d594b5b98c36f0e75be3e98f4eddc159c59f58eaf2daf54630df15c97d121d33

Analysis

user interaction
yes
max time kernel
900s
max time network
691s
platform
windows11-21h2_x64
resource
win11-20260911-de
resource tags

arch:x64arch:x86image:win11-20260911-delocale:de-deos:windows11-21h2-x64systemwindows
submitted
13/11/2026, 17:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Beta-Browser-Setup-3.2.1.exe
Size 112.1MB
Sample261113-wbk9tset21
SHA256 d594b5b98c36f0e75be3e98f4eddc159c59f58eaf2daf54630df15c97d121d33
MD5 95eceb558b3d994d7e8e542393e94913
SHA1 1533064886df4779e3d0ebfbc36de54608cdc4ee
SHA512 0f2acc70d3ed468285b01374e7a6e29ff4a0e8d2615861176777fff097eec8cec6fa3cc4606047703b0df27ea215c67588318fec1ae6875304f6ea79a5882c30
SSDEEP 3145728:WVsqHjF1Dm3bViN80UkEUQH7nDggFRd+1J1:2sqDF1Dm3bViertbnDggF21J1
TLSH
T1234833553E57D50BEF43B6F11720983D9DE7030FE9B00853A763E8BA68AC788668D14E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution spyware stealer

Malware Config

Signatures

Executes dropped EXE 6 IoCs

pid	Process
1952	BetaBrowser.exe
3908	BetaBrowser.exe
5276	BetaBrowser.exe
2108	BetaBrowser.exe
788	BetaBrowser.exe
2960	BetaBrowser.exe

Loads dropped DLL 19 IoCs

pid	Process
5316	Beta-Browser-Setup-3.2.1.exe
5316	Beta-Browser-Setup-3.2.1.exe
5316	Beta-Browser-Setup-3.2.1.exe
5316	Beta-Browser-Setup-3.2.1.exe
5316	Beta-Browser-Setup-3.2.1.exe
5316	Beta-Browser-Setup-3.2.1.exe
5316	Beta-Browser-Setup-3.2.1.exe
5316	Beta-Browser-Setup-3.2.1.exe
5316	Beta-Browser-Setup-3.2.1.exe
3908	BetaBrowser.exe
3908	BetaBrowser.exe
3908	BetaBrowser.exe
3908	BetaBrowser.exe
2108	BetaBrowser.exe
2960	BetaBrowser.exe
2960	BetaBrowser.exe
2960	BetaBrowser.exe
2960	BetaBrowser.exe
2960	BetaBrowser.exe

Reads ssh keys stored on the system 2 TTPs
Tries to access SSH used by SSH programs.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Network Service Discovery 1 TTPs 1 IoCs

Attempt to gather information on host's network.

discovery

Network Service Discovery

T1046

pid	Process
2960	BetaBrowser.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
5920	powershell.exe
5708	powershell.exe

Drops file in Windows directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1952_1868357453\_platform_specific\win_x64\widevinecdm.dll.sig	BetaBrowser.exe
File created	C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1952_1868357453\_platform_specific\win_x64\widevinecdm.dll	BetaBrowser.exe
File created	C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1952_1868357453\manifest.json	BetaBrowser.exe
File created	C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1952_1868357453\_metadata\verified_contents.json	BetaBrowser.exe
File created	C:\Windows\SystemTemp\scoped_dir1952_1276520769\image.ico	BetaBrowser.exe
File created	C:\Windows\SystemTemp\scoped_dir1952_1258576466\image.ico	BetaBrowser.exe
File created	C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1952_1868357453\LICENSE	BetaBrowser.exe
File created	C:\Windows\SystemTemp\scoped_dir1952_1843082370\image.ico	BetaBrowser.exe
File created	C:\Windows\SystemTemp\chromium_chrome_url_fetcher_1952_1959270682\oimompecagnajdejgnnjijobebaeigek_4.10.3112.0_win64_a5xadnsxzavp7cn4ay5kc6gq6u.crx3	BetaBrowser.exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
5444	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	BetaBrowser.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	BetaBrowser.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	BetaBrowser.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	BetaBrowser.exe

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Beta-Browser-Setup-3.2.1.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	BetaBrowser.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	BetaBrowser.exe

Modifies registry key 1 TTPs 2 IoCs

Modify Registry

T1112

pid	Process
3892	reg.exe
5016	reg.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5444	powershell.exe
5444	powershell.exe
5920	powershell.exe
5920	powershell.exe
5316	Beta-Browser-Setup-3.2.1.exe
5316	Beta-Browser-Setup-3.2.1.exe
5708	powershell.exe
5708	powershell.exe
2960	BetaBrowser.exe
2960	BetaBrowser.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	5444	powershell.exe
Token: SeDebugPrivilege	5920	powershell.exe
Token: SeDebugPrivilege	5708	powershell.exe
Token: SeIncreaseQuotaPrivilege	5708	powershell.exe
Token: SeSecurityPrivilege	5708	powershell.exe
Token: SeTakeOwnershipPrivilege	5708	powershell.exe
Token: SeLoadDriverPrivilege	5708	powershell.exe
Token: SeSystemProfilePrivilege	5708	powershell.exe
Token: SeSystemtimePrivilege	5708	powershell.exe
Token: SeProfSingleProcessPrivilege	5708	powershell.exe
Token: SeIncBasePriorityPrivilege	5708	powershell.exe
Token: SeCreatePagefilePrivilege	5708	powershell.exe
Token: SeBackupPrivilege	5708	powershell.exe
Token: SeRestorePrivilege	5708	powershell.exe
Token: SeShutdownPrivilege	5708	powershell.exe
Token: SeDebugPrivilege	5708	powershell.exe
Token: SeSystemEnvironmentPrivilege	5708	powershell.exe
Token: SeRemoteShutdownPrivilege	5708	powershell.exe
Token: SeUndockPrivilege	5708	powershell.exe
Token: SeManageVolumePrivilege	5708	powershell.exe
Token: 33	5708	powershell.exe
Token: 34	5708	powershell.exe
Token: 35	5708	powershell.exe
Token: 36	5708	powershell.exe
Token: SeSecurityPrivilege	5316	Beta-Browser-Setup-3.2.1.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe
Token: SeCreatePagefilePrivilege	1952	BetaBrowser.exe
Token: SeShutdownPrivilege	1952	BetaBrowser.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 5316 wrote to memory of 5444	5316	Beta-Browser-Setup-3.2.1.exe	79
PID 5316 wrote to memory of 5920	5316	Beta-Browser-Setup-3.2.1.exe	81
PID 5316 wrote to memory of 5708	5316	Beta-Browser-Setup-3.2.1.exe	83
PID 1952 wrote to memory of 3908	1952	BetaBrowser.exe	88
PID 1952 wrote to memory of 3892	1952	BetaBrowser.exe	89
PID 1952 wrote to memory of 5276	1952	BetaBrowser.exe	90
PID 1952 wrote to memory of 2108	1952	BetaBrowser.exe	91
PID 1952 wrote to memory of 5016	1952	BetaBrowser.exe	93
PID 1952 wrote to memory of 788	1952	BetaBrowser.exe	95
PID 1952 wrote to memory of 2960	1952	BetaBrowser.exe	96

