Resubmissions

24/10/2026, 03:23

261024-dxsa6awy6k

24/10/2026, 02:44

261024-c8mdls11fs7

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    24/10/2026, 02:44

General

  • Target
    Kavro-Setup-1.1.0.exe
  • Size 116.1MB
  • Sample261024-c8mdls11fs
  • SHA256 69aff30efbbec2fff7e7c25836cf6e45940b1a75d8f69d32f86a92d2ad106af1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 17 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Using powershell.exe command.

  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Queries registry keys for unique system GUIDs 1 TTPs 1 IoCs

    Queries the MachineGuid or HwProfileGuid value from the command line, commonly used to create a unique victim ID.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Kavro-Setup-1.1.0.exe
    "C:\Users\Admin\AppData\Local\Temp\Kavro-Setup-1.1.0.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1020
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      2⤵
      • Hide Artifacts: Ignore Process Interrupts
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3364
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2304
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\Kavro', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2884
  • C:\Users\Admin\AppData\Local\Programs\Kavro\Kavro.exe
    "C:\Users\Admin\AppData\Local\Programs\Kavro\Kavro.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Reads the TCP/IP host and domain name from the registry
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:5016
    • C:\Windows\system32\reg.exe
      reg query HKLM\SOFTWARE\Microsoft\Cryptography /v MachineGuid
      2⤵
      • Queries registry keys for unique system GUIDs
      PID:4424
    • C:\Users\Admin\AppData\Local\Programs\Kavro\Kavro.exe
      "C:\Users\Admin\AppData\Local\Programs\Kavro\Kavro.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Kavro" --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=2264,i,10464651829968908462,15905732459721527779,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2268,i,12644487626518919468,15476251866583336800,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2260 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4840
    • C:\Users\Admin\AppData\Local\Programs\Kavro\Kavro.exe
      "C:\Users\Admin\AppData\Local\Programs\Kavro\Kavro.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Kavro" --standard-schemes=kavro --secure-schemes=kavro --cors-schemes=kavro --fetch-schemes=kavro --streaming-schemes=kavro --field-trial-handle=2264,i,10464651829968908462,15905732459721527779,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2268,i,12644487626518919468,15476251866583336800,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2376 /prefetch:3
      2⤵
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      PID:3356
    • C:\Users\Admin\AppData\Local\Programs\Kavro\Kavro.exe
      "C:\Users\Admin\AppData\Local\Programs\Kavro\Kavro.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Kavro" --standard-schemes=kavro --secure-schemes=kavro --cors-schemes=kavro --fetch-schemes=kavro --streaming-schemes=kavro --app-path="C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --launch-time-ticks=607774932 --field-trial-handle=2264,i,10464651829968908462,15905732459721527779,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2268,i,12644487626518919468,15476251866583336800,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2740 /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      PID:920

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        powershell.exe.log

        • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\powershell.exe.log
        • Size 2KB
        • SHA256 c03c91dd74498cc33a32d616fb3050ad954ed4f57e671e2e9651aedb7b128ff3
        • MD5 SHA1 SHA512 TLSH

        StartupProfileData-NonInteractive

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 16KB
        • SHA256 e7ed754a773a0d290257648dc703dbb99cf5e4c074297d4c79c32ff3d4227ca1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StartupProfileData-NonInteractive

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 16KB
        • SHA256 5cb02a463465dc83b2ba046da0384516a108ffcbe4e3f01e52656856d0d64c04
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\LICENSE
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\LICENSES.chromium.html
        • Size 19.5MB
        • SHA256 7b328b8c7463ac9bfc7dc648c751533517c8441a0b5b21047d6c0b2620e60d70
        • MD5 SHA1 SHA512 SSDEEP TLSH

        README.txt

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\README.txt
        • Size 382B
        • SHA256 ce7eedc40308c28a93fb84118c2108a67f1dd36d7f7a9cefed6e2c2500008bf2
        • MD5 SHA1 SHA512 TLSH

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\chrome_200_percent.pak
        • Size 1.2MB
        • SHA256 30fa4a6e27c9ff2fb0f939f01158477e621a67d86e9ecb84cf11b3947db8eb9d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\d3dcompiler_47.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxcompiler.dll

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\dxcompiler.dll
        • Size 24.6MB
        • SHA256 0c7a5fab6466c211fe39d90d845b7d6a64ac73e8c809d4fa0c09907bb45c1f3d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxil.dll

