Analysis

  • max time kernel
    150s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/10/2026, 21:38

General

  • Target
    SKlauncher-4.0.54-setup.exe
  • Size 122.0MB
  • Sample261022-1g59eaas3r
  • SHA256 8fe5168ecd41fcfba4d360998ab95ddef4655c3eadb47aa956ea0b1dc41854d4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 21 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Run Powershell to get system information.

  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 24 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SKlauncher-4.0.54-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\SKlauncher-4.0.54-setup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4008
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -NonInteractive -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      2⤵
      • Hide Artifacts: Ignore Process Interrupts
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3404
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -NonInteractive -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2620
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -NonInteractive -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\sklauncher', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:1780
  • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
    "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Reads the TCP/IP host and domain name from the registry
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3464
    • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
      "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1828,i,9220343646168653514,8214118744243126092,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1852,i,11290110204768547930,8006148193101295860,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1824 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2440
    • C:\Windows\system32\reg.exe
      reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v InstallationType
      2⤵
        PID:2092
      • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
        "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot,starship-icon --secure-schemes=starship-screenshot,starship-icon --bypasscsp-schemes=starship-screenshot,starship-icon --fetch-schemes=starship-screenshot,starship-icon --streaming-schemes=starship-screenshot,starship-icon --field-trial-handle=1828,i,9220343646168653514,8214118744243126092,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1852,i,11290110204768547930,8006148193101295860,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2172 /prefetch:3
        2⤵
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        PID:3960
      • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
        "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot,starship-icon --secure-schemes=starship-screenshot,starship-icon --bypasscsp-schemes=starship-screenshot,starship-icon --fetch-schemes=starship-screenshot,starship-icon --streaming-schemes=starship-screenshot,starship-icon --app-user-model-id=pl.skmedix.sklauncher --app-path="C:\Users\Admin\AppData\Local\Programs\sklauncher\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1792704798515982 --launch-time-ticks=592895828 --field-trial-handle=1828,i,9220343646168653514,8214118744243126092,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1852,i,11290110204768547930,8006148193101295860,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2768 /prefetch:1
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4136
      • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
        "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAQgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1828,i,9220343646168653514,8214118744243126092,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1852,i,11290110204768547930,8006148193101295860,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3492 /prefetch:8
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        PID:2436

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          powershell.exe.log

          • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\powershell.exe.log
          • Size 2KB
          • SHA256 c03c91dd74498cc33a32d616fb3050ad954ed4f57e671e2e9651aedb7b128ff3
          • MD5 SHA1 SHA512 TLSH

          StartupProfileData-NonInteractive

          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
          • Size 16KB
          • SHA256 ea6b275b7e234473655ec92436cec0dbac7e55af1e94396cac74d18978dc3f30
          • MD5 SHA1 SHA512 SSDEEP TLSH

          StartupProfileData-NonInteractive

          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
          • Size 16KB
          • SHA256 422c9bab27bdf45e709105fe7f64e9f49b0596bd4d45429f207b554f8954563f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          LICENSE.electron.txt

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\LICENSE.electron.txt
          • Size 1KB
          • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
          • MD5 SHA1 SHA512 TLSH

          LICENSES.chromium.html

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\LICENSES.chromium.html
          • Size 19.4MB
          • SHA256 c971fa90cb787337e9df73773f3b43cd5621f035e53cded439bd927b3b759e0c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          chrome_200_percent.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\chrome_200_percent.pak
          • Size 192KB
          • SHA256 b74ad439f3d3762657f3ba533a6af3ac63315c838ed46519891366f43d834a0e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          d3dcompiler_47.dll

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\d3dcompiler_47.dll
          • Size 4.5MB
          • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dxcompiler.dll

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\dxcompiler.dll
          • Size 24.4MB
          • SHA256 e00e2c37cb8924389a0363691e65a58e8ac2da9093f3db80dc8f7a5b89253fdd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dxil.dll

