Overview

overview

7

Static

static

3

Jac-Code-S...15.exe

windows10-2004-x64

7

Jac-Code-S...15.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    127s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    07/11/2026, 14:37

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Jac-Code-Setup-6.3.15.exe
  • Size 199.1MB
  • Sample261107-ry6f3afb76
  • SHA256 a9795def24143068dc28467af69e6a75a6de9fa291cc8c7248f4e479c78a6352
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecutionpersistencespywarestealer

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 5 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 29 IoCs
  • Loads dropped DLL 8 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Using powershell.exe command.

    execution
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 13 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 33 IoCs
  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 28 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Jac-Code-Setup-6.3.15.exe
    "C:\Users\Admin\AppData\Local\Temp\Jac-Code-Setup-6.3.15.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious use of WriteProcessMemory
    PID:784
    • C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe
      "C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe" --home
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:4912
      • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe" "--home"
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        • Checks processor information in registry
        • Suspicious use of WriteProcessMemory
        PID:3608
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe" --type=gpu-process --gpu-recent-crash-count=0 --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1824,i,4224070248747470479,1153007491850675509,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1828,i,5679293658184529161,4639162293625754690,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1816 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1940
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --standard-schemes=jac-preview --secure-schemes=jac-preview --field-trial-handle=1824,i,4224070248747470479,1153007491850675509,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1828,i,5679293658184529161,4639162293625754690,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1876 /prefetch:3
          4⤵
          • Executes dropped EXE
          PID:2056
  • C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe
    "C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe" --startup
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:1380
    • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe
      "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe" "--startup"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • Checks processor information in registry
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4616
      • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe" --type=gpu-process --gpu-recent-crash-count=0 --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1824,i,7019945540722363123,1956099640533528839,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1828,i,8144991734612456346,12962096243842794864,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1820 /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1512
      • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --standard-schemes=jac-preview --secure-schemes=jac-preview --field-trial-handle=1824,i,7019945540722363123,1956099640533528839,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1828,i,8144991734612456346,12962096243842794864,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2104 /prefetch:3
        3⤵
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        PID:4744
      • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --standard-schemes=jac-preview --secure-schemes=jac-preview --app-user-model-id=JacCode.Desktop --app-path="C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\app.asar" --enable-sandbox --allow-file-access-from-files --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1824,i,7019945540722363123,1956099640533528839,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1828,i,8144991734612456346,12962096243842794864,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3012 /prefetch:1
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4596
      • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\jac-engine.exe
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\jac-engine.exe"
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • Suspicious use of WriteProcessMemory
        PID:4592
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacDesktopLock.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacDesktopLock.exe" transaction C:\Users\Admin\.local\share\jaccode
          4⤵
          • Executes dropped EXE
          PID:3760
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe" transaction
          4⤵
          • Executes dropped EXE
          PID:2088
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe" transaction
          4⤵
          • Executes dropped EXE
          PID:4784
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe" transaction
          4⤵
          • Executes dropped EXE
          PID:3228
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe" mcp-config
          4⤵
          • Executes dropped EXE
          PID:860
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe" transaction
          4⤵
          • Executes dropped EXE
          PID:2056
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe" device
          4⤵
          • Executes dropped EXE
          • Reads the TCP/IP host and domain name from the registry
          PID:1940
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe" transaction
          4⤵
          • Executes dropped EXE
          PID:2780
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe" mcp-config
          4⤵
          • Executes dropped EXE
          PID:4696
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NonInteractive -Command "$global:ProgressPreference = 'SilentlyContinue'; Expand-Archive -LiteralPath 'C:\Users\Admin\.cache\jaccode\bin\ripgrep-15.1.0-x86_64-pc-windows-msvc.zip' -DestinationPath 'C:\Users\Admin\.cache\jaccode\bin\ripgrep-rN55ZR' -Force"
          4⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          PID:2836
        • C:\Users\Admin\.cache\jaccode\bin\rg.exe
          C:\Users\Admin\.cache\jaccode\bin\rg.exe --no-config --files --glob=!**/.git/** .
          4⤵
          • Executes dropped EXE
          • Reads the TCP/IP host and domain name from the registry
          PID:2504
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe" mcp-config
          4⤵
          • Executes dropped EXE
          PID:1796
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe" mcp-config
          4⤵
          • Executes dropped EXE
          PID:400
      • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacDesktopUpdate.exe
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacDesktopUpdate.exe" startup "C:\Users\Admin\AppData\Local\Programs\Jac Code" status
        3⤵
        • Executes dropped EXE
        PID:2380
      • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacDesktopUpdate.exe
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacDesktopUpdate.exe" startup "C:\Users\Admin\AppData\Local\Programs\Jac Code" status
        3⤵
        • Executes dropped EXE
        PID:4988
      • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacDesktopUpdate.exe
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacDesktopUpdate.exe" startup "C:\Users\Admin\AppData\Local\Programs\Jac Code" status
        3⤵
        • Executes dropped EXE
        PID:4952
  • C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe
    "C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe" --home
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:2664
    • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe
      "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe" "--home"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • Checks processor information in registry
      • Suspicious use of WriteProcessMemory
      PID:4768
      • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --standard-schemes=jac-preview --secure-schemes=jac-preview --field-trial-handle=1884,i,3565273717120005608,7661097594553538384,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1888,i,3949512792373934215,394853437492331652,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1924 /prefetch:3
        3⤵
        • Executes dropped EXE
        PID:2208
      • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\Jac Code.exe" --type=gpu-process --gpu-recent-crash-count=0 --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1884,i,3565273717120005608,7661097594553538384,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1888,i,3949512792373934215,394853437492331652,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1880 /prefetch:2
        3⤵
        • Executes dropped EXE
        PID:3596