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\dxil.dll
        • Size 1.4MB
        • SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\ffmpeg.dll
        • Size 3.0MB
        • SHA256 7728490eb079c19b17baeff2b6590c976f6a928b3c17923aeb4fcf1f1f31d299
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\icudtl.dat
        • Size 10.4MB
        • SHA256 9f48c7f9c7c94d516a14870707e910ab94d75ae640ff6842c4af53276cd26ebe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        af.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\af.pak
        • Size 621KB
        • SHA256 3017b141bd16e24190d810f0748612f0fd4352ca8553002b9a63a7f77f7154f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        am.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\am.pak
        • Size 1005KB
        • SHA256 67b938d162bc75db067120bb8366b5bafd9a75fa99a0ca9ad4f46b47d1d37634
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\ar.pak
        • Size 1.1MB
        • SHA256 4c47004abd0969cb1174d06eb7429c024872207960986afbf3cae37e339a8d01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\bg.pak
        • Size 1.1MB
        • SHA256 2eb9c74c67e4b13b45a73061fa978738e335bc245da71bab0ea9b205fe91074e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\bn.pak
        • Size 1.4MB
        • SHA256 415621a5c0b1546e6e447d43b76414425a8703cc7681d637ec1f283ad0c787e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\ca.pak
        • Size 700KB
        • SHA256 6f28297c1ccb628f534d65dade167ae559f83eace359acf47e48ff890b9409d5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\cs.pak
        • Size 725KB
        • SHA256 799a789ce531991cb975425730db310f9a8fe74091eee568f3e65fcc7ef0cd57
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\da.pak
        • Size 650KB
        • SHA256 530fd95daee21d793b99492ca7d0bf9979daffe42944e24414d4b08a3d23b9fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\de.pak
        • Size 701KB
        • SHA256 58165025c4252ba8b2ce8203b59362b9968938cb0fef9d7da04941be22f41bb3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\el.pak
        • Size 1.2MB
        • SHA256 37d2e1ef69fea9bdb1e0902cbc61a458baa9009fc3761029bd1c1882a7a0c9b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\en-GB.pak
        • Size 566KB
        • SHA256 01d9200a5daee1770f7147b166d25baa6a8dd72c138c3c526421e656dec789f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\en-US.pak
        • Size 572KB
        • SHA256 23b271e8009bfa14783700cd0712b4ecaa5b8f2ea28a4d81ae1d7e05bc0c96b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\es-419.pak
        • Size 691KB
        • SHA256 2766fd52da83ff679346313e66440f013a7d478b9be946df4ab197505912450b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\es.pak
        • Size 687KB
        • SHA256 fe6fff51ef19db1f4fe0fc602e0bd4bd7fabcfb1ca5d6896d1ce0efcf37e49c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        et.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\et.pak
        • Size 627KB
        • SHA256 dd1205eae606f12510e24ce39f301439c98b3293d766ca5839dc292a14d7973c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fa.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\fa.pak
        • Size 1.0MB
        • SHA256 ba33624ccad6d0e4a4339589c56be557b28968bf9422bd12a8f26e2a3d581577
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\fi.pak
        • Size 639KB
        • SHA256 1f3123d7fb5c22a95b5250ea17450b665c3c6cd6a6dfd28bbdde15e1bf684a0e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\fil.pak
        • Size 724KB
        • SHA256 02e2c70d3d85b0deb677a9ae576ae3cf89e80774532cb3315c14f1e8ce64b310
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\fr.pak
        • Size 745KB
        • SHA256 8bad7fd88072ac66649dd9307da9163962f8ab00313e627bf1c5ca4450a48b4a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gu.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\gu.pak
        • Size 1.4MB
        • SHA256 e86e8c240d4b6283abb03c49df9e8899607ef9def6d4933c7a541d63b5835271
        • MD5 SHA1 SHA512 SSDEEP TLSH

