Analysis

  • user interaction
    yes
  • max time kernel
    118s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    24/10/2026, 00:29

General

  • Target
    Jarvis.exe
  • Size 143.5MB
  • Sample261024-asxtasey4v
  • SHA256 8b9f480d09889fcae37b147b9dd4e306dfbaee912d2645e30cda3995c09380ff
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 62 IoCs
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 7 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Jarvis.exe
    "C:\Users\Admin\AppData\Local\Temp\Jarvis.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4632
    • C:\Users\Admin\AppData\Local\Temp\Jarvis.exe
      "C:\Users\Admin\AppData\Local\Temp\Jarvis.exe"
      2⤵
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:1280
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x4e4 0x508
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1468

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        arduino_usage_v1.json.tmp

        • Path C:\Users\Admin\AppData\Local\JarvisAssistant\quota\arduino_usage_v1.json.tmp
        • Size 223B
        • SHA256 3fcbe3c3f088066e524a14a7333186d61dbbeb3c0b521b9541036602328b7c15
        • MD5 SHA1 SHA512 TLSH

        81d243bd2c585b0f4821__mypyc.cp312-win_amd64.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\81d243bd2c585b0f4821__mypyc.cp312-win_amd64.pyd
        • Size 204KB
        • SHA256 d3ec72dcd0418826026486957024d6f3c7ae47d06b98324f3b05e372c20f76e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qtmultimedia_en.qm

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\PySide6\translations\qtmultimedia_en.qm
        • Size 33B
        • SHA256 494ac9a2b2cb2fdeced353f4a9f898ed8dcf616e9bc667438c62681e3f7f79cf
        • MD5 SHA1 SHA512

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\_bz2.pyd
        • Size 84KB
        • SHA256 65f610646d10d5babea080e060d244b546ec52c54012e5e937dc72dcc2e2e7bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\_ctypes.pyd
        • Size 124KB
        • SHA256 0e56107a891100535f2da79d85a5ae65ff1227b4765bd108f8593ac1a1110d81
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\_lzma.pyd
        • Size 157KB
        • SHA256 e3deecc1f59a3b811c608861decd84de1e8df8bafd5e2b39188861318c5a38cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-console-l1-1-0.dll
        • Size 12KB
        • SHA256 39be1d39db5b41a1000d400d929f6858f1eb3e75a851bcbd5110fe41e8e39ae5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-datetime-l1-1-0.dll
        • Size 11KB
        • SHA256 429eb73cc17924f0068222c7210806daf5dc96df132c347f63dc4165a51a2c62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-debug-l1-1-0.dll
        • Size 11KB
        • SHA256 59a867dc60b9ef40da738406b7cccd1c8e4be34752f59c3f5c7a60c3c34b6bcc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 11KB
        • SHA256 4ba34ee15d266f65420f9d91bac19db401c9edf97a2f9bde69e4ce17c201ab67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-file-l1-1-0.dll
        • Size 15KB
        • SHA256 2087318c9edbae60d27b54dd5a5756fe5b1851332fb4dcd9efdc360dfeb08d12
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-file-l1-2-0.dll
        • Size 11KB
        • SHA256 0ae3ee32f44aaed5389cc36d337d57d0203224fc6808c8a331a12ec4955bb2f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-file-l2-1-0.dll
        • Size 11KB
        • SHA256 0bf0f70bd2b599ed0d6c137ce48cf4c419d15ee171f5faeac164e3b853818453
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-handle-l1-1-0.dll
        • Size 11KB
        • SHA256 fbe41a27837b8be026526ad2a6a47a897dd1c9f9eba639d700f7f563656bd52b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 c0f771a24e7f6eda6e65d079f7e99c57b026955657a00962bcd5ff1d43b14dd0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 11KB
        • SHA256 47abfb801bcbd349331532ba9d3e4c08489f27661de1cb08ccaf5aca0fc80726
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 12KB
        • SHA256 39635c850db76508db160a208738d30a55c4d6ee3de239cc2ddc7e18264a54a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-localization-l1-2-0.dll
        • Size 14KB
        • SHA256 659f3321f272166f0b079775df0abdaf1bc482d1bcc66f42cae08fde446eb81a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-memory-l1-1-0.dll
        • Size 12KB
        • SHA256 fab3891780c7f7bac530b4b668fce31a205fa556eaab3c6516249e84bba7c3dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 11KB
        • SHA256 c8c2e69fb9b3f0956c442c8fbafd2da64b9a32814338104c361e8b66d06d36a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 12KB
        • SHA256 b74fc81aeed00ece41cd995b24ae18a32f4e224037165f0124685288c8fae0bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 13KB
        • SHA256 5456b4c4e0045276e2ad5af8f3f29cd978c4287c2528b491935dd879e13fdaf9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 12KB
        • SHA256 c2f296dd8372681c37541b0ca8161b4621037d5318b7b8c5346cf7b8a6e22c3e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-profile-l1-1-0.dll
        • Size 11KB
        • SHA256 39942416fdc139d309e45a73835317675f5b9ab00a05ac7e3007bb846292e8c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 12KB
        • SHA256 fe7081c825cd49c91d81b466f2607a8bb21f376b4fdb76e1d21251565182d824
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-string-l1-1-0.dll
        • Size 11KB
        • SHA256 f91e905479a56183c7fbb12b215da366c601151adbcdb4cd09eb4f42d691c4c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-synch-l1-1-0.dll
        • Size 13KB
        • SHA256 e0e38faf83050127ab274fd6ccb94e9e74504006740c5d8c4b191de5f98de3b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-synch-l1-2-0.dll
        • Size 12KB
        • SHA256 c85f376407bae092cdbba92cc86c715c7535b1366406cfe50916ff3168454db0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 12KB
        • SHA256 d87b2994c283004cd45107cf9b10e6b10838c190654cf2f75e7d4894cbdae853
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-timezone-l1-1-0.dll
        • Size 12KB
        • SHA256 64d1ca4ead666023681929d86db26cfd3c70d4b2e521135205a84001d25187db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-core-util-l1-1-0.dll
        • Size 11KB
        • SHA256 a52dfa3e66d923fdf92c47d7222d56a615d5e4dd13f350a4289eb64189169977
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-conio-l1-1-0.dll
        • Size 12KB
        • SHA256 3af73012379203c1cb0eab96330e59bc3e8c488601c7b7f48fbe6d685de9523b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-convert-l1-1-0.dll
        • Size 15KB
        • SHA256 6d2c0ff2056eefa3a74856e4c34e7e868c088c7c548f05b939912efeb8191751
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-environment-l1-1-0.dll
        • Size 12KB
        • SHA256 130c9e523122d9ce605f5c5839421f32e17b5473793de7cb7d824b763e41a789
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 13KB
        • SHA256 10bffbe759fb400537db8b68b015829c6fed91823497783413deae79ae1741b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 5911c9d1d28202721e6ca6dd394ffc5e03d49dfa161ea290c3cb2778d6449f0f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-locale-l1-1-0.dll
        • Size 12KB
        • SHA256 7dc931f1a2dc7b6e7bd6e7ada99d7fadc2a65ebf8c8ea68f607a3917ac7b4d35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-math-l1-1-0.dll
        • Size 20KB
        • SHA256 a2c8d0513cad34df6209356aeae25b91cf74a2b4f79938788f56b93ebce687d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 19KB
        • SHA256 7fc3c456a25be1ca2d2802a14a8778dd69ec5fea19ce27fcce41fdafbefda569
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-private-l1-1-0.dll
        • Size 63KB
        • SHA256 b413ed66f61b88e16a2003a875898945aedf591880891a68bb81e6f17c6dc2d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-process-l1-1-0.dll
        • Size 12KB
        • SHA256 eee66f709ea126e292019101c571a008ffca99d13e3c0537bb52223d70be2ef3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 16KB
        • SHA256 bb3edf0ecdf1b700f1d3b5a3f089f28b4433d9701d714ff438b936924e4f8526
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 17KB
        • SHA256 ae6c2e946b4dcdf528064526b5a2280ee5fa5228f7bb6271c234422e2b0e96dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-string-l1-1-0.dll
        • Size 17KB
        • SHA256 07a5cba122b1100a1b882c44ac5ffdd8fb03604964addf65d730948deaa831c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-time-l1-1-0.dll
        • Size 14KB
        • SHA256 90017928a8a1559745c6790bc40bb6ebc19c5f8cdd130bac9332c769bc280c64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\api-ms-win-crt-utility-l1-1-0.dll
        • Size 12KB
        • SHA256 b1cff7f4aab3303aec4e95ee7e3c7906c5e4f6062a199c83241e9681c5fcaa74
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\base_library.zip
        • Size 1.3MB
        • SHA256 e4a7f5e1d360f2c2117de4cef0c49123d15a7ba3b3ac83f6a607edfb08dacd86
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jarvis (2).ico