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        rg.exe
        • Path C:\Users\Admin\.cache\jaccode\bin\rg.exe
        • Size 4.1MB
        • SHA256 decdd4992f3f1b9a5ef9898f1b40ab16886d579d6516b4efd3d5eaa19364e408
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        opencode.db
        • Path C:\Users\Admin\.local\share\jaccode\opencode.db
        • Size 4KB
        • SHA256 97e8d54f8a7255106f66cf1b213c4a4d7b558d21310b1c2bfedc3d0d526dddda
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        opencode.db-wal
        • Path C:\Users\Admin\.local\share\jaccode\opencode.db-wal
        • Size 253KB
        • SHA256 c233879701cbf809ef0d0547e9eb3c266dc28b0f00bd20a9986a46ec4a235482
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        desktop-v3.json
        • Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
        • Size 235B
        • SHA256 12dd70111216805b0a33918ffcdfe0ace1cf3f6f7209b9a27e635bf21cec7698
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        desktop-v3.json
        • Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
        • Size 273B
        • SHA256 d96fc48cb3cf4c7fc86f0d129e5d7157585130da54bcad96469ad3f50dec7d9c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        desktop-v3.json
        • Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
        • Size 275B
        • SHA256 4832892264f521aa3be150f50e4d147df70eefd8119336248494879c47cdc7eb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        desktop-v3.json
        • Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
        • Size 275B
        • SHA256 43c56042fd892f2938963c34ceb28d5c1d2d233bd19c75426290e73d885365e7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        desktop-v3.json
        • Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
        • Size 272B
        • SHA256 18e2e72849403432af88455a789045bc4794196d37e47b3062141a19cc4cf486
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        desktop-v3.json
        • Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
        • Size 277B
        • SHA256 7577d55ea977a4fc657ab02f04dca962f938482d17c2b243ae33d61acdfa02c8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        desktop-v3.json
        • Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
        • Size 237B
        • SHA256 91967456655f86350304ffb8c36968af2fc943fdf2d4a8600eff27da4eb1fe93
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        desktop-v3.json
        • Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
        • Size 274B
        • SHA256 281419cab4418fe115b3592d0549dd0120057064f4ac6320298a9c66ab9849e3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        desktop-v3.json
        • Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
        • Size 304B
        • SHA256 142592cac489fef0a7ef8045d9ec4f8b9dfedbac6eff97a14a5a47a3a1e6ca1c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        desktop-v3.json
        • Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
        • Size 276B
        • SHA256 27b7fccd4423ba17aac68860091663c2a51b61ed83ef3adb7678ea5429a0513c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        desktop-v3.json
        • Path C:\Users\Admin\.local\state\jaccode\desktop-v3.json
        • Size 276B
        • SHA256 d649f338c8a3bdde14caac114990d96bd255fc027385f4018670801b2ce0e618
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        kv.json
        • Path C:\Users\Admin\.local\state\jaccode\kv.json
        • Size 26B
        • SHA256 c007acc4a90d665fa79d035cee026c8bb6d3998ade05afc79519411d170b1d74
        • MD5 SHA1 SHA512
        Submit Download