        he.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\he.pak
        • Size 906KB
        • SHA256 ddc1f304ab1f4489d19ae2b31e7f8e3ffb47dae439520159e8975422c65e4115
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hi.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\hi.pak
        • Size 1.5MB
        • SHA256 015b3856dc05e8635a48e749e6970fe43f5d620b8dbd04e5abff586178213f6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hr.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\hr.pak
        • Size 698KB
        • SHA256 d46c64ae8af3562e37eb80438aa2bee228fafda251d58ba4d0991291f1c72aab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\hu.pak
        • Size 747KB
        • SHA256 0a46fc8d50f74effd1cfe1979e677df3de6fc47e6b551267303d93d57bd83f50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        id.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\id.pak
        • Size 620KB
        • SHA256 f567569c42a25bb2dfc5c33e13aac558c0e2a1d5d4b969592bbd0841b36438db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\it.pak
        • Size 677KB
        • SHA256 aeb1d99a2a09476d9ee0fd133df2d4d987c731b9f91a248ac4e60377ddda1ca5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ja.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\ja.pak
        • Size 822KB
        • SHA256 f6e0d8eda3bc8f1112494bda96b230f3c44f054c47cced50c94c5ee9199f04c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kn.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\kn.pak
        • Size 1.6MB
        • SHA256 af5fed2130102ecc0c878059c88faed9d6db2e8b147fb5ae9e15e3fe69706c8a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\ko.pak
        • Size 701KB
        • SHA256 55a3a8db9c84b1fe9e50b56d68fb069ad7546117cf1f6cb89f36f49cc044ad5e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lt.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\lt.pak
        • Size 759KB
        • SHA256 af969f4407c190dd01a426fa1244cb1ec7cdf2909d1c3ba5b87ff662ba567303
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lv.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\lv.pak
        • Size 756KB
        • SHA256 4455ab7c06172c2c80796a99558e41f452cc3b33be76654d70440cf4ac7a2d34
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ml.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\ml.pak
        • Size 1.7MB
        • SHA256 b5606265910e45098a88e989202a550531f6d00333c6b112ed4c5cbc07b2ff6a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mr.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\mr.pak
        • Size 1.4MB
        • SHA256 8465d4077ed5414cbcb7d9bdb00d85e515a1a069703cdc1d4d67c9d6e5623fb0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ms.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\ms.pak
        • Size 652KB
        • SHA256 af7021a00befa586aa067ae3ccb339079e6f13ee0cab1621836f6abb608b6f2a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nb.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\nb.pak
        • Size 623KB
        • SHA256 d97a2b0cbe6adc99add2ed3ce0d15d0bb124b778086c466c126634d60ea72608
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\nl.pak
        • Size 649KB
        • SHA256 b642c8ab5ce11438e9a8fd4639244fa8f1d55cfd70269565490bc55ee907b048
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\pl.pak
        • Size 724KB
        • SHA256 8a0969fc743d3e2f5111387d53c0d79e8c1d9f68256ad6553b87fca2bcaa7e6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-BR.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\pt-BR.pak
        • Size 680KB
        • SHA256 5546559a56f9ac3191062c3fd42defd190a68e78ac988eb57fa5a6fd2dc5f874
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\pt-PT.pak
        • Size 684KB
        • SHA256 bdfa7264dddf70f936f1785737969559a577b51d1952c820a468c611d18b17ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\ro.pak
        • Size 711KB
        • SHA256 1e6b5b0dac63a9e951daf523de310f6bd9e5c53e281f37706d41bd35d2a08bb5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\ru.pak
        • Size 1.1MB
        • SHA256 a9e76536472c45b39e7ae2af5f3ae1bc0e50a11646efdb6fb3ca373b5f2e2c70
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\sk.pak
        • Size 737KB
        • SHA256 3cdc8bca8696c90a572fb15c865caa5c286df45344c72194c3eea97201cc816a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sl.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\sl.pak
        • Size 705KB
        • SHA256 e1371c8df577b979e3a515af34b0aaa3d07153c7a5c55d39a9b49a7ffe62d3d2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\sr.pak
        • Size 1.1MB
        • SHA256 c42a674e3f43aa70cef005931915c8b7ceb34b29566fba3309f8da931dc7861f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\sv.pak
        • Size 631KB
        • SHA256 7b0399a206bfbebe77d1a4fc598c8a6636a1bd940d3ab56519cf4af0134b6edb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sw.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\sw.pak
        • Size 669KB
        • SHA256 bd41ea707a0d90d683ec8d5d0f0c79f3e925747bc4ea1982562dfb75080199b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\ta.pak
        • Size 1.7MB
        • SHA256 91fb1460711df108d8d435a378c8be1d1e80b0886c0158d8c6ae92f35812681b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\te.pak
        • Size 1.6MB
        • SHA256 fc8c2706c5dfd36e7af8e380a240e0f697cc5fe969b512092a2185896512c4af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\th.pak
        • Size 1.3MB
        • SHA256 c1f4235c31bc05153230b0e55b7aabc9020d7460d5b0a025c386885e1e4bda3c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\tr.pak
        • Size 681KB
        • SHA256 d5648d7eaf1826211fb244fcf8419dabdc16c228d92139bc8b0b73c7a6b7e700
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\uk.pak
        • Size 1.2MB
        • SHA256 ec5d0b426e289c064e8f2d63636ae2a544ff30fc1e99dde04fe1920971e4d060
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\ur.pak
        • Size 1023KB
        • SHA256 c218e21744df2ff0669a87d497d65d76333073577360d4c662c592de146bf82a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\vi.pak
        • Size 810KB
        • SHA256 76a32f8ad5d08a6f9899e12e4aa9b3d9a9023931e2ca0f73e5ced541c922dcfb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\zh-CN.pak
        • Size 578KB
        • SHA256 7887bd3d01e12306e32a11d9a20566ca0e93688a0375e6ff59da04cf782b1681
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\locales\zh-TW.pak
        • Size 570KB
        • SHA256 7cb5f76e54a548d4e52aa8cdf226a4339bdadc304897abca690f407e95e42f4d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources.pak
        • Size 11.9MB
        • SHA256 ee5707e9409e76742e1dacdae0ebbb3c567b8772ce5bbcb9785aa215f5784c22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app.asar

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar
        • Size 33.2MB
        • SHA256 3656ab52b670fe3d223667ee5a115e7e4667b99c3401c2a6e75f5af342bd8b69
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE.md