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\dxil.dll
          • Size 1.4MB
          • SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ffmpeg.dll

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\ffmpeg.dll
          • Size 2.9MB
          • SHA256 af461f247e8bd008eee24e9954be9a6aed6402c50d716e16fab2b8a774ed98fa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          icudtl.dat

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\icudtl.dat
          • Size 10.4MB
          • SHA256 bd8c145abdf3f8383276ce01dfa4ae48709bef9fef1c0711eb7c3fab4f6eb7c2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libEGL.dll

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\libEGL.dll
          • Size 457KB
          • SHA256 ca19e6fd75c9c1551dfdf0f5749f2e4dba73ea0d452de4ef5534e30a5558b34c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libGLESv2.dll

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\libGLESv2.dll
          • Size 7.7MB
          • SHA256 f2cf8f5477d6ee06e84e55b2e947871f709fbf0ea56dff22c73acb7743d0e0a1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          af.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\af.pak
          • Size 599KB
          • SHA256 dcf39c3edbb6b0a625baee0263a9b426eadd1a6d1bfbf03a209501a18bc4b0e4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          am.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\am.pak
          • Size 971KB
          • SHA256 b1d444f2346105a6e15f9b14fc5653e1edaa2b435290fb8f1238347a4d4ca8f9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ar.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\ar.pak
          • Size 1.0MB
          • SHA256 0baa84907ae148d2fc772cdd6c62dbeedfcc45aa4bc67c9d7164906ff0c69247
          • MD5 SHA1 SHA512 SSDEEP TLSH

          bg.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\bg.pak
          • Size 1.1MB
          • SHA256 e4a5bea23a26a06af611a7cb518b22a1d53ec5df45a6322f0e264b99c7318441
          • MD5 SHA1 SHA512 SSDEEP TLSH

          bn.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\bn.pak
          • Size 1.4MB
          • SHA256 8e4aebe835b6b46f31c4a902e833d645cfe2990dcf354d1d3c5851e468b4c277
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ca.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\ca.pak
          • Size 676KB
          • SHA256 8a472eabdc3f30d94c56367d526f6d345ad65732827097aac747438f233a536f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cs.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\cs.pak
          • Size 701KB
          • SHA256 5804ba5b76974b48b15922cf91c3e9dbbf549e2d88218dc767e4650520503135
          • MD5 SHA1 SHA512 SSDEEP TLSH

          da.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\da.pak
          • Size 629KB
          • SHA256 57f4637094de41122da569415c16c5524794bc90aa3af226da14703d04981db0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          de.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\de.pak
          • Size 677KB
          • SHA256 4919ce127533d3cac698d837306161c00cf69ce30f9fa4b25b80fda171d78f89
          • MD5 SHA1 SHA512 SSDEEP TLSH

          el.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\el.pak
          • Size 1.2MB
          • SHA256 48d430dca8785ce24fc605851b2bb739164b8e5fb5588909329a82e58f6902d0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          en-GB.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\en-GB.pak
          • Size 546KB
          • SHA256 7d3f5c381b1ec39bc57d6cee58f9bd69be9b36aa98ffca0b94e81f4df92e5388
          • MD5 SHA1 SHA512 SSDEEP TLSH

          en-US.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\en-US.pak
          • Size 552KB
          • SHA256 74404352908184e834397df60b238f23462e77d69ac4136b4f20af2db6191436
          • MD5 SHA1 SHA512 SSDEEP TLSH

          es-419.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\es-419.pak
          • Size 667KB
          • SHA256 cd173ec7abdc3609b8ea33764fa8e106147121ee2d262cf5aef22d50fd386fb9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          es.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\es.pak
          • Size 663KB
          • SHA256 9ff88eabacab95f8bbef9e95f63d3619fa8d640ec03523d80abb26243b059a65
          • MD5 SHA1 SHA512 SSDEEP TLSH

