHA256 a8a75417f9b92c4f6e80078d94eeaa5fde577723b57c7306bb3826ec34b494e9
                            • MD5 SHA1 SHA512 TLSH

                            irodori_tts.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\irodori_tts.json
                            • Size 12KB
                            • SHA256 f88867044236a5a60bc87b9f47472dfe79a2378cb21d3e30d1b6968d5ce2cce1
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            kitten_tts.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\kitten_tts.json
                            • Size 4KB
                            • SHA256 9cbb4ab16716822e55095e0917376b997f6204c62d43dc76f754db1f20f6cc67
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            kokoro_tts.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\kokoro_tts.json
                            • Size 6KB
                            • SHA256 8ca1ae600481d8dea3e212dc62d89eabd69fc85b4ae8b33f8e889f04a027294d
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            kroko_asr.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\kroko_asr.json
                            • Size 4KB
                            • SHA256 fc2b8485f66811de0f2546bdcec0eeff2dd9a4a1b92fd43df773289ec845ae20
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            liveavatar.json

                            • Path C:\Users\Admin\AppData\Local\Temp\cache\engine-bootstrap\extract\model_specs\liveavatar.json
                            • Size 8KB
                            • SHA256 6356951abc12e311aa448d3a925c40acc7f30f8b6bfb64be95291c48ba6718bb
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            config.json

                            • Path C:\Users\Admin\AppData\Local\Temp\config\config.json
                            • Size 1KB
                            • SHA256 d87ae4a35bd710d89ecc1f37e1fc925540e4e25d5ca8551a6d310c613bcef30f
                            • MD5 SHA1 SHA512 TLSH

                            version.json

                            • Path C:\Users\Admin\AppData\Local\Temp\engine\version.json
                            • Size 185B
                            • SHA256 0e3dcb760bf3562a2e64c99b337959e28a4667d56383216dc40445fdb6325c81
                            • MD5 SHA1 SHA512 TLSH

                            68c5a398-7b54-4dc8-9d6c-2070f2b10d38.tmp

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\68c5a398-7b54-4dc8-9d6c-2070f2b10d38.tmp
                            • Size 2KB
                            • SHA256 e1d2ea2cd76f1ed329129c29114f845611b75bb00ef0ce07fdf41e36d3fffe34
                            • MD5 SHA1 SHA512 TLSH

                            8197eed7-6b5f-4011-95bf-e00bfbe261ca.tmp

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\8197eed7-6b5f-4011-95bf-e00bfbe261ca.tmp
                            • Size 3KB
                            • SHA256 9464c897c5840ccac28d356beee21f8dca8a76eff72f614738d8bee3bb8f1d46
                            • MD5 SHA1 SHA512 TLSH

                            settings.dat

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\Crashpad\settings.dat
                            • Size 280B
                            • SHA256 8b604d7a04caee61f3150a21f7155c602833df6f97dae52ba9b12c4e01406bc4
                            • MD5 SHA1 SHA512 TLSH

                            settings.dat

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\Crashpad\settings.dat
                            • Size 280B
                            • SHA256 a9004c5c65d6a15f904d362a8c36e958f42f01fdda281790b91557b82f38a3c1
                            • MD5 SHA1 SHA512

                            throttle_store.dat

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\Crashpad\throttle_store.dat
                            • Size 20B
                            • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                            • MD5 SHA1 SHA512

                            9e0789eb-e195-405d-8d62-fd36de1f1f49.tmp

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\Default\9e0789eb-e195-405d-8d62-fd36de1f1f49.tmp
                            • Size 6KB
                            • SHA256 7d9268b5883eb12500d84fabd4d1a1fe49b53eae3f98efa67f1bade31cd3bb47
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            temp-index

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\Default\Code Cache\js\index-dir\temp-index
                            • Size 72B
                            • SHA256 c9d464dc24e64ad525574138e080b6c360a2294822d32749f9f1847d860f9559
                            • MD5 SHA1 SHA512 TLSH

                            the-real-index

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                            • Size 48B
                            • SHA256 21cd2af7a10dd50ae492cc45fe7a93e0b6b91c753faa98741c832617ca9dcb09
                            • MD5 SHA1 SHA512

                            MANIFEST-000001

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\Default\Extension Rules\MANIFEST-000001
                            • Size 41B
                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                            • MD5 SHA1 SHA512

                            18eac22d-50f2-4afe-9398-9f46d59fefbb.tmp

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\Default\Network\18eac22d-50f2-4afe-9398-9f46d59fefbb.tmp
                            • Size 111B
                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                            • MD5 SHA1 SHA512 TLSH

                            Network Persistent State

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\Default\Network\Network Persistent State
                            • Size 59B
                            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                            • MD5 SHA1 SHA512 TLSH

                            SCT Auditing Pending Reports

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\Default\Network\SCT Auditing Pending Reports
                            • Size 2B
                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                            • MD5 SHA1 SHA512

                            CURRENT

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\Default\Sync Data\LevelDB\CURRENT
                            • Size 16B
                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                            • MD5 SHA1 SHA512