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\LICENSE.md
        • Size 904B
        • SHA256 149704059b5d0bf551637e50042dd4de9c2cae921021f6636298911e3a5f9462
        • MD5 SHA1 SHA512 TLSH

        glfw3.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\include\GLFW\glfw3.h
        • Size 236KB
        • SHA256 aa370985f6b493bbe0358a36ab49f5780a6397c0209c6d98a62143dea595b73c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        glfw3native.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\include\GLFW\glfw3native.h
        • Size 20KB
        • SHA256 40035881fdc02a9ab265c2086338f749a0411e1c15b68fada678fa34e8bd8958
        • MD5 SHA1 SHA512 SSDEEP TLSH

        context.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\context.c
        • Size 25KB
        • SHA256 839a96ff1dcc712129f9bcb9522b8d459b9d6a9b8d029ce32c729c523b9ea012
        • MD5 SHA1 SHA512 SSDEEP TLSH

        egl_context.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\egl_context.c
        • Size 28KB
        • SHA256 933150523fa2cf24e8f3e7cd279b0d8308635f769e052f035e4088c4ebc83ccf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        init.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\init.c
        • Size 14KB
        • SHA256 61ac2188518cae852bc2bfe0c0f2363dad365f8166099a3aa78a3c9ff8504654
        • MD5 SHA1 SHA512 SSDEEP TLSH

        input.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\input.c
        • Size 40KB
        • SHA256 f5efbc7ec6a38a6c462cd2311dbe51616a4810c4dc8d1a2f735195e5cf72c753
        • MD5 SHA1 SHA512 SSDEEP TLSH

        internal.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\internal.h
        • Size 34KB
        • SHA256 cc6e93eac5b9957c99bc90e95c34d62f184395345de33e554ab77c23a1148ae0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mappings.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\mappings.h
        • Size 250KB
        • SHA256 66808cb6f704c7d963a7bae65c02a082f9bb2b5a854d033ce4bd57e22368433f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        monitor.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\monitor.c
        • Size 14KB
        • SHA256 1671bbe37502419f08b8072e80a13a78494feea6c008ccb2727ebd44a43afd6a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        null_init.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\null_init.c
        • Size 14KB
        • SHA256 041b02232d5378e9a3ac3fd12da1e91f8276ef1459303e2094ee820e675a3dd1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        null_joystick.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\null_joystick.c
        • Size 1KB
        • SHA256 5da9465db10034b81b87c3722328bff7dfc3b4a94670cce71672b7d464fd6820
        • MD5 SHA1 SHA512 TLSH

        null_joystick.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\null_joystick.h
        • Size 1KB
        • SHA256 ccd7bec0a32632b0fc81d1c085bba3b89e01a9dc4b6b28cde9ea394909fc700d
        • MD5 SHA1 SHA512 TLSH

        null_platform.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\null_platform.h
        • Size 11KB
        • SHA256 a93596d5f503d0378de4c347f55d0cd63aad471022a09e3c474f516416520c0e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        null_window.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\null_window.c
        • Size 18KB
        • SHA256 244c6843b93298f97066a5d40324286b9a2de240200ead019470b0e8846595d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        osmesa_context.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\osmesa_context.c
        • Size 11KB
        • SHA256 2bb65aa05606a7bb652ee59fb481c45abb223795163fe9c57d808de3e082b09b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        platform.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\platform.c
        • Size 6KB
        • SHA256 117f5e8698eb4f028d7f80ae594fd2b2eb141f55c6122a6c24fd45d1b90209bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        platform.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\platform.h
        • Size 6KB
        • SHA256 14498e12db44b36f695d5cacd2ca2763fd6d6c4d2c5ef3fdcfa103e79d54b49b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vulkan.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\vulkan.c
        • Size 11KB
        • SHA256 5948e9f0b347640473d23f7dfd94cea82375149639f2cbd288491747312d3a33
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wgl_context.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\wgl_context.c
        • Size 26KB
        • SHA256 48c2cad35265f7311146182ec4ad811f551929cb6847ef3a0653abbedec88bf8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        win32_init.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\win32_init.c
        • Size 27KB
        • SHA256 48d72f04c500d0c0b2e91444429e141972f81ae03072f6d28b26222ac06983c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        win32_joystick.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\win32_joystick.c
        • Size 26KB
        • SHA256 b9c95eed4eeed6eb64864fa031349de83e3421ab7a6c3dcd86cf80fd6b1ad8b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        win32_joystick.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\win32_joystick.h
        • Size 1KB
        • SHA256 41cd05e7477314241c5aca9b840682a4ba4b82c358d401612ab83e5bce167c39
        • MD5 SHA1 SHA512 TLSH

        win32_module.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\win32_module.c
        • Size 1KB
        • SHA256 58f0b4a96584b6ad582e90974b07ecbe9ed8d402cadbe54383afbb0ba37d6a0b
        • MD5 SHA1 SHA512 TLSH

        win32_monitor.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\win32_monitor.c
        • Size 16KB
        • SHA256 4645c2972d8dbf9e11e287b05333f6db585615541217e3dd5d61e9f9fca32e97
        • MD5 SHA1 SHA512 SSDEEP TLSH

        win32_platform.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\win32_platform.h
        • Size 24KB
        • SHA256 f7b39efe79c9731762c9dd9848431e795a66fccc871d7ae72930c5e1aeed7c4c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        win32_thread.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\win32_thread.c
        • Size 3KB
        • SHA256 92ee8a23a6a729c2cff69975d2dfc46d019a2be0494d17b705495cd3042dcd36
        • MD5 SHA1 SHA512 TLSH