          et.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\et.pak
          • Size 605KB
          • SHA256 0292298736847491828465a3dcf04cf4a0d9bd63d4b1a9d183c7eeb389343d26
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fa.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\fa.pak
          • Size 1002KB
          • SHA256 61323fafa841e5cb977e80d27b2c2746ab3eee7fdeec4e9312915d9e0c45b52e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fi.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\fi.pak
          • Size 617KB
          • SHA256 0535e2acd4517ce8099aa0a4a3e562af37ca6a699faca1de3b348b8bfacf2a8b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fil.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\fil.pak
          • Size 698KB
          • SHA256 f9e86324deee168d160a51402588da9987646c8c5899b76b6255d7e3a46a7bb5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fr.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\fr.pak
          • Size 721KB
          • SHA256 843d7236fef5375ef08b9af9eb7e443ecafe0593deebc18a45ba5cf67a3a1f00
          • MD5 SHA1 SHA512 SSDEEP TLSH

          gu.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\gu.pak
          • Size 1.4MB
          • SHA256 34e4d54d66a0b0471542ee76c55cc9d3b27fcaf15cdf63c3d7e7b46cfdfb3f4f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          he.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\he.pak
          • Size 877KB
          • SHA256 75fbe196eda1791775243822da4e7f9737710f627b6ee27cc4c6d975865ea7cd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hi.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\hi.pak
          • Size 1.5MB
          • SHA256 7557c5d5b46c8ff4ebc159bbdf0477d28e4baa7c3bedcb947d59028301ff21e6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hr.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\hr.pak
          • Size 674KB
          • SHA256 9ef77921560c91e5d6e42df6504589b8b7efb84c9b5119ac51e9a10d8c83a089
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hu.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\hu.pak
          • Size 721KB
          • SHA256 31e407f43bbd0cd0692755f961bb39d10af1f9f0af205455dd70fb4c7eeb85a5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          id.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\id.pak
          • Size 598KB
          • SHA256 e7957c9c58f890b5d053ea50c5fcb4b66cbc3c47478c42a5962810cb15814249
          • MD5 SHA1 SHA512 SSDEEP TLSH

          it.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\it.pak
          • Size 653KB
          • SHA256 4b06d5f8a4f75b3122bc3f1c54af59eadf6117507758d4efbcb5f1f88f322e61
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ja.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\ja.pak
          • Size 796KB
          • SHA256 89178f1acd5af747dde41399ba0c1e229eb53e2800d4b15ea2d9f3358e69edd3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          kn.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\kn.pak
          • Size 1.6MB
          • SHA256 9744dbadbb7c31cc6393a0682daf91045be270bab934dff7dbad79b76287616e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ko.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\ko.pak
          • Size 677KB
          • SHA256 fa24cc7d4089c81247ed9d5e81d8b67890a09a82ff6d450fe94a654374a2a46e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          lt.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\lt.pak
          • Size 734KB
          • SHA256 bc5d99751f1b252ed074bfc4bf6dc94321b3f785a0a0d4300209acae40220f74
          • MD5 SHA1 SHA512 SSDEEP TLSH