        jac.exe.log
        • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\jac.exe.log
        • Size 1KB
        • SHA256 75cb2c51dac49b960ce0c25b495793a5b04500d44e49b42681f93d0114de5bb7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .jac-current.xml
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\.jac-current.xml
        • Size 35B
        • SHA256 82f782b1869c2700beff74427f10da979c42b1797a5155156fe48f9fbb1facfe
        • MD5 SHA1 SHA512
        Submit Download

        .jac-install.xml
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\.jac-install.xml
        • Size 2KB
        • SHA256 24b992be68b10c8c13498b41cb3cc3e4a2675794ae83550ace7e2e80f08353df
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .jac-transaction.json
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\.jac-transaction.json
        • Size 939B
        • SHA256 4d296df775d7a64e26ce2ee5695714b7e3bcc1bfe9e94c8ec538f0d149726a8f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .jac-transaction.json
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\.jac-transaction.json
        • Size 2KB
        • SHA256 39f16c25728db5df69e6c8e73ea761cdf58ae318e06832aa05951a7b6f62c1f5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        GETTING-STARTED.txt
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\GETTING-STARTED.txt
        • Size 2KB
        • SHA256 e0884c469603d9404ae72e53a8aa6a90c2821bd32563660573a1a36f80ed98f8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\Uninstall.exe
        • Size 53KB
        • SHA256 b33c9b1e12288deb1a320293359019b59dac82aacf7d511a191bb8014e7c51ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jac.exe
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe
        • Size 30KB
        • SHA256 c02a0ce108c5b9606ee173eebbb734a22ff97f22c58c366136ecf6e243921733
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jac.ico
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.ico
        • Size 3KB
        • SHA256 0aa6b0cd0fc67bbbd3575af1409cd4e824c52d6c2f36ea7af5640582035c1629
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        DEPENDENCIES.json
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\DEPENDENCIES.json
        • Size 197KB
        • SHA256 31bc7b101cb4af57a0a6c94cc809dbf4cb9b40930a40c259100db3993e3567bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NOTICE.txt
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\NOTICE.txt
        • Size 222B
        • SHA256 4b92f3c799b77b10104227f9e778063558cafcafd883d57de058b1a00d95b0d5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OpenCode-LICENSE.txt
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\OpenCode-LICENSE.txt
        • Size 1KB
        • SHA256 b5c625d157735f04e1b2b7ceccee849130b554bdb23cd58db55a38a257efbbdd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        THIRD-PARTY-NOTICES.txt
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\THIRD-PARTY-NOTICES.txt
        • Size 5.3MB
        • SHA256 e9eee1733aadc53787e0f4c8e4c3a40b80b09b8513251a15b7b8d93e8151ce24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FFLATE-LICENSE.txt
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\attachments\FFLATE-LICENSE.txt
        • Size 1KB
        • SHA256 0a1df3a083d0c010560aa342e87959c8c1070e6fd54545741f083f22d0c8b551
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PDFJS-LICENSE.txt
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\attachments\PDFJS-LICENSE.txt
        • Size 9KB
        • SHA256 0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        LICENSE
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\LICENSE
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSES.chromium.html
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\LICENSES.chromium.html
        • Size 5.4MB
        • SHA256 7dac8267ac6da8d959cfe88f5f055b18a397f10230380b5329125e167bf5639b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_100_percent.pak
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\chrome_100_percent.pak
        • Size 555KB
        • SHA256 576ee32df5f75b87961d553b3211002810a9f77fdf7d34d3c20d390366e317f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_200_percent.pak
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\chrome_200_percent.pak
        • Size 906KB
        • SHA256 b193854268392f42623adde73efd8bc328ed8b159820946b5395a6223e51ae1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcompiler_47.dll