        win32_thread.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\win32_thread.h
        • Size 1KB
        • SHA256 cefdd801463eb6901e3ebae02b8204e87e44bd06b2bdc562794dc890886ecc97
        • MD5 SHA1 SHA512 TLSH

        win32_time.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\win32_time.c
        • Size 1KB
        • SHA256 16c54578192e06205a0dbe675ffc93f73df1d971ace8e81ad2a0ba868c99c4e6
        • MD5 SHA1 SHA512 TLSH

        win32_time.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\win32_time.h
        • Size 1KB
        • SHA256 dabfeb7478945930cb6c4ded23cfe76f6e6577b68523c5d8ac2acb1b63b35b21
        • MD5 SHA1 SHA512 TLSH

        win32_window.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\win32_window.c
        • Size 79KB
        • SHA256 863d05bc961acab390e7d4329ced8a2d36f9b10106b9258376d2f72b0cac297f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        window.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\glfw\src\window.c
        • Size 34KB
        • SHA256 c102fd119fd7423ca0cebd17c1fba722d7fe149ef689f09962f6ff79c82dd289
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE.txt

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\LICENSE.txt
        • Size 1KB
        • SHA256 c80c5789748d955c4a650562baa0d750494e2c7128c2ca66aaebe2e3c4e198bf
        • MD5 SHA1 SHA512 TLSH

        imgui_impl_dx11.cpp

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_dx11.cpp
        • Size 30KB
        • SHA256 7a8f7294b86065d514a9e19f1bed3bc84d4587f0142b2c551a584b4067cb2902
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_impl_dx11.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_dx11.h
        • Size 2KB
        • SHA256 cf55f23132dcd240c31995494e0828abb84e552adee71be20f384d68eca21697
        • MD5 SHA1 SHA512 TLSH

        imgui_impl_dx12.cpp

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_dx12.cpp
        • Size 38KB
        • SHA256 77322d90b0beb70dff530f5f22cb2f2ffdd5773c5c13332e0c19c97d0f295bf0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_impl_dx9.cpp

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_dx9.cpp
        • Size 19KB
        • SHA256 a602674fb24aaf804c34456f40d35118b45722dc439736ac69204885b259db7a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_impl_dx9.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_dx9.h
        • Size 1KB
        • SHA256 bc1747d173392afc0401c64c5f490b2fcd0a1b7833904936d260cdf0ee9ee2a7
        • MD5 SHA1 SHA512 TLSH

        imgui_impl_glfw.cpp

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_glfw.cpp
        • Size 51KB
        • SHA256 e1c653cb36bd9e4ac5895b11ba4ca019de575a360c9a87fad07f170b4b0ffe4c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_impl_glfw.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_glfw.h
        • Size 4KB
        • SHA256 bf83666dc070981c9c656c904cb3eac8dd4fb4fa826d34945620301563319cf6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_impl_opengl3.cpp

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_opengl3.cpp
        • Size 48KB
        • SHA256 cf3c535e3a673e19ef893da4b7d370197547cc1350acd5051e842606aef951d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_impl_opengl3.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_opengl3.h
        • Size 3KB
        • SHA256 8239b72a4325f370c275d34b655b3fcaf2660ce9d7acfdea494a303dd51f9e5c
        • MD5 SHA1 SHA512 TLSH

        imgui_impl_opengl3_loader.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_opengl3_loader.h
        • Size 38KB
        • SHA256 9d17b1679dc876e0ca693631030e70656c372c808c6767644c3b545834483e24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_impl_vulkan.cpp

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_vulkan.cpp
        • Size 86KB
        • SHA256 1af35121a8cc8ff4d16d4d9da89c5724bbc2cb930920247eeeac0faa6b1ff006
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_impl_vulkan.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_vulkan.h
        • Size 12KB
        • SHA256 19e69a81474ee9e9348a54d619456c89810df634a0500ecccef145e7a488f1a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_impl_win32.cpp

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_win32.cpp
        • Size 48KB
        • SHA256 e572de10045298bbf833aa7a15e28d2777df57603b4e50b9c8aa4c878f1e4cfa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_impl_win32.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_win32.h
        • Size 3KB
        • SHA256 606df46db972371ac6b5f5ad94bba75a09657da47b259105c4845c1f8638fa0c
        • MD5 SHA1 SHA512 TLSH

        imgui.cpp

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\imgui.cpp
        • Size 861KB
        • SHA256 af1cc31255fbf58d57ecc9d727cbd39a84e44fa8f11be7fd419fa0100c5255d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\imgui.h
        • Size 369KB
        • SHA256 2d0180859ff85e7fe66ed9999b0f05f2fc45176773046a8f86b3b6bd190b0765
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_demo.cpp

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\imgui_demo.cpp
        • Size 544KB
        • SHA256 fa402333b7da17227b00e8ca9bc78c17a9d0cce8c1fb6e555e42948fe482af25
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_draw.cpp