C:\Users\Admin\AppData\Local\Temp\Beta-Browser-Setup-3.2.1.exe
"C:\Users\Admin\AppData\Local\Temp\Beta-Browser-Setup-3.2.1.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:5316
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -NonInteractive -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
  2⤵
  - Hide Artifacts: Ignore Process Interrupts
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:5444
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -NonInteractive -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:5920
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -NonInteractive -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\betabrowser', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:5708

C:\Users\Admin\AppData\Local\Programs\betabrowser\BetaBrowser.exe
"C:\Users\Admin\AppData\Local\Programs\betabrowser\BetaBrowser.exe"
1⤵
- Executes dropped EXE
- Drops file in Windows directory
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1952
- C:\Users\Admin\AppData\Local\Programs\betabrowser\BetaBrowser.exe
  "C:\Users\Admin\AppData\Local\Programs\betabrowser\BetaBrowser.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\BetaBrowser" --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1900,i,3345459258001254570,16877712962650111670,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1904,i,15283541352910348639,4019803326211092285,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1892 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3908
- C:\Windows\system32\reg.exe
  reg.exe query HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall /s
  2⤵
  - Modifies registry key
  PID:3892
- C:\Users\Admin\AppData\Local\Programs\betabrowser\BetaBrowser.exe
  "C:\Users\Admin\AppData\Local\Programs\betabrowser\BetaBrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\BetaBrowser" --bypasscsp-schemes=crx --field-trial-handle=1900,i,3345459258001254570,16877712962650111670,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1904,i,15283541352910348639,4019803326211092285,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2112 /prefetch:11
  2⤵
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  PID:5276
- C:\Users\Admin\AppData\Local\Programs\betabrowser\BetaBrowser.exe
  "C:\Users\Admin\AppData\Local\Programs\betabrowser\BetaBrowser.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\BetaBrowser" --bypasscsp-schemes=crx --app-user-model-id=de.betabrowser.app --app-path="C:\Users\Admin\AppData\Local\Programs\betabrowser\resources\app.asar" --enable-sandbox --mse-audio-buffer-size-limit-mb=40 --mse-video-buffer-size-limit-mb=400 --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1900,i,3345459258001254570,16877712962650111670,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1904,i,15283541352910348639,4019803326211092285,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2484 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2108
- C:\Windows\system32\reg.exe
  reg.exe query HKCU\Software\Clients\StartMenuInternet\BetaBrowser
  2⤵
  - Modifies registry key
  PID:5016
- C:\Users\Admin\AppData\Local\Programs\betabrowser\BetaBrowser.exe
  "C:\Users\Admin\AppData\Local\Programs\betabrowser\BetaBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=de --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Roaming\BetaBrowser" --bypasscsp-schemes=crx --field-trial-handle=1900,i,3345459258001254570,16877712962650111670,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1904,i,15283541352910348639,4019803326211092285,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2872 /prefetch:14
  2⤵
  - Executes dropped EXE
  PID:788
- C:\Users\Admin\AppData\Local\Programs\betabrowser\BetaBrowser.exe
  "C:\Users\Admin\AppData\Local\Programs\betabrowser\BetaBrowser.exe" --type=gpu-process --disable-gpu-sandbox --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\BetaBrowser" --gpu-preferences=WAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAAAAAAAAAAAADgAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAADAAAAAEAAAAAAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=d3d11-warp-webgl --field-trial-handle=1900,i,3345459258001254570,16877712962650111670,262144 --enable-features=AllowWindowCaptureExclusionInRemoteSessions,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1904,i,15283541352910348639,4019803326211092285,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=2936 /prefetch:10
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Network Service Discovery
  - Suspicious behavior: EnumeratesProcesses
  PID:2960