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\jarvis (2).ico
        • Size 257KB
        • SHA256 5e92804d0ae1f75293a1a06551351f41fa4336e9552cf111ef8de7b69c38a5a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jarvis_commands.json

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\jarvis_commands.json
        • Size 28KB
        • SHA256 26f31dc0efdb806b51c58d3e8f7fe489b27489d3b75464a511baa458b37e33df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jarvis_news_cache.json

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\jarvis_news_cache.json
        • Size 699KB
        • SHA256 757349f6a1e41c12d90dfcdbe64a17b25264c9e44dcd7f5e40c6b1d3d2caeb58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jarvis_settings.json

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\jarvis_settings.json
        • Size 3KB
        • SHA256 d97c74bbe6a9010263aa2481934439edf90a5b5a689c16c95914e7cd62600577
        • MD5 SHA1 SHA512 TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\python3.dll
        • Size 68KB
        • SHA256 fb975a606e7fbf74f64260e3f60c3490b4f74a183c0926fd6ed1ac4c52ac7b1c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python312.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\python312.dll
        • Size 6.6MB
        • SHA256 9a0e3435aaa680d868150f87ab3e388ad2eebc22f87e036155c7b4eda8cd2120
        • MD5 SHA1 SHA512 SSDEEP TLSH

        INSTALLER

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\tqdm-4.67.3.dist-info\INSTALLER
        • Size 4B
        • SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
        • MD5 SHA1 SHA512

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46322\ucrtbase.dll
        • Size 993KB
        • SHA256 962c50afcb9fbfd0b833e0d2d7c2ba5cb35cd339ecf1c33ddfb349253ff95f36
        • MD5 SHA1 SHA512 SSDEEP TLSH

        speech-grammar.json

        • Path C:\Users\Admin\AppData\Roaming\Jarvis\Services\speech-grammar.json
        • Size 12KB
        • SHA256 293b6ad413343ab54c84cb5aa5d45ea50547dc3af13472056783c2e887139a52
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/1280-485-0x0000000061440000-0x00000000614CB000-memory.dmp

        memory/1280-484-0x00000225D2480000-0x00000225D2481000-memory.dmp

        memory/1280-483-0x00000000004F0000-0x0000000001BC6000-memory.dmp

        memory/1280-452-0x000002259C120000-0x000002259C130000-memory.dmp

        memory/1280-449-0x00007FFE5B3A0000-0x00007FFE5B757000-memory.dmp

        memory/1280-448-0x00007FFE5C670000-0x00007FFE5C995000-memory.dmp