          lv.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\lv.pak
          • Size 731KB
          • SHA256 e91342ed84e1847968b40194250b4d76bbd2ea13133675b8b099dca45ee0f197
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ml.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\ml.pak
          • Size 1.6MB
          • SHA256 b813f87ec80ffb496413949ef7bc8208db6fb7ceaaf88145f160bf8abcfe2f01
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mr.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\mr.pak
          • Size 1.3MB
          • SHA256 fa87d519a8545b2748c52ccd7704b320877b2d03385991ceabe75c2745200331
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ms.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\ms.pak
          • Size 629KB
          • SHA256 2ab44645c1ed7b68c9121ee0ab9cdf8c7b9d1721d131b08f258b8a85b8ed0af0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nb.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\nb.pak
          • Size 601KB
          • SHA256 8eaa23c418a3fafb9e85b5445e73fb2f5e13be1f033ff2487c4081148aaa2f4e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nl.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\nl.pak
          • Size 627KB
          • SHA256 432dcf6ae7f418986244ed3c953aa36176fce7218de4e48158213389594e7dcd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pl.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\pl.pak
          • Size 700KB
          • SHA256 5e47475490d1514e3670c44f55a2061672c8e7f6219211b3d907bacbe5aa0a5c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pt-BR.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\pt-BR.pak
          • Size 657KB
          • SHA256 0be502c6b71b94ccd76b30a0b8ce3a816d7223ab1d4c0a81c150df0cf3fc43f5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pt-PT.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\pt-PT.pak
          • Size 661KB
          • SHA256 98daa1072e7c405e3f5e030bfe25ef1e12b31a96e0b1db245d6805a564390f75
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ro.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\ro.pak
          • Size 686KB
          • SHA256 da5c79d06ae972aa460724ef378f91bf4afda911b167a896963f6e0d4daf9aec
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ru.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\ru.pak
          • Size 1.1MB
          • SHA256 e4236ef1cad608c76dc1594645c345feb3459f8ccdcdf4ed2f5b33ba188dabeb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sk.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\sk.pak
          • Size 713KB
          • SHA256 ca41ac3e8b3352f1bdd66ce54afaddfaf86c1cebfd5bfa3e82a23bded674a83f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sl.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\sl.pak
          • Size 682KB
          • SHA256 2bc385d457dc844794f9396458c4090e6233afec5a08b4a5a92e45ef31e07b78
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sr.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\sr.pak
          • Size 1.0MB
          • SHA256 c3b4a5aba1e86ea0088e5c33002bb055ed567840b2859b277014be0a7283013e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sv.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\sv.pak
          • Size 609KB
          • SHA256 3af85c15ce3e76344404c37325a60932ce53763539c8cd8b3120424f709f73de
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sw.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\sw.pak
          • Size 645KB
          • SHA256 a806d782b21930ec6243b8e5b393e7fa970ce9d297e96b02e6596fa6ce6c8a86
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ta.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\ta.pak
          • Size 1.6MB
          • SHA256 516660683214c01341300fa8d15c7e39aecc38792b76fe74bdcc464024f4294f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          te.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\te.pak
          • Size 1.5MB
          • SHA256 5439181ded31f8cc5dbcc1eed358753d4b7449ad29380baabe4cb893d8751a06
          • MD5 SHA1 SHA512 SSDEEP TLSH

          th.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\th.pak
          • Size 1.3MB
          • SHA256 946b4a45a9d43b15359927f33307fc35f50d7e880f02890b07bdfd1160f2db59
          • MD5 SHA1 SHA512 SSDEEP TLSH

          tr.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\tr.pak
          • Size 656KB
          • SHA256 98151ed08e518b76f33cf20926717e0d8e28d8e4eb111e0c6e33b95c8acaa99e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          uk.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\uk.pak
          • Size 1.1MB
          • SHA256 6cdfc2782df67c0b72962fc62d2c2eb8d93102255115dae093dde530e345c643
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ur.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\ur.pak
          • Size 986KB
          • SHA256 d57cd219249e207d34c21a619935d0f0a7814a0ccdd36051a42400c60a599e47
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vi.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\vi.pak
          • Size 781KB
          • SHA256 37f2c01a308ad8bb93d9525d81480880f97d54191dbe7c1c1e75aa9fcf009450
          • MD5 SHA1 SHA512 SSDEEP TLSH

          zh-CN.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\zh-CN.pak
          • Size 558KB
          • SHA256 e2c2d278e66e1cd806f707259fabf8fed43f0e2e04edb23e4808c46fb872d8d7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          zh-TW.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\locales\zh-TW.pak
          • Size 551KB
          • SHA256 f4c2f92b0de0326377b7d441fab0fe7441ab3d09c188c530445c210a88377234
          • MD5 SHA1 SHA512 SSDEEP TLSH

          resources.pak

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\resources.pak
          • Size 6.9MB
          • SHA256 b88115979b34be771ce2547a550cc46cb11fa19882e02f54f84a5471fa94f9f3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          app-update.yml