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\imgui_draw.cpp
        • Size 252KB
        • SHA256 9d2d9ee6745d9b98d7f39a16da8ffcf783f90bb8c9e931038fc8e9a15cbe3d84
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_internal.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\imgui_internal.h
        • Size 266KB
        • SHA256 1363c617a743957f367afe1c6c88345870b7aa25ee339809fb915466e4fb9575
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_tables.cpp

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\imgui_tables.cpp
        • Size 241KB
        • SHA256 4ea380fa9d49cac6cbfbc8b969969f9b0705518ec9ca340681d8c70e3eefbc28
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_widgets.cpp

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\imgui_widgets.cpp
        • Size 505KB
        • SHA256 54ac29dbcbe70091f5e5fc2cb4099e6d0b9d1c939e5158f2be983cb508714414
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imstb_textedit.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\imstb_textedit.h
        • Size 55KB
        • SHA256 77010e494caf72c178b573569612aec409d24380409676325a31d02de0ec64b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imstb_truetype.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\imgui\imstb_truetype.h
        • Size 194KB
        • SHA256 87f08919ae8e7223451d0e9d06b62829075d3e920c9e6ad436db9d7e7427ffce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE-Vulkan-Headers.md

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\LICENSE-Vulkan-Headers.md
        • Size 458B
        • SHA256 ac24e5ea920e4318e4d02c4086ae51f53cfb03feed06c18df1019e7ada1ec7bc
        • MD5 SHA1 SHA512 TLSH

        LICENSE-volk.md

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\LICENSE-volk.md
        • Size 1KB
        • SHA256 e85b35831f01da6aa8c029f0a06a0468be143534babe9014e37ee03bf078bf36
        • MD5 SHA1 SHA512 TLSH

        vulkan_video_codec_av1std.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\include\vk_video\vulkan_video_codec_av1std.h
        • Size 16KB
        • SHA256 2cb85e3e1e12b79d67986202031f903be99af372831c29cf83386d329f47c78d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vulkan_video_codec_av1std_decode.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\include\vk_video\vulkan_video_codec_av1std_decode.h
        • Size 4KB
        • SHA256 96f923dc01cd3e266c081d88fa020525a20d63ffe4ce09a4c807a04ef3aaf97e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vulkan_video_codec_av1std_encode.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\include\vk_video\vulkan_video_codec_av1std_encode.h
        • Size 5KB
        • SHA256 27d12241ff1659f764a075f738905fcc00f0fff7291b7492e9f9c9dec503ca99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vulkan_video_codec_h264std.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\include\vk_video\vulkan_video_codec_h264std.h
        • Size 13KB
        • SHA256 072ee6eac80e73d93bb4bfe0059f99e581fc8b55b1437236185bb4ff377914b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vulkan_video_codec_h264std_decode.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\include\vk_video\vulkan_video_codec_h264std_decode.h
        • Size 2KB
        • SHA256 e1708b3996a740eeedb79f51d0f0e379f9bcae13566538375acaf73301023b58
        • MD5 SHA1 SHA512 TLSH

        vulkan_video_codec_h264std_encode.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\include\vk_video\vulkan_video_codec_h264std_encode.h
        • Size 6KB
        • SHA256 052a6e357be8d88bf4be0db1b3da5a9cc1a6011cf4b3533759ff588e1e26f9f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vulkan_video_codec_h265std.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\include\vk_video\vulkan_video_codec_h265std.h
        • Size 22KB
        • SHA256 0cbdfd6c45ee8ca902e9c961cd7e49a4d601d443ea0ef2a60a8496b127ed397c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vulkan_video_codec_h265std_decode.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\include\vk_video\vulkan_video_codec_h265std_decode.h
        • Size 2KB
        • SHA256 800946aa19d83d305d504e2e4141bc938f989e0cf8872cef97480238eefef1ea
        • MD5 SHA1 SHA512 TLSH

        vulkan_video_codec_h265std_encode.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\include\vk_video\vulkan_video_codec_h265std_encode.h
        • Size 7KB
        • SHA256 7239f9f4e811546639111e562a8be1ec73ad5bef1c23d5fad80889f35e125e9c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vulkan_video_codecs_common.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\include\vk_video\vulkan_video_codecs_common.h
        • Size 660B
        • SHA256 78cf3c99d3d57afa7ab1782ec6018b4bcdbe273f2843d76e3375282db875b71e
        • MD5 SHA1 SHA512 TLSH

        vulkan.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\include\vulkan\vulkan.h
        • Size 1KB
        • SHA256 52297513cc6b6cc8db2921aa849f72e3f55d678b3a58a2c3eb297c02ded7a837
        • MD5 SHA1 SHA512 TLSH

        vulkan_beta.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\include\vulkan\vulkan_beta.h
        • Size 10KB
        • SHA256 fad0d82ef3576e83fccdc3e591b3ff979a5011220dcc3fabba812ed26fe706f0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vulkan_core.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\include\vulkan\vulkan_core.h
        • Size 1.0MB
        • SHA256 b85382404062f3e7df25423d03f864055ec45e857bec3f3c46512502bd6bb493
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vulkan_win32.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\include\vulkan\vulkan_win32.h
        • Size 14KB
        • SHA256 fa3a9263d1764b82b634180ec5d3010adc216108bae11c02b157f733073f87f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        volk.c