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Network Service Discovery

T1046

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

powershell.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\powershell.exe.log
Size 2KB
SHA256 56b3adbf18e46f82c8075f712785ea8e59e3125a90ce26b8b0d20687401340d6
MD5 9957e974f5f56a44037770c8a45dfb1e
SHA1 799090afbb1a0f8ce52605687d1013278a68516d
SHA512 3967c71752cebb57254c981d715077ebd988ca8b9cab6d81aa3207770139958cbd95991d2aa0c690a7aa5908f37cba8053f388896014bbe4e47b42436cc915a6
TLSH
T1A64149303221B5D84D436F1205286AC9A2EF478AAFAC9F5CB569231DCD2A44BD7221F3
MD5 SHA1 SHA512 TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 16KB
SHA256 0fc028b7b3d18e8ca73137fefbfc229dc6492fe59d575bc685b55c9fd7221105
MD5 90e2bc4ab31b6dd7e3faad62dbe432cd
SHA1 6dd7cd550f60dde2699b32f50661d56a2bc9259d
SHA512 17e15015147e2f882e85cd52bdc01f8af435c0850d4c72d19749d988d00052a8f85e88ff0f3f3c371e464146a4214ec564825945fcec94cf16f743cfeee9ffe2
SSDEEP 384:EL3H961SS1RhdO6FRHEMhdnSanNvjs2wCq99BVjsDzdZmNx:qYSSZdO6RPhB1vj7wCU9BVjsHdZmf
TLSH
T1DD72A4AE710F26C3C8992378D106054FE4F2DECD431A13C9B72A9E3B8E9CA5E557C598
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 16KB
SHA256 aa618beda356d1d42968f3e638aa7a135f0b42faacba73c0a9185082d1930a4b
MD5 ba2ae24d552dd29133c2495458beae5b
SHA1 c6a9fe81e96a66916e6ab571de6494c59ae619a9
SHA512 885bca633ae91825f6b306b1e696000376e1ddbe487143fa24831ffb3ba6f6914504b758bf2b8ea3caa2eab6e62adc47a9c3551a7a8877b4b66b319b04279552
SSDEEP 384:YTH6sSGAjnvuSMV4ba2E0VN8nNjsaMD6PCkY1SIoDjmdqi:+SjDvuoO2Eg8Njs2PRVjmdqi
TLSH
T1F672F8AD321F2246E56127B8D0160B9FF9F18ACFC34996DDA710CD7A05CFA2540E81F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BetaBrowser.exe.sig

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\BetaBrowser.exe.sig
Size 1KB
SHA256 53236fbaa96145d7825a475d73a8bb69a5936062ae4663be5f6ae51b6576d71b
MD5 9b1672f38600bb477fc65da3afff5073
SHA1 5d2e27756dc4514e634ac15549fe436d59578d6d
SHA512 012f2ac4c7fde75f2996bb085469662a662b6f854208bf63feaf257dd964f7cf45a97ebc912ff294dfe5e5596aeb1296dd5044a9ad5dc92dd66abe021a11e3b3
TLSH
T1F021C460FA54009A9D08FE79F8CEE9379EF093C15D5294F7542ACB4001AABB234D735E
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.electron.txt