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\d3dcompiler_47.dll
        • Size 4.5MB
        • SHA256 f5c95e919b4ffa1ac71049cd45b9f986d2965e6888395ca2806337985334fa56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxcompiler.dll
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\dxcompiler.dll
        • Size 24.6MB
        • SHA256 f9423f08212401e1a8f4b3213c6ebb1b9a37e212f0533e5989d90780141aa35d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        electron_wer.dll
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\electron_wer.dll
        • Size 415KB
        • SHA256 9ebd83426b4990f66bf2bff1537e102e6b6517cc7d08141e9cec1a411dd8af68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffmpeg.dll
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\ffmpeg.dll
        • Size 3.0MB
        • SHA256 f035e9879a6d43519467a8d761d2ea643ac63ed89d448eab9aac86bc38c4809f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\icudtl.dat
        • Size 10.3MB
        • SHA256 e1ed8f674bb8449731b79cae956042da59f9ecbd37c8d3f86586a22b4836e5b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-GB.pak
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\locales\en-GB.pak
        • Size 571KB
        • SHA256 e2cf3bd4d2ec7f900c710346362b03bdedf0a46285fd32d9cf6b8fab373b2f20
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-US.pak
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\locales\en-US.pak
        • Size 578KB
        • SHA256 de43db43fe0072543ab225f6d762cce3656a1639bf9e25f371fe0e80d9eabba7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resources.pak
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources.pak
        • Size 12.8MB
        • SHA256 e76eeae66e4b4ac97f76a9a17260705f7f82d52c6bfe868dc0775cc9715d07ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JacAttachmentGuard.exe
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAttachmentGuard.exe
        • Size 6KB
        • SHA256 bba71cc03caa3aad2d3ba167ffaa66381c52eef885abc516849067a58eea081b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JacAuth.exe.473c7252d9ad4c2888a9d81044fcc868.tmp
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacAuth.exe.473c7252d9ad4c2888a9d81044fcc868.tmp
        • Size 19KB
        • SHA256 f16c83f8211670543e93be5540f2a7805855f366cfa39c48dffaa5acb0bb4959
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JacDesktopLock.exe
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacDesktopLock.exe
        • Size 5KB
        • SHA256 10a729e21f5be2e6a0c88987c923b05562a1413b367f36652fc3326804467d0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JacDesktopUpdate.exe
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacDesktopUpdate.exe
        • Size 45KB
        • SHA256 a396c057703bb2d4d0261717f4c02c43c357111716841ed0fe459ca2955a69f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JacProjectRun.exe
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\JacProjectRun.exe
        • Size 15KB
        • SHA256 e61796967e0e3dbbce06737f26fb5f15436c0f08e99e97f142ac328b681080d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        app.asar
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\app.asar
        • Size 3.1MB
        • SHA256 a41f40d27e5a6cccac655c5f169191865f7ea1f43f60b550903d024d90a01e5d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        client-integrity.json
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\resources\client-integrity.json
        • Size 6KB
        • SHA256 de863f015cbae9f55eb25f5f2d33e1bcbc073c779a6f3a1b2c5f4cd5b4549b04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        snapshot_blob.bin
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\snapshot_blob.bin
        • Size 365KB
        • SHA256 7cbf6f6f4dacb2d7bc33fa58802586967fb1a67881ca3b4b57f035d7a4aaeb84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        v8_context_snapshot.bin
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\v8_context_snapshot.bin
        • Size 735KB
        • SHA256 adce42fc0dc2dd4da6afd7aac60715764c928c8029fd3f551a71a9400f1372c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        version
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\version
        • Size 6B
        • SHA256 5278972faf4e79e7c907e470a9cf5b96980f652070c6faafffe71d4d77392441
        • MD5 SHA1 SHA512
        Submit Download