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\resources\app-update.yml
          • Size 172B
          • SHA256 ff275def080229bfc8a75a08b67c072cacdc7a538fb01104c3c2e6a89e741e5d
          • MD5 SHA1 SHA512 TLSH

          app.asar

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\resources\app.asar
          • Size 47.5MB
          • SHA256 0cbd6327b8b932c73d445e0c3b86860fe7b219d70dde25e5e395ff5e9f1be364
          • MD5 SHA1 SHA512 SSDEEP TLSH

          icon.png

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\resources\app.asar.unpacked\resources\icon.png
          • Size 132KB
          • SHA256 ceb2210260fc5846582030fac047cf70fa012beb080d1b4c8c1ad0e9d2fa9783
          • MD5 SHA1 SHA512 SSDEEP TLSH

          trayTemplate.png

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\resources\app.asar.unpacked\resources\tray\trayTemplate.png
          • Size 535B
          • SHA256 4618ef51f1bade1b1f3662a0a28ff63a9534944a567ee9f815285cf9866a48af
          • MD5 SHA1 SHA512 TLSH
          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\resources\app.asar.unpacked\resources\tray\[email protected]
          • Size 787B
          • SHA256 5b509bb2dc0ae257405e2c35dd62138f123decf424174b37e99c9bcece79af69
          • MD5 SHA1 SHA512 TLSH

          elevate.exe

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\resources\elevate.exe
          • Size 105KB
          • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
          • MD5 SHA1 SHA512 SSDEEP TLSH

          snapshot_blob.bin

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\snapshot_blob.bin
          • Size 356KB
          • SHA256 f625cd2ebfeb3e78afab97e0da108426eca24711c15995377d473b3dac9768df
          • MD5 SHA1 SHA512 SSDEEP TLSH

          v8_context_snapshot.bin

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\v8_context_snapshot.bin
          • Size 722KB
          • SHA256 4872a09b92ceb55ee3ebefbd6123652a75efa7d97f9ea3b41fcc2d5c8270a6f4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vk_swiftshader.dll

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\vk_swiftshader.dll
          • Size 5.3MB
          • SHA256 be32093f330a57cc3bf31ae4e32c61ef0c6b751a9212d1d8507fe8394e2f2859
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vk_swiftshader_icd.json

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\vk_swiftshader_icd.json
          • Size 106B
          • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
          • MD5 SHA1 SHA512 TLSH

          vulkan-1.dll

          • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\vulkan-1.dll
          • Size 902KB
          • SHA256 f7d669b9239cd7a460d609cb60c202dccac5253ffaf68131cc09c969fe59334a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          __PSScriptPolicyTest_gwb3ycev.upx.ps1

          • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_gwb3ycev.upx.ps1
          • Size 60B
          • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
          • MD5 SHA1 SHA512 TLSH

          chrome_100_percent.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsqC5BD.tmp\7z-out\chrome_100_percent.pak
          • Size 117KB
          • SHA256 d76fe8fa3a14cd73e4c858746e2ab2d2fa6f2df38a906fa5814b50a8a895fc96
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SpiderBanner.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsqC5BD.tmp\SpiderBanner.dll
          • Size 9KB
          • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
          • MD5 SHA1 SHA512 SSDEEP TLSH

          StdUtils.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsqC5BD.tmp\StdUtils.dll
          • Size 100KB
          • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsqC5BD.tmp\System.dll
          • Size 12KB
          • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
          • MD5 SHA1 SHA512 SSDEEP TLSH