                            f22aeb85-c6ac-46b9-b5af-8e52b5198b63.tmp

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\Default\f22aeb85-c6ac-46b9-b5af-8e52b5198b63.tmp
                            • Size 6KB
                            • SHA256 260178a3d04fbe55f2e1668d3f9ae072d19b3a790164c0d170d838cd6645bc1b
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            data_0

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\GrShaderCache\data_0
                            • Size 8KB
                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                            • MD5 SHA1 SHA512 SSDEEP

                            data_1

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\GrShaderCache\data_1
                            • Size 264KB
                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                            • MD5 SHA1 SHA512 SSDEEP

                            data_2

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\GrShaderCache\data_2
                            • Size 8KB
                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                            • MD5 SHA1 SHA512 SSDEEP

                            data_3

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\GrShaderCache\data_3
                            • Size 8KB
                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                            • MD5 SHA1 SHA512 SSDEEP

                            Local State

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\Local State
                            • Size 1KB
                            • SHA256 78850b6565b7a74534f18c2d3208c9496d1d7f8ef5c1193220221d7dd1ba35e8
                            • MD5 SHA1 SHA512 TLSH

                            c2a492b0-bd44-4271-bb2a-58d7b26524ee.tmp

                            • Path C:\Users\Admin\AppData\Local\com.xyzs.asr\EBWebView\c2a492b0-bd44-4271-bb2a-58d7b26524ee.tmp
                            • Size 15KB
                            • SHA256 f60b3cf5933af0dc477444fd129c596f13164a686813b49510227973612e3626
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            manifest.json

                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4212_1143503688\manifest.json
                            • Size 1005B
                            • SHA256 1cc15465230ffb75fd028ee3b2189c8774f56bc7dee8dd17b952e6ca92144004
                            • MD5 SHA1 SHA512 TLSH

                            manifest.json

                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4212_1369467604\manifest.json
                            • Size 43B
                            • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                            • MD5 SHA1 SHA512

                            manifest.json

                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4212_1609707998\manifest.json
                            • Size 113B
                            • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                            • MD5 SHA1 SHA512 TLSH

                            manifest.json

                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4212_2062602829\manifest.json
                            • Size 135B
                            • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                            • MD5 SHA1 SHA512 TLSH

                            memory/1028-591-0x0000021506E20000-0x0000021506E4A000-memory.dmp

                            memory/1028-583-0x0000021506E50000-0x0000021506E51000-memory.dmp

                            memory/1340-116-0x00007FFF5E300000-0x00007FFF5E301000-memory.dmp

                            memory/1652-618-0x0000028091FB0000-0x0000028091FDA000-memory.dmp

                            memory/1652-607-0x0000028091FE0000-0x0000028091FE1000-memory.dmp

                            memory/2524-199-0x00000290B18E0000-0x00000290B1AA3000-memory.dmp

                            memory/2524-26-0x00007FFF5E300000-0x00007FFF5E301000-memory.dmp

                            memory/2716-631-0x000002082B6D0000-0x000002082B6D1000-memory.dmp

                            memory/2716-630-0x000002082B6D0000-0x000002082B6D1000-memory.dmp

                            memory/2716-626-0x000002082B6D0000-0x000002082B6D1000-memory.dmp

                            memory/2716-629-0x000002082B6D0000-0x000002082B6D1000-memory.dmp

                            memory/2716-628-0x000002082B6D0000-0x000002082B6D1000-memory.dmp

                            memory/2716-627-0x000002082B6D0000-0x000002082B6D1000-memory.dmp

                            memory/2716-622-0x000002082B6D0000-0x000002082B6D1000-memory.dmp

                            memory/2716-620-0x000002082B6D0000-0x000002082B6D1000-memory.dmp

                            memory/2736-224-0x00007FF6D4EC0000-0x00007FF6D5A4E000-memory.dmp

                            memory/2736-200-0x00007FF6D4EC0000-0x00007FF6D5A4E000-memory.dmp

                            memory/2736-0-0x00007FF6D4EC0000-0x00007FF6D5A4E000-memory.dmp

                            memory/2736-209-0x00007FF6D4EC0000-0x00007FF6D5A4E000-memory.dmp

                            memory/2736-184-0x00007FF6D4EC0000-0x00007FF6D5A4E000-memory.dmp

                            memory/2736-470-0x00007FF6D4EC0000-0x00007FF6D5A4E000-memory.dmp

                            memory/2736-524-0x00007FF6D4EC0000-0x00007FF6D5A4E000-memory.dmp

                            memory/3244-655-0x0000022212EE0000-0x0000022212EE1000-memory.dmp

                            memory/3244-675-0x0000022212EB0000-0x0000022212EDA000-memory.dmp

                            memory/3544-547-0x00007FFF5E4D0000-0x00007FFF5E4D1000-memory.dmp

                            memory/3544-559-0x00000251B0FA0000-0x00000251B0FCA000-memory.dmp

                            memory/3544-548-0x00000251B0FD0000-0x00000251B0FD1000-memory.dmp