        vk_swiftshader.dll
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\vk_swiftshader.dll
        • Size 5.2MB
        • SHA256 2601880d950b0f76d3d44b2fa23b9076b722c2be6f2d1e2972f1c1c2cf176c16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader_icd.json
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vulkan-1.dll
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.3.15\vulkan-1.dll
        • Size 935KB
        • SHA256 f23002eefe4824cf6724d7ae63e9f2dd1f5119d53a64b542394ab528c64b0d2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        .bun-1534026329-3cba9b8dc4fa4e45.node
        • Path C:\Users\Admin\AppData\Local\Temp\.bun-1534026329-3cba9b8dc4fa4e45.node
        • Size 506KB
        • SHA256 a8199cf7b6c5102267a5889f80321a4cc92e631d7504c474d32a35b4d440f315
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        __PSScriptPolicyTest_yvt0bcrf.3v1.ps1
        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_yvt0bcrf.3v1.ps1
        • Size 60B
        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        data_0
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\DawnWebGPUCache\data_0
        • Size 8KB
        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_1
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\DawnWebGPUCache\data_1
        • Size 264KB
        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_2
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\DawnWebGPUCache\data_2
        • Size 8KB
        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_3
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\DawnWebGPUCache\data_3
        • Size 8KB
        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        MANIFEST-000001
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\Extension State\MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512
        Submit Download

        Local State
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\Local State
        • Size 490B
        • SHA256 af2e67a8741f65ec0dd002279026ad9e363cdc222f0b0339569a00e38f94258e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Local Stated7e4a9ab-33a0-4d8c-a833-f7e881e45318.tmp
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\Local Stated7e4a9ab-33a0-4d8c-a833-f7e881e45318.tmp
        • Size 490B
        • SHA256 09051dc4ebe49d277c1d1ab28979276f9e079e42fa6f3c8865eefa3c3a2c281a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        CURRENT
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\Local Storage\leveldb\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512
        Submit Download

        .integrity-v6.key
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\backups-v6\.integrity-v6.key
        • Size 32B
        • SHA256 8226b6fedbb5a65f197cf9181c88ab8c4cb1549857d986a3d07b538587030ef3
        • MD5 SHA1 SHA512
        Submit Download

        database.sqlite
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\backups-v6\.pending-df8f16d8-c910-422a-976b-be4688a1f011\database.sqlite
        • Size 192KB
        • SHA256 14ff9711d105689a93f08d7c28eb42befa0061ff138852b269f437d13eafb216
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        manifest.json
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\backups-v6\.pending-df8f16d8-c910-422a-976b-be4688a1f011\manifest.json
        • Size 1KB
        • SHA256 19ff333b3a8d75003ac96619faffadc1b050a29db980b2b1b73599f582b93c69
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        queue.json
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\queue-v6\queue.json
        • Size 38B
        • SHA256 6b6401b3841d14091235e8e71a5f7e767b3198be6f3662576a618cd4d296f732
        • MD5 SHA1 SHA512
        Submit Download