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\LICENSES.chromium.html
Size 19.5MB
SHA256 b36f29f20fa7d29e2bff6a03c12f6ff8adf4336c4b189157095482ea58d98223
MD5 f16490d10dc6cf2c2321144b2df6be1e
SHA1 7dccf2de573ebb0f95179fd7c4c3d9b64b19b5d2
SHA512 20d3bb5d4e77f1e0108b0dbe3f5d4f8144fb791c728c902aae36441607d5d2854cd51549402fac8ed90193bc4bbd76b7c8a10158e6c15dc23dbb2e9b17cf53e8
SSDEEP 49152:ZehpCrdOboVyTYp2xnuCHpjtxsJM+QAFId+Qi4WMEAccJ:Y
TLSH
T1C927B46BBB49037316F242626B47A5CAF31EA13F375A1654309CC1182B7BD2483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\chrome_100_percent.pak
Size 702KB
SHA256 ab7c4b7b6cb8832a31d44b95ec50ce52294f49422a3bdde4e21968eca2930cbe
MD5 8bd180ba5ae087e7348c8e5d3fc747b9
SHA1 032e54936f0a96b9e008a77666e8739f6ff56341
SHA512 8f52ca1c25bbfacefdeb869ba8b2725a12269f5df40ae50744bcb7f4f68df6cf8ab6a6a63116969d07a9ca80caaadcd6b3542f056cf1317e55e7c1bfe8c2b28b
SSDEEP 12288:QI3HWfJwNjzgsz5B0GDJQrnKs8SNP+QSsEHeilSTe+gnzzmg/YJblIt6kjKQCrC:H32Bw7zEEmPLVbTe+gnzzmgwbc6kGQt
TLSH
T159E412E77370AC7DEEAB1677426614B0FC375A280B51060A17DAF8796923B48D8D93C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\chrome_200_percent.pak
Size 1.2MB
SHA256 30fa4a6e27c9ff2fb0f939f01158477e621a67d86e9ecb84cf11b3947db8eb9d
MD5 62dc1994f062c83fce3944c829165007
SHA1 1ab2de2406114a4c4e32ca3dc4d6f8515cb4d6cd
SHA512 1d4b7acedaa54d376764ea1709750cb102b326fa4a993bad7b8ef4c4961950c52541dd79a8789709bfaa5aebbed0c6fe5a781866512c56da660ea7ed2c55befd
SSDEEP 24576:73WBS9n2zLmmibkFR8+mZiqr8BWhQumesXRvQtgIQwuSXAkpbaUGQ74:73P23mNbkFRJmQ+8khQRn1Q68uSXAk78
TLSH
T1754522D7D770AC3EDD520B77939B20E0FD7600271A61190F0B26BD7929276C8DA96B83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\d3dcompiler_47.dll
Size 4.5MB
SHA256 3e56c1a0867aa04cbca948b3664fcac5d51275865cd044a45a3fd6ce636ee914
MD5 ad18e66c9ba813d388576400880b0924
SHA1 6aea7765a7e115f179c805654b70333ff01a275f
SHA512 418f4aad1ba288a39bf74c79159a7be7a40bdfc3b35492beb6428a3c10d6124b36ed41cfca2200680176113eae5f6c6d3c0a7a95f60830732fa38fc0cb0a6c2f
SSDEEP 49152:3qaa1HYZcP0ot/OZLjJMLANavfP5q6SpaIx546LUbOWHHQdsCIdkTYoHjnlP0mzQ:pcP0U2xqAMXLgLDoWhfnankG
TLSH
T1BF269E56B7E850E9C1BBD138C687961BE7B1B80503305BDF02908769AF73BD16A3E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\dxcompiler.dll
Size 24.6MB
SHA256 ec4ccf9bb5f0a26486b83b0719f690b9364d59c4b43ff3b16ee989d7b0ba2167
MD5 cbaff1f5f7417fe73eccb1a58246cff4
SHA1 9d1569043ac93384b675e24bf103e23e63841242
SHA512 d6fec911e16278b7052e5427d397cabe720a0f7ae3ed8dada5fe4df917e1f70ddd4343461139883614e8fb3955d29a89b711b74cc23ac0feee509225a957617b
SSDEEP 393216:i93f5wHKmKLd8uCl0r2JrQOLji2+gyCuTXSXQyyi:i8Hkrr2JFLjMgKTXXa
TLSH
T1B14729122646D49CC099C879C7678B268A6C30E73FA7B9EBC0F451212B79DFC5B39235
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\dxil.dll
Size 1.4MB
SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
MD5 c9a7241ce83437d54a82522aa0b54575
SHA1 acff69399c4f17c4f20f70560fb89a9163d2b486
SHA512 8ad8c77a2368e363ad16cc1f9b3a0e4ac15634722340bdebb0e4957e7e117faaf36db2d6e08cb49127849b64844a75ebdd7e19b3f8b7e1f4412fb0066dce1ad5
SSDEEP 24576:YcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/2:YsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bX
TLSH
T109656D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\ffmpeg.dll
Size 3.0MB
SHA256 605b864d01f4e31d6144825a93532b84780f77297058468ec548af835e75c624
MD5 c999de8028b5d5b946470eee9dd4ee1c
SHA1 743f5cbaca05b1f92c46a3ecd7a087b39bb02ccf
SHA512 b87683dc839df5e510814815f8c584abe5a0f1bb168610d172d32f59906a93621334c5b6388e2ff433c526aaca20b8cfd343a924155f6c6adc9ea89ea66e3163
SSDEEP 49152:zT0PxqM/bascuiZRV3qfULMsvpTwDojDNhBIkaaLua3eHkGBC:zU/2uiZ73qihQaLupnC
TLSH
T1E2E5AE02F6D251DDD019C03493AB9213F671784A8F205AEF17E05A213FA6FE86D7E768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\icudtl.dat
Size 10.4MB
SHA256 da53f0b69843aaa43315f0f210a67e4a874b0be338f3dae08ff57b8afe76ab0d
MD5 d5136270d87d40d2c1c6df098f53002a
SHA1 d167e8c8183258dc8714a84993b823dbd7390add
SHA512 55709f3a14e9402860ff2648bde887e7bb7674278c088e36ce20e6b107735cca68a210a091ca72f816803d27998e188b78aedf18cbfa24ad17cbfd4caec9376b
SSDEEP 98304:g/cBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjnd0p89s:g/cBhORok2HiXUxO/RJk3IWhlYntjdPs
TLSH
T136B62903A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\locales\de.pak
Size 701KB
SHA256 52b9d92d2d09532a6016ce07a355e7acb385a9ea245436e0db188a76b8b7f622
MD5 877b3c30f6a33fd85e26ef410d0436e6
SHA1 a6cf26c9f8bc00483b508b921b116d73e43404fa
SHA512 842b3340b454cede697373256c195e62f2b6db8c5b51b3278b87cfebfaaca8756b9770c9549ecf454d95231f15262b7ab5b080d7f22c971f4643378f201e425d
SSDEEP 12288:GWdv/MbgMwVkW3K7UpkZ+gyOqc9l0VJUbQUeecCtO:NcbgMdW3K7UpkZ+gy9c9OIoCtO
TLSH
T137E41803ADDB625ED78673617705CDB77B19E36FD342312A88EDC02B650B5B283AC522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\locales\en-US.pak
Size 572KB
SHA256 23b271e8009bfa14783700cd0712b4ecaa5b8f2ea28a4d81ae1d7e05bc0c96b1
MD5 3d66180f21df40a9eb941814676972eb
SHA1 b74b6ceba72cd5ca9e662acca19285037995c362
SHA512 4ef14702236e389409bd875dfc0b3f467f8b15c9e97c13dacedfc751642445141de31d6ccc574c8aa4dd788c2e756a16ded3262eb0c577b2b0e82ff526638efc
SSDEEP 6144:pUTO8xSUd/7b7/wg7HfwKOF7Nt3/p9XhMP96hgREfaY+43Um8tjmngcs/wEwj:mqL8f7/weHfwpNbMUhgR2uj1wj
TLSH
T12AC44D1FF784122A05935262BF099572FF32D06CA36112663CBD812C3376B66D2B76F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\resources.pak
Size 11.9MB
SHA256 15e4a93cab3fc12948cf8f38d20c307efb8bde7259f284d74af19be2edd84500
MD5 fe7202de4bbf247a1a47782de61b5d08
SHA1 3b281ff6fd1df8762f5a2267ea5e03273472f0e4
SHA512 b0b9e1a52f31899f7cbb3c18bf7c9d009576d04aef9e0379e90eb30b6959faa7597b75009e15f27d0619f739017532493d297b120e87fb42394b339bc840d201
SSDEEP 196608:PRR3ZeqsPzZOgYimq8oR/5e7sbawRX2CeVh2uDK3Q12Omsw85OkrFAceC/Zh2tX7:PLZelLgg9mno8sbVp2CM8JQOkrFJeCDY
TLSH
T1BAC633983764286FDE2123F3822D1237DE698E0F15A550E30AAC701CDEB7A6C5FDA535
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\resources\app.asar
Size 17.9MB
SHA256 f9dd9c76f21625a697bf59147242cfcad1297154ec22cff3484eb3f81e7144f3
MD5 065311e9b316dfea245bee2e16ca6344
SHA1 dd305d16ae062ce7e85d49595cb708ebba539950
SHA512 551879f337633ee8a9fa130d7acf9e056bd00ff8e4ee793ce95ff3c205e5dbcbfb41cdcd603eb0bc51757263faee78ad02ac6eb5c15afbf55cf2f6a10b0f2ca7
SSDEEP 393216:6zfAiEVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV9:6/c
TLSH
T1FA176D466EF721324263A1B55F0FA402F33490172509DD54BA9C83A46F8EA6CD6FBFD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kiesel-clicker.exe