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\volk.c
        • Size 261KB
        • SHA256 40a6ed31067b244b97c444e866876746574d3c3ad1c9bb9fac1588e2b4160628
        • MD5 SHA1 SHA512 SSDEEP TLSH

        volk.h

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\app.asar.unpacked\vendor\vulkan\volk.h
        • Size 131KB
        • SHA256 45dc84d3055048e181516a7caa0029cc54d1db6d5dbc5e8ff1017ac0720bf0c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KavroUpdate.exe

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\resources\updater\KavroUpdate.exe
        • Size 602KB
        • SHA256 62d3d9379badb8bbaf92c0c3785a7e6c1100bb13b3d2b93af59b2c2cdced965e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\snapshot_blob.bin
        • Size 360KB
        • SHA256 0b18f38d50c8f96c9fa2b8205c66c25b3ae45c985e8f2e7b6ecfab9f4d4d19d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\v8_context_snapshot.bin
        • Size 724KB
        • SHA256 6d747f11d721655b780a47f6010eeef8428266e7521280e1e094d27c6f34311d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        version

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\version
        • Size 6B
        • SHA256 d6a753840246d37b3b1450cce3259a0d1a1954d8d196276e11fdf094a6a04652
        • MD5 SHA1 SHA512

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\vk_swiftshader.dll
        • Size 5.3MB
        • SHA256 3d8555de997bca1e58a72c6a8bc13a8267dca2c882ee0a783803470b289d1d23
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Programs\Kavro\vulkan-1.dll
        • Size 917KB
        • SHA256 5549afe706236d5c7ad5df4607c51639c790dfd118770eb27af8f2c5c076c3c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __PSScriptPolicyTest_zc5et2bi.3xa.ps1

        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_zc5et2bi.3xa.ps1
        • Size 60B
        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
        • MD5 SHA1 SHA512 TLSH

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsjDD2.tmp\7z-out\chrome_100_percent.pak
        • Size 702KB
        • SHA256 ab7c4b7b6cb8832a31d44b95ec50ce52294f49422a3bdde4e21968eca2930cbe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        null_monitor.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsjDD2.tmp\7z-out\resources\app.asar.unpacked\vendor\glfw\src\null_monitor.c
        • Size 5KB
        • SHA256 12face8cf2462b5590d8f1ac5502184e0246696f5d5b117dddca3dfbb5658759
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imgui_impl_dx12.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsjDD2.tmp\7z-out\resources\app.asar.unpacked\vendor\imgui\backends\imgui_impl_dx12.h
        • Size 4KB
        • SHA256 d6adad2afd59fe1160e581fa09bb4c597b8e7970e2d693b2919c3fc05f83bbfa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imconfig.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsjDD2.tmp\7z-out\resources\app.asar.unpacked\vendor\imgui\imconfig.h
        • Size 11KB
        • SHA256 0884061cc43e27e1d346fe18dcd1425792eb2532d3d16610a82eb5ac751f7594
        • MD5 SHA1 SHA512 SSDEEP TLSH

        imstb_rectpack.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsjDD2.tmp\7z-out\resources\app.asar.unpacked\vendor\imgui\imstb_rectpack.h
        • Size 19KB
        • SHA256 2efa3d5f7d003c19743b15155dad9f46d9f9fc783a18893d703b431d3c990972
        • MD5 SHA1 SHA512 SSDEEP TLSH

        stb_image.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsjDD2.tmp\7z-out\resources\app.asar.unpacked\vendor\stb\stb_image.h
        • Size 276KB
        • SHA256 594c2fe35d49488b4382dbfaec8f98366defca819d916ac95becf3e75f4200b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_platform.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsjDD2.tmp\7z-out\resources\app.asar.unpacked\vendor\vulkan\include\vulkan\vk_platform.h
        • Size 2KB
        • SHA256 c4cabbcf699c90cde344095ae54da9435d117951aad114ba3a540c5997d7906f
        • MD5 SHA1 SHA512 TLSH