          WinShell.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsqC5BD.tmp\WinShell.dll
          • Size 3KB
          • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
          • MD5 SHA1 SHA512 TLSH

          nsExec.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsqC5BD.tmp\nsExec.dll
          • Size 6KB
          • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nsis7z.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsqC5BD.tmp\nsis7z.dll
          • Size 424KB
          • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
          • MD5 SHA1 SHA512 SSDEEP TLSH

          current.blockmap

          • Path C:\Users\Admin\AppData\Local\sklauncher-updater\pending\current.blockmap
          • Size 132KB
          • SHA256 94ef1a83f71eafe0311b711709c54904e3ab764edf2f7e2f2d247aadd32e957a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          926d81b4-a3d2-45cd-a6c8-b5123a190b29.tmp

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\926d81b4-a3d2-45cd-a6c8-b5123a190b29.tmp
          • Size 57B
          • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
          • MD5 SHA1 SHA512 TLSH

          temp-index

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Code Cache\wasm\index-dir\temp-index
          • Size 48B
          • SHA256 e85ee0eea5ff5ef075e43a3c1814fb329c68717fa1f574dd3bd9c6c9210e7d00
          • MD5 SHA1 SHA512

          data_0

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_0
          • Size 8KB
          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
          • MD5 SHA1 SHA512 SSDEEP

          data_1

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_1
          • Size 264KB
          • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
          • MD5 SHA1 SHA512 SSDEEP

          data_2

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_2
          • Size 8KB
          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
          • MD5 SHA1 SHA512 SSDEEP

          data_3

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_3
          • Size 8KB
          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
          • MD5 SHA1 SHA512 SSDEEP

          CURRENT

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Local Storage\leveldb\CURRENT
          • Size 16B
          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
          • MD5 SHA1 SHA512

          6f1f84d6-31ea-4805-8787-495a672f3af5.tmp

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Network\6f1f84d6-31ea-4805-8787-495a672f3af5.tmp
          • Size 741B
          • SHA256 c553c5067b8b3a6593ed266bdf8beff7cf039781548cd15af9f1fb0c12117ac6
          • MD5 SHA1 SHA512 TLSH

          Network Persistent State

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Network\Network Persistent State
          • Size 59B
          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
          • MD5 SHA1 SHA512 TLSH

          instances.json

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\instances.json
          • Size 886B
          • SHA256 1e3e83356659a6d1dfcfaaadee676aaeef5e19852fcda5d766ed315b3187c49a
          • MD5 SHA1 SHA512 TLSH

          sklauncher_logs.txt

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
          • Size 5KB
          • SHA256 341c79f3a7636ccdb811f5bc6a441c73244998fc408f7ecc14f8e85ea30d2290
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sklauncher_logs.txt

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
          • Size 1KB
          • SHA256 dd6c1537db8770d5d156926398076ad14e5078b4373494a86590d0756bd71a80
          • MD5 SHA1 SHA512 TLSH

          sklauncher_logs.txt

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
          • Size 1KB
          • SHA256 51b9835f51c8ceb00a6d59c2d340c36ef7304d13dafeb9dea7b8786e74269966
          • MD5 SHA1 SHA512 TLSH

          sklauncher_logs.txt

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
          • Size 2KB
          • SHA256 d83ea9aaad4ea698e4372a35e37f0c959858a045f3717200c53e63b664e782b7
          • MD5 SHA1 SHA512 TLSH

          settings.json

          • Path C:\Users\Admin\AppData\Roaming\.sklauncher\settings.json
          • Size 1KB
          • SHA256 465552d6e6d3de196b94f12e9ad00ad8d097c98aef548a330654bad9ae518273
          • MD5 SHA1 SHA512 TLSH

          default.dic

          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
          • Size 2B
          • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
          • MD5 SHA1 SHA512