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\resources\bin\kiesel-clicker.exe
Size 117KB
SHA256 d3ab4eeddc4b3b5b9ab22f588d4f46b314879c27906231b7e6c4650b764fb02c
MD5 abf532771f8472c780645e297a3de82c
SHA1 22566f2d46b0a9deed4cc2179f5c6de4ae467bdd
SHA512 948d80ad07a9cff8929eb72b39f723d6f039168b154480bdb277bc3eb9aad2614bad04d8b2b1daf252d74d4bca3251bf15c51062a1593268d97b2ea26543e2e6
SSDEEP 3072:DNvIAIXdSSmBNfW8B8aSX/zIIpVJjxzbr+eKq7gcs:pr8d7mBNfSB/3B+R
TLSH
T184C312E2ABD0ED3DEC4B23B907B71D1296B7701609A1032BD88419B91E9E2C467E1773
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kiesel-stats.exe

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\resources\bin\kiesel-stats.exe
Size 113KB
SHA256 f3104826c061517a88efcab1219a3c111069baf65d20dceaa1f619259cfbaa0e
MD5 22267ef931ed00d81be1c434edacf3a0
SHA1 00e0c1dfc1af2dc757c26c5e04038d61cd611685
SHA512 5485a10ed210b393a17572c2c142a4e8e5944b815a0a86d4ebb34455e0747577288824061055fd278525b94edfd90ad7ac87727bca01216c716e1ed6dbb9c6d7
SSDEEP 3072:B8lvIAIXdSSmBNfW8B8aSX/zIIpVJjxzbr+eKq7gcs:BUr8d7mBNfSB/3B+R
TLSH
T13CB312D2A7D0ED3CEC4723B607BA0C21AAF7B15109A1033ED4805A665D8E6D857F5773
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kiesel-update.exe

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\resources\bin\kiesel-update.exe
Size 116KB
SHA256 c2855b7ef2ad8b415180391daee8f4fe0167dc6453152dcc97222c407ed11e30
MD5 dc04ef991176cb014a48e65f896c9915
SHA1 dac78e4159b78150622c87c2d4a02ae693ff08cb
SHA512 46bc582f16a1949142721a5ae1f913b9c3d148a03db694fda76f0c6e6dd29408bae548097605fd13b81a47a0d9110ccb73bc35eb363b4e7dd7ca85a23388958c
SSDEEP 3072:hFvIAIXdSSmBNfW8B8aSX/zIIpVJjxzbr+eKq7gcs:jr8d7mBNfSB/3B+R
TLSH
T1DAC312C2B7D0E83CFCAB1375177A1D2166F7B1920CA0072E84845A6A5E9E2D857F47B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_app.asar

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\resources\default_app.asar
Size 108KB
SHA256 0eb2491b0a9ac94790389d39c09dd5005c6c1f0665842943829bbd0193f6cc4f
MD5 e54f42d2b33bbddc102a6d861f860f21
SHA1 129694f72f5a850e92c9b2679624e074a82051f3
SHA512 54a410f978c7e42e28e2025c501249489fa8b89f8d4c9569f52c862f265e24060b1e21690bf5d757b3973b727ec76c24c352268674c5338135267ddc0044828a
SSDEEP 3072:nWDxvTvFRWrjXxs8xbKNkCeF1SBRbFdPQrZsH0L5uRD:nWDd5R4XxRYmS7orZsH0L8
TLSH
T100B3E19412F60231D86B4AFE9FAF16267A39241732CDD0C4722D87609FE15D2A5E3BCC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

elevate.exe

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\resources\elevate.exe
Size 105KB
SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
MD5 792b92c8ad13c46f27c7ced0810694df
SHA1 d8d449b92de20a57df722df46435ba4553ecc802
SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
TLSH
T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\snapshot_blob.bin
Size 360KB
SHA256 008b7f8d33b1529d79aa1e72e19d93e143b05e2849d92e8f13c6345698a5bd6a
MD5 20e8422034128e86cddf900696fcfb5b
SHA1 6a5260b1b1a7c6fcac2b25b10a6a26a9a2da8b13
SHA512 fb6baddcb6abdecaf177335722c6c2ef76054e47b5b13cf979f71e153298fdd0c6cc430fd468fee5f7f5178a3a78a220f2cb19e40647b300b69f7583de9e566e
SSDEEP 3072:KlOt+xbRt251RNy1V5NZSMxRl3iADB1v/diiiCkmW4kPdMwjZ9xkzd5RKvhRgRpi:Jt+HwTmNZpdrgiqqI9kzdjTi
TLSH
T1D674FC46F15AC625CCE212384EEDCED83AB4F5CDDE86C21B324047BDB4B96609F9258D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\v8_context_snapshot.bin
Size 725KB
SHA256 9c954486def5b03cf2f92f63743c83c024324e1fee6389b9364b9474907300d6
MD5 cbd7658d2470169cb0d5052ffbf28483
SHA1 0954aacca2bf9ccee42b5c26857d09ad49a89810
SHA512 cd0082f5ce0217b995b5a9ee1aa141ee4422c21b0f537a7064d465b0cc2596464402ca617b860542213729db5634a29bc644752799cc1ccc6c4633c5bc8449da
SSDEEP 6144:7t+HwX1l/5K7Rfqz2W6tArYVLrgV2wXuIr2ffLkzdjTncO6vTB5lU7HqpAO1UjM6:HrBK1fqz2W6NPsKXCwlz5DHtM
TLSH
T141F4B3B6F50B8B35CA951B3D8EEB8E4B3A74F09DEE87C10B3151577C65B96A08E4240C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

version

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\version
Size 12B
SHA256 813453b01f338b2158633fcb70863ca25dc0ef47b013336c6da586be8fb24838
MD5 deb9dcc2a2332e09f54c5068430a7acf
SHA1 ce14b02269abbea6dd86df777fda8c1ad9a04316
SHA512 101a6feb545775aaebc64f6cd5f45fd872c513641d015ab17e881845e890d28c6ab39e36ad95757b00211ed4e59efa38afbacdcefcf392c8155cac0d4e642250
MD5 SHA1 SHA512