        .task-write-0807edb3-e46a-44c3-9eb9-22d3e6736532
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_83432dbb-3e5f-44ca-9e23-0c39b082c5e9\.task-write-0807edb3-e46a-44c3-9eb9-22d3e6736532
        • Size 978B
        • SHA256 81435bf7650ebbee09132c2e35e9d480404c9bcd524c9bcceaa9fb9a35c4fadb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .task-write-6b84afa0-accf-445d-8475-1c166cc28630
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_83432dbb-3e5f-44ca-9e23-0c39b082c5e9\.task-write-6b84afa0-accf-445d-8475-1c166cc28630
        • Size 983B
        • SHA256 1a6325417cc6e70b1e29ac3f86c8aa6a1343214f82cbaa31283ddadbd014b7f1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        task.json
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_83432dbb-3e5f-44ca-9e23-0c39b082c5e9\task.json
        • Size 459B
        • SHA256 77b703bc44ab030908cac410f33ebe3a37c04ac492bcafce508204b3331a0fb6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        task.json
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\tasks-v5\task_83432dbb-3e5f-44ca-9e23-0c39b082c5e9\task.json
        • Size 644B
        • SHA256 a640446f5aa9717adc5b174ca3647baa88b5c146047b3cbbd9e00d0ef15fceeb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        default.dic
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512
        Submit Download

        Jac Code F9078B.lnk
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jac Code F9078B.lnk
        • Size 2KB
        • SHA256 35c38e86190022ebfbf8b8fc3b11cf990300fb26db81a75088cbd0da3eb52d6a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ~ac Code F9078B.tmp
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\~ac Code F9078B.tmp
        • Size 2KB
        • SHA256 cb5adefbe6812cc5674d7919292ac7ffecc6c5ff04d2c54b6111f7846380246a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Jac Code F9078B.lnk
        • Path C:\Users\Admin\Desktop\Jac Code F9078B.lnk
        • Size 2KB
        • SHA256 ff3eb02306df98a080f880ab4432355cb0e6c2d889a9752137922fa18002ef3c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ~ac Code F9078B.tmp
        • Path C:\Users\Admin\Desktop\~ac Code F9078B.tmp
        • Size 2KB
        • SHA256 3973f607d2f312bc2e7e4e2018ee6511442bc07ea93732c822ad8997ca95f7e8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/784-7-0x000000006F0A0000-0x000000006F5C8000-memory.dmp
        Download

        memory/784-2-0x0000000028960000-0x0000000028970000-memory.dmp
        Download

        memory/784-0-0x0000000000530000-0x0000000001530000-memory.dmp
        Download

        memory/784-1-0x0000000028960000-0x0000000028970000-memory.dmp
        Download

        memory/784-285-0x0000000028960000-0x0000000028970000-memory.dmp
        Download

        memory/784-6-0x0000000028960000-0x0000000028970000-memory.dmp
        Download

        memory/784-5-0x000000002D430000-0x000000002D442000-memory.dmp
        Download

        memory/784-4-0x000000002D5E0000-0x000000002D7A2000-memory.dmp
        Download

        memory/784-3-0x0000000028960000-0x0000000028970000-memory.dmp
        Download

        memory/1380-289-0x0000000000AC0000-0x0000000000AD0000-memory.dmp
        Download

        memory/1380-288-0x0000000000200000-0x000000000020A000-memory.dmp
        Download

        memory/2088-455-0x00000000019C0000-0x0000000001A10000-memory.dmp
        Download

        memory/2088-454-0x0000000000BA0000-0x0000000000BAA000-memory.dmp
        Download

        memory/2380-456-0x0000000000FA0000-0x0000000000FAE000-memory.dmp
        Download

        memory/2836-712-0x000001A87D230000-0x000001A87D252000-memory.dmp
        Download

        memory/2836-720-0x000001A87D200000-0x000001A87D20A000-memory.dmp
        Download

        memory/3760-451-0x0000000000400000-0x0000000000406000-memory.dmp
        Download

        memory/4596-400-0x00007FF947B00000-0x00007FF947B01000-memory.dmp
        Download

        memory/4596-402-0x00007FF946EC0000-0x00007FF946EC1000-memory.dmp
        Download