          memory/1780-104-0x00000000708A0000-0x0000000070BF4000-memory.dmp

          memory/1780-96-0x0000000070120000-0x000000007016C000-memory.dmp

          memory/2436-977-0x0000014B9BCE0000-0x0000014B9BCE1000-memory.dmp

          memory/2436-1009-0x0000014B97C10000-0x0000014B99487000-memory.dmp

          memory/2436-975-0x0000014B9BCE0000-0x0000014B9BCE1000-memory.dmp

          memory/2436-976-0x0000014B9BCE0000-0x0000014B9BCE1000-memory.dmp

          memory/2436-979-0x0000014B9BCE0000-0x0000014B9BCE1000-memory.dmp

          memory/2436-978-0x0000014B9BCE0000-0x0000014B9BCE1000-memory.dmp

          memory/2436-981-0x0000014B9BCE0000-0x0000014B9BCE1000-memory.dmp

          memory/2436-980-0x0000014B9BCE0000-0x0000014B9BCE1000-memory.dmp

          memory/2440-937-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-932-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-1085-0x000002B40DB00000-0x000002B40F377000-memory.dmp

          memory/2440-1069-0x000002B40DB00000-0x000002B40F377000-memory.dmp

          memory/2440-987-0x000002B40DB00000-0x000002B40F377000-memory.dmp

          memory/2440-908-0x000002B410370000-0x000002B410371000-memory.dmp

          memory/2440-909-0x000002B410370000-0x000002B410371000-memory.dmp

          memory/2440-931-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-933-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-910-0x000002B410370000-0x000002B410371000-memory.dmp

          memory/2440-947-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-946-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-945-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-944-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-943-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-942-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-941-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-940-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-939-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-938-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-935-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-936-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2440-934-0x000002B410BF0000-0x000002B410BF2000-memory.dmp

          memory/2620-64-0x0000000004690000-0x00000000046A0000-memory.dmp

          memory/2620-82-0x0000000007020000-0x0000000007031000-memory.dmp

          memory/2620-81-0x00000000070B0000-0x0000000007146000-memory.dmp

          memory/2620-73-0x0000000070120000-0x000000007016C000-memory.dmp

          memory/3404-24-0x0000000005610000-0x0000000005C38000-memory.dmp

          memory/3404-52-0x00000000078A0000-0x00000000078BA000-memory.dmp

          memory/3404-37-0x0000000006590000-0x00000000065DC000-memory.dmp

          memory/3404-38-0x000000007F540000-0x000000007F550000-memory.dmp

          memory/3404-40-0x0000000070120000-0x000000007016C000-memory.dmp

          memory/3404-48-0x0000000004FD0000-0x0000000004FE0000-memory.dmp

          memory/3404-39-0x0000000006B30000-0x0000000006B62000-memory.dmp

          memory/3404-49-0x0000000006B10000-0x0000000006B2E000-memory.dmp

          memory/3404-36-0x0000000006560000-0x000000000657E000-memory.dmp

          memory/3404-50-0x0000000007740000-0x00000000077E3000-memory.dmp

          memory/3404-51-0x0000000007EF0000-0x000000000856A000-memory.dmp

          memory/3404-25-0x0000000005590000-0x00000000055B2000-memory.dmp

          memory/3404-53-0x0000000007910000-0x000000000791A000-memory.dmp

          memory/3404-54-0x0000000007A90000-0x0000000007ABA000-memory.dmp

          memory/3404-55-0x0000000007AC0000-0x0000000007AE4000-memory.dmp

          memory/3404-56-0x00000000708A0000-0x0000000070BF4000-memory.dmp

          memory/3404-26-0x0000000005E70000-0x0000000005ED6000-memory.dmp

          memory/3404-23-0x0000000004FD0000-0x0000000004FE0000-memory.dmp

          memory/3404-22-0x0000000004F80000-0x0000000004FB6000-memory.dmp

          memory/3404-27-0x0000000005EE0000-0x0000000005F46000-memory.dmp

          memory/3404-21-0x0000000004FD0000-0x0000000004FE0000-memory.dmp

          memory/3404-35-0x0000000005F50000-0x00000000062A4000-memory.dmp