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\vk_swiftshader.dll
Size 5.3MB
SHA256 d4ef98bd659196430ff70106cd1162adb64a3deaf39bcfd4fd9cabbcc0474cd5
MD5 e7f98265d0a02ca20db7f3b246ab547b
SHA1 5874332e7d10e2c6444f0e9c4a4763c6c3daf02a
SHA512 a15cfc654a94a19695d5d29717ac43fb3e32c497de3b417027d0026b5b8e8e1688bff4bccffcd13e1ec5baef7cfea2db4bec87d7324938005174024c66ec7a81
SSDEEP 49152:Fc0J2N6fsFjOjqtuPyv4JaWGM/sLmy9TTUYvBaql0Ubb3Hpsebg6P4K7AMzOxURV:Fc0J4veg7OpzfT0a
TLSH
T1B6464803F68681D9D06DE679875FA623F631F8800B2276DF56A00F192E6AFE0673D714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Programs\betabrowser\vulkan-1.dll
Size 920KB
SHA256 82aa48df5bf4df069bfc37a34c4a3777b0a1b88ef1d48545f6d7dd0436634de3
MD5 146283d3a96d1b615856e58a3b602e62
SHA1 f3ff702d29024e01d0968925fb63ce94791e25ae
SHA512 b8329aef098101cc8d67921cfd48dc42a44bca5d430b3bf6ea0bd81d6bd447153a6dd25c50bd3798015c063d91b95666dd641f0715aa291a67e1ba9416897b0a
SSDEEP 24576:u88W8vJQ6uErB5dYssF4KcIKNlC1E+Dkw7+DQ6g3v0TAE7yoeH0JG:f8W8JQ6pB5U4KXKNlC1E+Dkw7+DQ6g3M
TLSH
T1F9156C7296948AB9D676C034D9D18A0389F174811322BACF03B817157F6AFF46F7CB29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_cfvgjger.0dw.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_cfvgjger.0dw.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

SpiderBanner.dll

Path C:\Users\Admin\AppData\Local\Temp\nsnD7CE.tmp\SpiderBanner.dll
Size 9KB
SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
MD5 17309e33b596ba3a5693b4d3e85cf8d7
SHA1 7d361836cf53df42021c7f2b148aec9458818c01
SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
TLSH
T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsnD7CE.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsnD7CE.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinShell.dll

Path C:\Users\Admin\AppData\Local\Temp\nsnD7CE.tmp\WinShell.dll
Size 3KB
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
TLSH
T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
MD5 SHA1 SHA512 TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nsnD7CE.tmp\nsExec.dll
Size 6KB
SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
MD5 ec0504e6b8a11d5aad43b296beeb84b2
SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
TLSH
T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nsnD7CE.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\BetaBrowser\Code Cache\wasm\index-dir\temp-index
Size 48B
SHA256 fc95d716d18a63936710bb959029e40fb8d6e0f9fd3105ac80b6399a1251e837
MD5 872602f0d52c5af6eddb0e4a7179ed8a
SHA1 086e293310f2726eca0005c3afd4b7384846f35e
SHA512 19504e62114217759968613af5c50eb9320f2dd88c3bb9385f82af74d9f3c4e986ebe16301c6a6a2f6de9129b998017547c7bcff0dcafa99dd65447143201c9e
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\BetaBrowser\DawnGraphiteCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\BetaBrowser\DawnGraphiteCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\BetaBrowser\DawnGraphiteCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\BetaBrowser\DawnGraphiteCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\BetaBrowser\DawnWebGPUCache\index
Size 256KB
SHA256 948b5f2e24f843c2991231f39a49246559d684d9677034782e2a385ee9b15976
MD5 73e441710b56a32e581116a86c701108
SHA1 041c2ee31a43e14e2f3359413dd5dd9e519a98c5
SHA512 a415d4b37ef21f1c595bca59f3f4c303835e7b72c310b058af89f3269d66a194f773e7b4d4d0ca4f3884f6dec18e9c08c18f6a0e1b92d3131f17ec2f410bbad8
SSDEEP 3:LstlNllkll/llwOl:LsX3lEtlP
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\BetaBrowser\Local State
Size 717B
SHA256 9e95f10a0b073113d1966144e0c0f111eac447e45720e69e4d74ebe653caf361
MD5 b6d94972897e14a43a5950fdacbbf7c6
SHA1 a9e6b7b75a71577dbf2c466d76767bed9193606a
SHA512 e194b96fdf85761ee90ba7a6c3405dcc5a14dbfb89bca71e50da84fea5387891e18959fdd01d6382c0d237440df250e563e61156b2b164a4ab0b542956330111
TLSH
T198014EB2EDF2CB96ED0A0F5A83026B630D03322B084587C4699D48C001E7AC78B0F8B8
MD5 SHA1 SHA512 TLSH

Submit Download

Local State16798a18-3b1f-42da-88e1-fb7169b14ba9.tmp

Path C:\Users\Admin\AppData\Roaming\BetaBrowser\Local State16798a18-3b1f-42da-88e1-fb7169b14ba9.tmp
Size 717B
SHA256 de26926766e5017f7b72dfc53bddc1971960c3ce45045963451d39ae1825b431
MD5 354714751ab55e4ca99b83b2ce5064eb
SHA1 02ca782b4d31d620545c11bc6880f56bcd66e4bf
SHA512 fae28f8093886ccb437e60ad9efba686e4297301be79293c1472aa867580fd677a00710baea1f3a2ecfbb43a978967c4887f21519c5887f76fbbc9af5bd4f351
TLSH
T1FB014EB2EDE2CFD6EC5A0F4A4302A6620D023227088543C4699D4C8001E79CB8B0B8B9
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\BetaBrowser\Local Storage\leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\BetaBrowser\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent Stated247574f-da44-4319-8834-fedefd0405ef.tmp