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsjDD2.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsjDD2.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UAC.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsjDD2.tmp\UAC.dll
        • Size 14KB
        • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WinShell.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsjDD2.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH

        nsDialogs.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsjDD2.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsExec.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsjDD2.tmp\nsExec.dll
        • Size 6KB
        • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsis7z.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsjDD2.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH

        temp-index

        • Path C:\Users\Admin\AppData\Roaming\Kavro\Code Cache\wasm\index-dir\temp-index
        • Size 48B
        • SHA256 314b843540ed1acc86ad0775221d807e0d061ec40745d328672272d150a77256
        • MD5 SHA1 SHA512

        data_0

        • Path C:\Users\Admin\AppData\Roaming\Kavro\DawnWebGPUCache\data_0
        • Size 8KB
        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
        • MD5 SHA1 SHA512 SSDEEP

        data_1

        • Path C:\Users\Admin\AppData\Roaming\Kavro\DawnWebGPUCache\data_1
        • Size 264KB
        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
        • MD5 SHA1 SHA512 SSDEEP

        data_2

        • Path C:\Users\Admin\AppData\Roaming\Kavro\DawnWebGPUCache\data_2
        • Size 8KB
        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
        • MD5 SHA1 SHA512 SSDEEP

        data_3

        • Path C:\Users\Admin\AppData\Roaming\Kavro\DawnWebGPUCache\data_3
        • Size 8KB
        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
        • MD5 SHA1 SHA512 SSDEEP

        CURRENT

        • Path C:\Users\Admin\AppData\Roaming\Kavro\Local Storage\leveldb\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512

        Network Persistent State

        • Path C:\Users\Admin\AppData\Roaming\Kavro\Network\Network Persistent State
        • Size 59B
        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
        • MD5 SHA1 SHA512 TLSH

        Network Persistent Statef0326674-a94c-4ae9-a121-5a2e90e604ea.tmp

        • Path C:\Users\Admin\AppData\Roaming\Kavro\Network\Network Persistent Statef0326674-a94c-4ae9-a121-5a2e90e604ea.tmp
        • Size 449B
        • SHA256 91ecb0f76a9a887924181f4a7071069a089e769f996d0f00076256a73e6d47bb
        • MD5 SHA1 SHA512 TLSH

        default.dic

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512

        memory/920-1516-0x000001F3AFAA0000-0x000001F3AFB4D000-memory.dmp

        memory/920-1515-0x000001F3AF460000-0x000001F3AF490000-memory.dmp

        memory/920-1517-0x000001F3FD4D0000-0x000001F3FD945000-memory.dmp

        memory/920-1529-0x000001F3FD4D0000-0x000001F3FD945000-memory.dmp

        memory/920-1538-0x000001F3FD4D0000-0x000001F3FD945000-memory.dmp

        memory/920-1466-0x00007FF8A9870000-0x00007FF8A9871000-memory.dmp

        memory/920-1467-0x00007FF8AA750000-0x00007FF8AA751000-memory.dmp

        memory/2304-85-0x00000000078B0000-0x0000000007946000-memory.dmp

        memory/2304-86-0x0000000007820000-0x0000000007831000-memory.dmp

        memory/2304-77-0x000000006F7E0000-0x000000006F82C000-memory.dmp

        memory/2304-75-0x0000000005D80000-0x00000000060D4000-memory.dmp

        memory/2304-66-0x0000000002D70000-0x0000000002D80000-memory.dmp

        memory/2304-67-0x0000000002D70000-0x0000000002D80000-memory.dmp

        memory/2884-108-0x000000006FF60000-0x00000000702B4000-memory.dmp

        memory/2884-100-0x000000006F7E0000-0x000000006F82C000-memory.dmp

        memory/2884-91-0x0000000005790000-0x0000000005AE4000-memory.dmp

        memory/3364-53-0x0000000006FA0000-0x0000000007043000-memory.dmp

        memory/3364-41-0x000000007FBB0000-0x000000007FBC0000-memory.dmp

        memory/3364-57-0x00000000072E0000-0x000000000730A000-memory.dmp

        memory/3364-56-0x0000000007160000-0x000000000716A000-memory.dmp

        memory/3364-55-0x00000000070F0000-0x000000000710A000-memory.dmp

        memory/3364-54-0x0000000007740000-0x0000000007DBA000-memory.dmp

        memory/3364-59-0x000000006FF20000-0x0000000070274000-memory.dmp

        memory/3364-42-0x0000000006D60000-0x0000000006D92000-memory.dmp

        memory/3364-52-0x0000000002830000-0x0000000002840000-memory.dmp

        memory/3364-51-0x0000000006380000-0x000000000639E000-memory.dmp

        memory/3364-43-0x000000006F7E0000-0x000000006F82C000-memory.dmp

        memory/3364-58-0x0000000007310000-0x0000000007334000-memory.dmp

        memory/3364-40-0x0000000005DE0000-0x0000000005E2C000-memory.dmp

        memory/3364-39-0x0000000005DA0000-0x0000000005DBE000-memory.dmp

        memory/3364-38-0x00000000057B0000-0x0000000005B04000-memory.dmp

        memory/3364-30-0x0000000005740000-0x00000000057A6000-memory.dmp

        memory/3364-29-0x00000000056D0000-0x0000000005736000-memory.dmp

        memory/3364-28-0x0000000005530000-0x0000000005552000-memory.dmp

        memory/3364-27-0x0000000004F00000-0x0000000005528000-memory.dmp

        memory/3364-26-0x0000000002830000-0x0000000002840000-memory.dmp

        memory/3364-25-0x00000000027C0000-0x00000000027F6000-memory.dmp

        memory/3364-24-0x0000000002830000-0x0000000002840000-memory.dmp