Path C:\Users\Admin\AppData\Roaming\BetaBrowser\Network\Network Persistent Stated247574f-da44-4319-8834-fedefd0405ef.tmp
Size 476B
SHA256 3da0ec2b1d66c58fe3ce714acfb5584ad37ac6b5a939389a558b36429d1edd74
MD5 ba3b13ad45c950381bb1ce8479c822b5
SHA1 b73fd6ffbdcfac4df9114ac22877b19308871e08
SHA512 ced64dc2440d21d3be783c4a777292ebffda1501bfbe0bb2e834d088aa7d47193776d0a0369afb47489132308139dc02b2a1352f3859b094051356bacf0d1a65
TLSH
T1F2F0DCA6C6D401BE8A5203F05F357923C1BE0819521C3C52C9E4FBCE87F043E061540F
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\BetaBrowser\WidevineCdm\4.10.3112.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\BetaBrowser\WidevineCdm\4.10.3112.0\manifest.json
Size 1005B
SHA256 1cc15465230ffb75fd028ee3b2189c8774f56bc7dee8dd17b952e6ca92144004
MD5 58954048e70c81669675d4f87ab50af1
SHA1 8ab675ea31801bbb91c33fd381f4c202bfd7882e
SHA512 f9b8c236c9404936b93ba92550c21a0344b657c42cd98e091cda32e33fed860d59ac0cb97451ca61b2d8e6a943a983ded569b1d7ecd541e832e3ca87b39ecbd0
TLSH
T161115E00DD384DD326D4B6A21CC6580957661DAF5CC27E54379E161D4F1C8AB927376C
MD5 SHA1 SHA512 TLSH

Submit Download

1090c5d6881985c042370d506e15f1db1d0a88bfb7e9602a9202fac421098eb3

Path C:\Users\Admin\AppData\Roaming\BetaBrowser\component_crx_cache\1090c5d6881985c042370d506e15f1db1d0a88bfb7e9602a9202fac421098eb3
Size 21.9MB
SHA256 1090c5d6881985c042370d506e15f1db1d0a88bfb7e9602a9202fac421098eb3
MD5 322a050bc53af9aad7a659054354862d
SHA1 44dec61c400db851b57e4e2645fb253609db7d1d
SHA512 ae8624becb7619dd9602f416203c54096ae0e23c4c2574c8069e633f9682b0b9bf5bbb95e94fca6610b9581746d5ed648fd41c47d762b174bd5d632937df6689
SSDEEP 393216:vKuarWwW0LmrEr38dudevJCJU2kpq1gL2aVRHA:wWCmz0dwJIkpqCs
TLSH
T16337E14AE35310E9E81ECDF4866E9A62E4343C4E03319BEF17D47A355A727C42A39F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1952_1868357453\_metadata\verified_contents.json
Size 1KB
SHA256 a6ce8c1d0d27c54034e67a83270bf3fd2bdfcc45ffc4b9084357169c00c90f77
MD5 42b331a107b7320d16f115eb7872b3c5
SHA1 3438a81f13c76becc7eb8bf0a7881088e5ad358b
SHA512 afc9393c7a63ec8d95c708eab601ab76887e4600a03b10f3c8c6e6c78c1c48d8b8bc6f059f8f38e66f1e54c5040656b75b6d46b91a795f76dbb5d3c6ac59b333
TLSH
T12F31B7414DD5369EA14E42245AB873AB9F0E71B372C8A51DA9C5900CF4F914ACBD308F
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1952_1868357453\_platform_specific\win_x64\widevinecdm.dll
Size 21.9MB
SHA256 7b44e84403fbb3faee15ca2d56eb8432fdf4eb68812c4460abdd20972528e825
MD5 5614c2225ece73a37e47894ff3c19aa3
SHA1 df3aadd22db3b5841fe488c985365269709b4b27
SHA512 8b8e55347a7a496cfe52222670781654ada20accf21f3e2dd88847e0a7a00cb083609a5f3907bcc1f927c1227de20373a744028466663c5389ad286a46fc3286
SSDEEP 393216:SKuarWwW0LmrEr38dudevJCJU2kpq1gL2aVRHy:dWCmz0dwJIkpqCW
TLSH
T1CC37E14AE35350E9E81ECDF4826E9A62E4343C4E03319BEF17D47A355A727C42A39F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping1952_1868357453\_platform_specific\win_x64\widevinecdm.dll.sig
Size 1KB
SHA256 f9f160cb5ca37ef81a3aa80eeb7fef8b302e18c82d92c34f42503e0ab085ada5
MD5 a0dd5d559b24af4590e5cae3ac11a0fd
SHA1 04b83b414c36ab24fd27fe432a690de636bd2996
SHA512 2d69ea26916ed156f214c17d57c158cb680f1119849b8dd1f7315fd3fa6981c9d6ec2026b494d8e2e70e969205f063979287265a94e73704fe392884e8b4e4ac
TLSH
T1DE21E9DD697012242880793E5FEDF016FD3325C2AA3014FF456B65C2BCE376018C462E
MD5 SHA1 SHA512 TLSH

Submit Download

image.ico

Path C:\Windows\SystemTemp\scoped_dir1952_1276520769\image.ico
Size 107KB
SHA256 2986e62d120af0389aebe2a4912e4b3bdc3c6192700fed85e454620be977751e
MD5 3c019b52e276d88a2b491e64de579876
SHA1 4253a7058f8de58c214a5c7bfbabad137bd3a587
SHA512 ec4bf4029aeccb02ed2cdf975e342f55bcdca4bf2afc46a6f4146fa51c7bf18531c463e00a24686380eb78e1de6ae07ee868c282924ed5f009db4e6b12508dbc
SSDEEP 3072:nlIAaXdSSCBNfW8BaaSX/zIIpVJjxzbr+eKq7gcsC:lrGd7CBNf8B/3B+R8
TLSH
T170B302E3A7D0FD3CEC47339A17B91C22A9E7305518A00326D9416A725ACE4D863F8777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2108-518-0x000001A815C20000-0x000001A815F98000-memory.dmp

Download

memory/2108-417-0x00007FFE04F70000-0x00007FFE04F71000-memory.dmp

Download

memory/2108-416-0x00007FFE054A0000-0x00007FFE054A1000-memory.dmp

Download

memory/2960-570-0x00000249B8020000-0x00000249B8021000-memory.dmp

Download

memory/2960-581-0x00000249B8020000-0x00000249B8021000-memory.dmp

Download

memory/2960-569-0x00000249B8020000-0x00000249B8021000-memory.dmp

Download

memory/2960-580-0x00000249B8020000-0x00000249B8021000-memory.dmp

Download

memory/2960-571-0x00000249B8020000-0x00000249B8021000-memory.dmp

Download

memory/2960-577-0x00000249B8020000-0x00000249B8021000-memory.dmp

Download

memory/2960-578-0x00000249B8020000-0x00000249B8021000-memory.dmp

Download

memory/2960-582-0x00000249B5A60000-0x00000249B5EF0000-memory.dmp

Download

memory/2960-576-0x00000249B8020000-0x00000249B8021000-memory.dmp

Download

memory/2960-579-0x00000249B8020000-0x00000249B8021000-memory.dmp

Download

memory/2960-575-0x00000249B8020000-0x00000249B8021000-memory.dmp

Download

memory/3908-514-0x0000025C80A70000-0x0000025C80F00000-memory.dmp

Download

memory/3908-702-0x0000025C80A70000-0x0000025C80F00000-memory.dmp

Download

memory/3908-524-0x0000025C80A70000-0x0000025C80F00000-memory.dmp

Download

memory/5444-50-0x00000000078D0000-0x00000000078EA000-memory.dmp

Download

memory/5444-47-0x0000000006BB0000-0x0000000006BCE000-memory.dmp

Download

memory/5444-21-0x0000000005410000-0x0000000005496000-memory.dmp

Download

memory/5444-20-0x00000000057F0000-0x0000000005E1A000-memory.dmp

Download

memory/5444-23-0x0000000005E90000-0x0000000005EF6000-memory.dmp

Download

memory/5444-24-0x0000000005F10000-0x0000000005F76000-memory.dmp

Download

memory/5444-31-0x0000000005F80000-0x00000000062D7000-memory.dmp

Download

memory/5444-19-0x00000000051B0000-0x00000000051C0000-memory.dmp

Download

memory/5444-32-0x0000000005E70000-0x0000000005E80000-memory.dmp

Download

memory/5444-33-0x00000000063F0000-0x00000000064F4000-memory.dmp

Download

memory/5444-18-0x0000000002EC0000-0x0000000002EF6000-memory.dmp

Download

memory/5444-17-0x00000000051B0000-0x00000000051C0000-memory.dmp

Download

memory/5444-34-0x0000000006560000-0x000000000657E000-memory.dmp

Download

memory/5444-35-0x0000000006590000-0x00000000065DC000-memory.dmp

Download

memory/5444-36-0x000000007F2F0000-0x000000007F300000-memory.dmp

Download

memory/5444-37-0x0000000006B70000-0x0000000006BA4000-memory.dmp

Download

memory/5444-38-0x0000000070190000-0x00000000701DC000-memory.dmp

Download

memory/5444-40-0x00000000051B0000-0x00000000051C0000-memory.dmp

Download

memory/5444-39-0x00000000051B0000-0x00000000051C0000-memory.dmp

Download

memory/5444-22-0x00000000056A0000-0x00000000056C2000-memory.dmp

Download

memory/5444-48-0x00000000077F0000-0x0000000007894000-memory.dmp

Download

memory/5444-49-0x0000000007F20000-0x000000000859A000-memory.dmp

Download

memory/5444-55-0x0000000007B40000-0x0000000007B56000-memory.dmp

Download

memory/5444-51-0x0000000007950000-0x000000000795A000-memory.dmp

Download

memory/5444-52-0x0000000007B10000-0x0000000007B3A000-memory.dmp

Download

memory/5444-53-0x0000000007B40000-0x0000000007B64000-memory.dmp

Download

memory/5444-54-0x00000000702F0000-0x0000000070647000-memory.dmp

Download

memory/5708-103-0x0000000007430000-0x0000000007438000-memory.dmp

Download

memory/5708-102-0x00000000703C0000-0x0000000070717000-memory.dmp

Download

memory/5708-95-0x0000000070190000-0x00000000701DC000-memory.dmp

Download

memory/5708-87-0x00000000059F0000-0x0000000005D47000-memory.dmp

Download

memory/5920-79-0x0000000007DD0000-0x0000000007E1A000-memory.dmp

Download

memory/5920-63-0x00000000052F0000-0x0000000005300000-memory.dmp

Download

memory/5920-62-0x00000000052F0000-0x0000000005300000-memory.dmp

Download

memory/5920-70-0x00000000060D0000-0x0000000006427000-memory.dmp

Download

memory/5920-72-0x0000000070190000-0x00000000701DC000-memory.dmp

Download

memory/5920-82-0x0000000007F60000-0x0000000007F6A000-memory.dmp

Download

memory/5920-81-0x0000000007D90000-0x0000000007DA1000-memory.dmp

Download

memory/5920-80-0x0000000007EC0000-0x0000000007F56000-memory.dmp

Download